11db70327f2468e070f1fa0e6665acfa00ed250fe8b6cf10e6bdf67f7c6f3b11

Analysis

max time kernel
40s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03/10/2022, 18:37

Target

11db70327f2468e070f1fa0e6665acfa00ed250fe8b6cf10e6bdf67f7c6f3b11.exe
Size

180KB
MD5

3305d0e73cea156edb0054fb0e4922af
SHA1

304ca88cf6bf77fcafd2f63ef4fd423d64ccc0cb
SHA256

11db70327f2468e070f1fa0e6665acfa00ed250fe8b6cf10e6bdf67f7c6f3b11
SHA512

af6f3e55b19953e0338d461ad6e8f58774896a9ec0ea4c05bff10ff1e1fe86b6fe0ff5bbce32fed316febec3b215a99708f01840b55a6cc268dac9c473868ec5
SSDEEP

3072:sebJzLgB54gNTzfMgRclpFPujNi0kK0AAZBbJ12jJrbZ8UQiogg7jS57x:LaB54gNTzfb2pFC5BAYJ3ZQi57x

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1884	11db70327f2468e070f1fa0e6665acfa00ed250fe8b6cf10e6bdf67f7c6f3b11.exe

C:\Users\Admin\AppData\Local\Temp\11db70327f2468e070f1fa0e6665acfa00ed250fe8b6cf10e6bdf67f7c6f3b11.exe
"C:\Users\Admin\AppData\Local\Temp\11db70327f2468e070f1fa0e6665acfa00ed250fe8b6cf10e6bdf67f7c6f3b11.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1884

memory/1884-54-0x0000000076171000-0x0000000076173000-memory.dmp

Filesize
8KB

Download
memory/1884-55-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/1884-56-0x00000000002C0000-0x00000000002F1000-memory.dmp

Filesize
196KB

Download
memory/1884-57-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/1884-58-0x00000000002C0000-0x00000000002C6000-memory.dmp

Filesize
24KB

Download