1379fd67588484b8817a50e5fdfb37ced156e44b3a4f0fdd466409e481733ef5

Analysis

max time kernel
40s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
25-11-2022 22:40

Target

ʹ֮/ƽⲹ.exe
Size

672KB
MD5

b886e38d94fdcd72b00b779c65eb23f3
SHA1

dcb6f22350762df904843f535823d6f950cdbcb9
SHA256

d65a42c9288c8099eca1957c95f90a13b66a4570d3be571179ab27f3caf2bf58
SHA512

37aa34e17efc2a20233dcb8366b86d2c80425b9235fb5a3a764f764268666e2ca4496958643a6c4d922611001fe96da95cee961576362702de44fa4de3ec3c87
SSDEEP

6144:Gfk2ENShAA8Pf7Yweump1L0k4EvKB2au8+yKd9iI0qV9MsbwP018HAemY7qs0mBn:GfkbNXPf7YfumpVLF8+d4IfR5CHhmYqw

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

ƽⲹ.exe

pid process

892 ƽⲹ.exe
892 ƽⲹ.exe

pid	process
892	ƽⲹ.exe
892	ƽⲹ.exe

C:\Users\Admin\AppData\Local\Temp\ʹ֮\ƽⲹ.exe
"C:\Users\Admin\AppData\Local\Temp\ʹ֮\ƽⲹ.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:892

memory/892-54-0x0000000075521000-0x0000000075523000-memory.dmp

Filesize
8KB

Download