f0821fa39010f70498bcc638986d82faeca852e3512b792e91bbae9fa3f28f27

Analysis

max time kernel
145s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
14-02-2023 18:34

Target

f0821fa39010f70498bcc638986d82faeca852e3512b792e91bbae9fa3f28f27.exe
Size

2.6MB
MD5

6429c86d58cc051f089d3ddf1dde431f
SHA1

371263e35e88c6725e9bec83c030502e9e1a78a0
SHA256

f0821fa39010f70498bcc638986d82faeca852e3512b792e91bbae9fa3f28f27
SHA512

dc5a97680ee81653b597e6fe348f9b008ab9c4e92024fb3d5959f42f5a275ebd462bacc559405dd236325741db650eadf459d32731cdf1d885740073c85ef647
SSDEEP

49152:YTetvJxcHKcfn5r2Dx3v01bKoxTgrOZvY7BpplNb4Sjz2xQARciXHWiSAuWlf:pJxI3ElsbKHwvUBJN8y+NXHWiSX0

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

f0821fa39010f70498bcc638986d82faeca852e3512b792e91bbae9fa3f28f27.exe

pid	process
4856	f0821fa39010f70498bcc638986d82faeca852e3512b792e91bbae9fa3f28f27.exe
4856	f0821fa39010f70498bcc638986d82faeca852e3512b792e91bbae9fa3f28f27.exe
4856	f0821fa39010f70498bcc638986d82faeca852e3512b792e91bbae9fa3f28f27.exe

C:\Users\Admin\AppData\Local\Temp\f0821fa39010f70498bcc638986d82faeca852e3512b792e91bbae9fa3f28f27.exe
"C:\Users\Admin\AppData\Local\Temp\f0821fa39010f70498bcc638986d82faeca852e3512b792e91bbae9fa3f28f27.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4856

memory/4856-132-0x0000000000400000-0x0000000000CE1000-memory.dmp

Filesize
8.9MB

Download
memory/4856-133-0x0000000000400000-0x0000000000CE1000-memory.dmp

Filesize
8.9MB

Download
memory/4856-134-0x0000000000400000-0x0000000000CE1000-memory.dmp

Filesize
8.9MB

Download
memory/4856-135-0x0000000000400000-0x0000000000CE1000-memory.dmp

Filesize
8.9MB

Download
memory/4856-136-0x0000000000400000-0x0000000000CE1000-memory.dmp

Filesize
8.9MB

Download
memory/4856-137-0x0000000000400000-0x0000000000CE1000-memory.dmp

Filesize
8.9MB

Download