6a06a73bc05b18ac3da66feb8db4954c649d8dc0b9823dd72a3a06c91439a6cd

Analysis

max time kernel
44s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 09:07

Target

6a06a73bc05b18ac3da66feb8db4954c649d8dc0b9823dd72a3a06c91439a6cd.exe
Size

18KB
MD5

ace5d20902c01663b684bc66d72c341f
SHA1

3ad2780cff3b6b570cee8912cfaadb9595dd8334
SHA256

6a06a73bc05b18ac3da66feb8db4954c649d8dc0b9823dd72a3a06c91439a6cd
SHA512

84193e321e40108b8fbb0ad0a3935e3c6ce2837a3ae26264ffd5877f869b31df28495ecaebef0082854a80120e03a73e4e12aa340fa1f1fe6d037bb037f2b386
SSDEEP

384:DnBAAWXUrRH0/QlAWYhNTbvXus1ngkBxGjQVOr56DSBDqcc:DnBAHKULPhNbv+s1gkXyQNSBW

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

6a06a73bc05b18ac3da66feb8db4954c649d8dc0b9823dd72a3a06c91439a6cd.exe

pid	process
1600	6a06a73bc05b18ac3da66feb8db4954c649d8dc0b9823dd72a3a06c91439a6cd.exe
1600	6a06a73bc05b18ac3da66feb8db4954c649d8dc0b9823dd72a3a06c91439a6cd.exe
1600	6a06a73bc05b18ac3da66feb8db4954c649d8dc0b9823dd72a3a06c91439a6cd.exe

C:\Users\Admin\AppData\Local\Temp\6a06a73bc05b18ac3da66feb8db4954c649d8dc0b9823dd72a3a06c91439a6cd.exe
"C:\Users\Admin\AppData\Local\Temp\6a06a73bc05b18ac3da66feb8db4954c649d8dc0b9823dd72a3a06c91439a6cd.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1600

memory/1600-56-0x0000000076461000-0x0000000076463000-memory.dmp

Filesize
8KB

Download
memory/1600-57-0x0000000000400000-0x000000000040D000-memory.dmp

Filesize
52KB

Download
memory/1600-58-0x0000000000400000-0x000000000040D000-memory.dmp

Filesize
52KB

Download