Analysis
-
max time kernel
90s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
09/02/2023, 03:38
General
-
Target
78b3c27fa22e62efd2f2d05d7e17e8aa08b04004320c3a56a91169f6d79bb670.exe
-
Size
1016KB
-
MD5
bfa8df11a67728c6a6f37ab200c6dae4
-
SHA1
2f069c53a4ba23a6b9972dd25354930c95e11104
-
SHA256
78b3c27fa22e62efd2f2d05d7e17e8aa08b04004320c3a56a91169f6d79bb670
-
SHA512
a80fda21d60592db4d742394dd8dee9019b653b5f30df35e71d47f8d86bd2c42c5ab9894edc6fa107777658f3710b2c8aa0e030508fe37d60bb6d9168c588a6d
-
SSDEEP
24576:+3b8bZpWoa6oSoR4upTIvCWPyQj+TJ8lrg:rZMR6oSoR4OcxP+8y
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\78b3c27fa22e62efd2f2d05d7e17e8aa08b04004320c3a56a91169f6d79bb670.exe"C:\Users\Admin\AppData\Local\Temp\78b3c27fa22e62efd2f2d05d7e17e8aa08b04004320c3a56a91169f6d79bb670.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\splwow64.exeC:\Windows\splwow64.exe 122882⤵
-