fb12b48aecf8e157d4832ca134527a6373bff229b9af2cc23b6c20478a8d8f47

Analysis

max time kernel
37s
max time network
41s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 17:20

Target

fb12b48aecf8e157d4832ca134527a6373bff229b9af2cc23b6c20478a8d8f47.exe
Size

3.0MB
MD5

ef17178f6064c1ff6c15463a82883f54
SHA1

0c22dc9b898bc6b8cfbd901e282802713a8e5488
SHA256

fb12b48aecf8e157d4832ca134527a6373bff229b9af2cc23b6c20478a8d8f47
SHA512

3c40e928c4ba54821ca1207348b53ca9aa736bb2a1a776d3b847e369e9d7eb2c3e256616551e91d20183cf7c642ce8e2957fa87c569ea5bf08b08d5d0c81c512
SSDEEP

98304:jp4Enyny6nfslB78LkKpOOB+kJN14lVyul/:t4jy6nap6pOOvJcDL

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

fb12b48aecf8e157d4832ca134527a6373bff229b9af2cc23b6c20478a8d8f47.exe

pid	process
1928	fb12b48aecf8e157d4832ca134527a6373bff229b9af2cc23b6c20478a8d8f47.exe
1928	fb12b48aecf8e157d4832ca134527a6373bff229b9af2cc23b6c20478a8d8f47.exe

C:\Users\Admin\AppData\Local\Temp\fb12b48aecf8e157d4832ca134527a6373bff229b9af2cc23b6c20478a8d8f47.exe
"C:\Users\Admin\AppData\Local\Temp\fb12b48aecf8e157d4832ca134527a6373bff229b9af2cc23b6c20478a8d8f47.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1928

memory/1928-54-0x00000000762B1000-0x00000000762B3000-memory.dmp

Filesize
8KB

Download
memory/1928-55-0x0000000000400000-0x000000000080E000-memory.dmp

Filesize
4.1MB

Download
memory/1928-56-0x0000000000400000-0x000000000080E000-memory.dmp

Filesize
4.1MB

Download