a4f1c692e2a34a48eba903d6a46a7aae0a9766a091703341fa63e230e738243c

Analysis

max time kernel
305s
max time network
393s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 09:48

Target

a4f1c692e2a34a48eba903d6a46a7aae0a9766a091703341fa63e230e738243c.exe
Size

2.1MB
MD5

92fd731af46d552f67e4dead0e371ffd
SHA1

116561ddb770e8c9fae587ffb3ae68610a1d72a5
SHA256

a4f1c692e2a34a48eba903d6a46a7aae0a9766a091703341fa63e230e738243c
SHA512

81ce767d7e574888c8227ed99c691f18607c59f0d8420e70a0e757fe190ff3de4143f2beaff0178bd83aaace2f39a36573090b3241a558c9a167782612e451f3
SSDEEP

24576:hSjhOMesDwF5Hm2hA6+tpopN/1O2d2CtTmE5pzvGalH4ymUWvrI:hKh/9IG2h0taHO2pp6

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

a4f1c692e2a34a48eba903d6a46a7aae0a9766a091703341fa63e230e738243c.exe

pid process

2544 a4f1c692e2a34a48eba903d6a46a7aae0a9766a091703341fa63e230e738243c.exe

pid	process
2544	a4f1c692e2a34a48eba903d6a46a7aae0a9766a091703341fa63e230e738243c.exe

C:\Users\Admin\AppData\Local\Temp\a4f1c692e2a34a48eba903d6a46a7aae0a9766a091703341fa63e230e738243c.exe
"C:\Users\Admin\AppData\Local\Temp\a4f1c692e2a34a48eba903d6a46a7aae0a9766a091703341fa63e230e738243c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2544

memory/2544-132-0x0000000000400000-0x0000000000947000-memory.dmp

Filesize
5.3MB

Download
memory/2544-134-0x0000000002750000-0x00000000027AA000-memory.dmp

Filesize
360KB

Download
memory/2544-135-0x0000000003ED0000-0x00000000043A0000-memory.dmp

Filesize
4.8MB

Download
memory/2544-136-0x0000000003ED0000-0x00000000043A0000-memory.dmp

Filesize
4.8MB

Download