b6fc1c6c065194ede6a66c42ff491b0d689a3656b1104fa04d3ad9375fc34c46

Analysis

max time kernel
130s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27/11/2022, 08:26

Target
b6fc1c6c065194ede6a66c42ff491b0d689a3656b1104fa04d3ad9375fc34c46.exe
Size 161KB
Sample221127-kbvbysga7y
SHA256 b6fc1c6c065194ede6a66c42ff491b0d689a3656b1104fa04d3ad9375fc34c46
MD5 a4bda9f517ea66836e9430f31c21e1cb
SHA1 0eaac001e6e0d833a4427231f9f690d7a6935720
SHA512 3a5814c461df334b5e2b197e1767d1df564249b0aedac9946fb59a1f92d3e78e2b4c5523a9c2c3db52333954cdfe85ecbfca55b5ae6c77259c753d83565e477c
SSDEEP 3072:lC6WiK/WWxeH9I6EqxWvwOHRrUjFpnJMSkAT7UsRi2lrj:AYQpcFxJMrATYsH
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4948	b6fc1c6c065194ede6a66c42ff491b0d689a3656b1104fa04d3ad9375fc34c46.exe
4948	b6fc1c6c065194ede6a66c42ff491b0d689a3656b1104fa04d3ad9375fc34c46.exe

C:\Users\Admin\AppData\Local\Temp\b6fc1c6c065194ede6a66c42ff491b0d689a3656b1104fa04d3ad9375fc34c46.exe
"C:\Users\Admin\AppData\Local\Temp\b6fc1c6c065194ede6a66c42ff491b0d689a3656b1104fa04d3ad9375fc34c46.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4948

memory/4948-132-0x0000000074940000-0x0000000074EF1000-memory.dmp

Download

memory/4948-133-0x0000000074940000-0x0000000074EF1000-memory.dmp

Download