5511a5a61ad9cec55d014dc010d57cc84fc21494a53bc9abb06065cc900dd643

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
10-02-2023 21:52

Target

5511a5a61ad9cec55d014dc010d57cc84fc21494a53bc9abb06065cc900dd643.exe
Size

4.6MB
MD5

f93326378241bcaea0c4a94f9e033b93
SHA1

41dae6af8452d15a94315043a2395b7610db78c7
SHA256

5511a5a61ad9cec55d014dc010d57cc84fc21494a53bc9abb06065cc900dd643
SHA512

f1bdf30accbdc778f682e5d2c00141ad3e6ced0230d4138c32b2a73f06f4685ae19254fd13ae8bf0f493312c2a6ea771e6287cd103e546ab1326e9fdeee4343c
SSDEEP

98304:JKb+hMsWay0oJ9uSxX5xN07cYE5+HXfxTAKTuauy2vAV:u+hMsFPoJ9xd5xNcGyPxTbuauyEM

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

5511a5a61ad9cec55d014dc010d57cc84fc21494a53bc9abb06065cc900dd643.exe

pid	process
1108	5511a5a61ad9cec55d014dc010d57cc84fc21494a53bc9abb06065cc900dd643.exe
1108	5511a5a61ad9cec55d014dc010d57cc84fc21494a53bc9abb06065cc900dd643.exe
1108	5511a5a61ad9cec55d014dc010d57cc84fc21494a53bc9abb06065cc900dd643.exe

C:\Users\Admin\AppData\Local\Temp\5511a5a61ad9cec55d014dc010d57cc84fc21494a53bc9abb06065cc900dd643.exe
"C:\Users\Admin\AppData\Local\Temp\5511a5a61ad9cec55d014dc010d57cc84fc21494a53bc9abb06065cc900dd643.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1108

memory/1108-54-0x0000000075B41000-0x0000000075B43000-memory.dmp

Filesize
8KB

Download
memory/1108-55-0x0000000000400000-0x00000000012E1000-memory.dmp

Filesize
14.9MB

Download
memory/1108-56-0x0000000000400000-0x00000000012E1000-memory.dmp

Filesize
14.9MB

Download
memory/1108-57-0x0000000000400000-0x00000000012E1000-memory.dmp

Filesize
14.9MB

Download
memory/1108-58-0x0000000000400000-0x00000000012E1000-memory.dmp

Filesize
14.9MB

Download
memory/1108-59-0x0000000000400000-0x00000000012E1000-memory.dmp

Filesize
14.9MB

Download
memory/1108-60-0x0000000000400000-0x00000000012E1000-memory.dmp

Filesize
14.9MB

Download