3ead00becebe5a01f064e7e5615cc0ad0279843011d4b60e5852da069cff6a0d

Analysis

max time kernel
90s
max time network
107s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 18:10

Target

2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe
Size

160KB
MD5

177b75910ae8c0091bafef4950c0b224
SHA1

d4dfb2d2b40224310fbd6d928bf7eded03d814bd
SHA256

3d5fda867fdfb3f414b8edcdda6cefd89118df4399043c35f8e901dae66f7b1b
SHA512

c315ba1d9255fc93ae42a20549645e4a2f2eddddc89b65422c3b8b78f951cba432eff66ab2fac6c1061cfd0738d0918b7730a0b0af4ccfc322a1f97c30e5dc47
SSDEEP

3072:A7tcYSClxQuNuqBkXhQRFFO98DZsJxV1bhZuHKYUl9DGLeb+crM8:otcclxTRjfDZs/Ph4HKYfBt8

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4844	2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe
4844	2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe

C:\Users\Admin\AppData\Local\Temp\2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe
"C:\Users\Admin\AppData\Local\Temp\2014_11rechnungonline_pdf_vodafone_0095890374_537999190_82135674.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4844