ff163c9222f1b46bc17fab89a55dd2b4df458ff4963a9449819041902dfbf263

Analysis

max time kernel
140s
max time network
51s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
25-11-2022 19:18

Target

ff163c9222f1b46bc17fab89a55dd2b4df458ff4963a9449819041902dfbf263.exe
Size

177KB
MD5

1987283bd9831c3ecd37a53f6337d3eb
SHA1

6f9f76ab13a3503775d927c5488f373cb804621d
SHA256

ff163c9222f1b46bc17fab89a55dd2b4df458ff4963a9449819041902dfbf263
SHA512

5f2a5beb946e98b6bd666dcfa53086d8a0577344da286acdc424ff4560ccb90fe515cd3fb7e944cf193509235fcc8d3e35023f114cd4e7992a0db41100fc63c9
SSDEEP

3072:2U+pgCpXuHpCvcDA1gZz45v8NvE4rCsca2TOjrr/jK5FQtnU+zMD:5+pgCpXuYvcTZw65JATl+

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

ff163c9222f1b46bc17fab89a55dd2b4df458ff4963a9449819041902dfbf263.exe

pid	process
1744	ff163c9222f1b46bc17fab89a55dd2b4df458ff4963a9449819041902dfbf263.exe
1744	ff163c9222f1b46bc17fab89a55dd2b4df458ff4963a9449819041902dfbf263.exe

C:\Users\Admin\AppData\Local\Temp\ff163c9222f1b46bc17fab89a55dd2b4df458ff4963a9449819041902dfbf263.exe
"C:\Users\Admin\AppData\Local\Temp\ff163c9222f1b46bc17fab89a55dd2b4df458ff4963a9449819041902dfbf263.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1744

memory/1744-54-0x0000000074DA1000-0x0000000074DA3000-memory.dmp

Filesize
8KB

Download
memory/1744-55-0x0000000000400000-0x0000000000434000-memory.dmp

Filesize
208KB

Download
memory/1744-56-0x0000000000400000-0x0000000000434000-memory.dmp

Filesize
208KB

Download