681c90c7fb444b91aa4f0692e16248e7b6dddb8c82496470383efbe7d2e7a8b1

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
14-02-2023 18:28

Target

681c90c7fb444b91aa4f0692e16248e7b6dddb8c82496470383efbe7d2e7a8b1.exe
Size

2.6MB
MD5

773959709adc29b2057775436b66032a
SHA1

984dccec9598766eddf40f368a6a4ff77f5981f1
SHA256

681c90c7fb444b91aa4f0692e16248e7b6dddb8c82496470383efbe7d2e7a8b1
SHA512

169b0ff1499bf84f87190fd125190e1d3637e66e930300268c386f4c4e49cf840a7eb760173ea4983efc881c1b8936fc6e8ecd9ac6f36767b0d173501b40dfbb
SSDEEP

49152:tUGF9qHcclIFmYGyJsl2nnGUt8u0ijYZQTtm/C+uRMeQeEgGBASs/fv5VT:tURHlIgvyjfSQqQhmqDnEgkASs/fvrT

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

681c90c7fb444b91aa4f0692e16248e7b6dddb8c82496470383efbe7d2e7a8b1.exe

pid	process
1720	681c90c7fb444b91aa4f0692e16248e7b6dddb8c82496470383efbe7d2e7a8b1.exe
1720	681c90c7fb444b91aa4f0692e16248e7b6dddb8c82496470383efbe7d2e7a8b1.exe
1720	681c90c7fb444b91aa4f0692e16248e7b6dddb8c82496470383efbe7d2e7a8b1.exe

C:\Users\Admin\AppData\Local\Temp\681c90c7fb444b91aa4f0692e16248e7b6dddb8c82496470383efbe7d2e7a8b1.exe
"C:\Users\Admin\AppData\Local\Temp\681c90c7fb444b91aa4f0692e16248e7b6dddb8c82496470383efbe7d2e7a8b1.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1720

memory/1720-54-0x0000000074BB1000-0x0000000074BB3000-memory.dmp

Filesize
8KB

Download
memory/1720-55-0x0000000000400000-0x0000000000CC9000-memory.dmp

Filesize
8.8MB

Download
memory/1720-56-0x0000000000400000-0x0000000000CC9000-memory.dmp

Filesize
8.8MB

Download
memory/1720-57-0x0000000000400000-0x0000000000CC9000-memory.dmp

Filesize
8.8MB

Download
memory/1720-58-0x0000000000400000-0x0000000000CC9000-memory.dmp

Filesize
8.8MB

Download
memory/1720-59-0x0000000000400000-0x0000000000CC9000-memory.dmp

Filesize
8.8MB

Download
memory/1720-60-0x0000000000400000-0x0000000000CC9000-memory.dmp

Filesize
8.8MB

Download