9e017d9b3fe151aec3478c385ce6fe90359a3c02b26abae414b1e3a3a95362b9

Analysis

max time kernel
55s
max time network
31s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
24-11-2022 08:20

Target

HA_Animated_GIF_producer_V5.2_FULL_ata/PRODUCER.exe
Size

2.3MB
MD5

b3e5f34563580df7a2398d9bfa3817fc
SHA1

9cf1650498c3c0b6b0bb6ccc08f2d13484c0e320
SHA256

96d83a59f3c398f3304fd5515b3c0115294378f1f097e6262ebc7515d5524d85
SHA512

f85278c32aa202e15d3823dd605d52da267401685c4b6579cf615273ed755bd45d186ccfb050c8999961b7fe7c2cb78571779ce8f23c9a9d8e446a334ae9e21d
SSDEEP

49152:4efVh7G0rrM5M0AH0suojydrMqaYGptfl3iqwSwwiOBwW8R:4ehrrM5M0a0sbydrMZpt93aSwwiOBw3

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

PRODUCER.exe

pid process

1948 PRODUCER.exe

pid	process
1948	PRODUCER.exe

C:\Users\Admin\AppData\Local\Temp\HA_Animated_GIF_producer_V5.2_FULL_ata\PRODUCER.exe
"C:\Users\Admin\AppData\Local\Temp\HA_Animated_GIF_producer_V5.2_FULL_ata\PRODUCER.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1948

memory/1948-54-0x0000000075DA1000-0x0000000075DA3000-memory.dmp

Filesize
8KB

Download
memory/1948-55-0x0000000000400000-0x0000000000BB4000-memory.dmp

Filesize
7.7MB

Download
memory/1948-56-0x0000000000400000-0x0000000000BB4000-memory.dmp

Filesize
7.7MB

Download
memory/1948-57-0x0000000000400000-0x0000000000BB4000-memory.dmp

Filesize
7.7MB

Download
memory/1948-58-0x0000000000400000-0x0000000000BB4000-memory.dmp

Filesize
7.7MB

Download
memory/1948-59-0x0000000000400000-0x0000000000BB4000-memory.dmp

Filesize
7.7MB

Download
memory/1948-60-0x0000000000400000-0x0000000000BB4000-memory.dmp

Filesize
7.7MB

Download