dfaa1b772ac857e4bcce886c37e6e130b5b0df03ac158a009aad415e76a48964

Analysis

max time kernel
144s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
27/10/2022, 23:49

Target

dfaa1b772ac857e4bcce886c37e6e130b5b0df03ac158a009aad415e76a48964.exe
Size

3.7MB
MD5

ce89c5da147b69b3b6841d266c1756de
SHA1

df7a8d0b01f452993524a4cab9284658c9e67eac
SHA256

dfaa1b772ac857e4bcce886c37e6e130b5b0df03ac158a009aad415e76a48964
SHA512

33c3517f46b95e043f4cfed10e3abb4a8f648538c51a1c54cf1c4c46b56bcb554ec8409fa822d18e2f8a287aaeeacc75da0557dcd2a6f72841b90d4e15bbb93a
SSDEEP

24576:D0eeGu7iu/g/qdafSDXUOLcOWdEfcI3Sd8tL5LRONVuExdwNgdSt6NRJHCQ7aiXo:DleAu/giQciY

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1904	dfaa1b772ac857e4bcce886c37e6e130b5b0df03ac158a009aad415e76a48964.exe
1904	dfaa1b772ac857e4bcce886c37e6e130b5b0df03ac158a009aad415e76a48964.exe

C:\Users\Admin\AppData\Local\Temp\dfaa1b772ac857e4bcce886c37e6e130b5b0df03ac158a009aad415e76a48964.exe
"C:\Users\Admin\AppData\Local\Temp\dfaa1b772ac857e4bcce886c37e6e130b5b0df03ac158a009aad415e76a48964.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1904

memory/1904-54-0x0000000076DC1000-0x0000000076DC3000-memory.dmp

Filesize
8KB

Download
memory/1904-55-0x0000000000400000-0x00000000007DC000-memory.dmp

Filesize
3.9MB

Download
memory/1904-56-0x0000000000400000-0x00000000007DC000-memory.dmp

Filesize
3.9MB

Download