f1f034e1ebc4c5ded82bd61f3f8ac65df6b21b6c267707fc1304703b304773f9

Analysis

max time kernel
91s
max time network
109s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
14-02-2023 18:37

Target

f1f034e1ebc4c5ded82bd61f3f8ac65df6b21b6c267707fc1304703b304773f9.exe
Size

2.6MB
MD5

d955469b83611ca539dce8eca6c7450f
SHA1

17cc4f57763e90b63a56109897a0f8c8b2a48322
SHA256

f1f034e1ebc4c5ded82bd61f3f8ac65df6b21b6c267707fc1304703b304773f9
SHA512

384f4bc5a7a9c42901dffdc4f181ce406acd90e5483a41a78d94fe923314e729e52c58b2f8f2d4dcff90878a5c02010d942c203c3047b9ff3bd87cccbca967e0
SSDEEP

49152:TKxkXt+4tHGUnrNbUxAmfY1MKcoPX4zGbjlAJ9TwEI5+DuFANuXI7ix7U:Tf3mi1WTGPcov5VALBIADuGNuYQQ

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

f1f034e1ebc4c5ded82bd61f3f8ac65df6b21b6c267707fc1304703b304773f9.exe

pid	process
4936	f1f034e1ebc4c5ded82bd61f3f8ac65df6b21b6c267707fc1304703b304773f9.exe
4936	f1f034e1ebc4c5ded82bd61f3f8ac65df6b21b6c267707fc1304703b304773f9.exe
4936	f1f034e1ebc4c5ded82bd61f3f8ac65df6b21b6c267707fc1304703b304773f9.exe

C:\Users\Admin\AppData\Local\Temp\f1f034e1ebc4c5ded82bd61f3f8ac65df6b21b6c267707fc1304703b304773f9.exe
"C:\Users\Admin\AppData\Local\Temp\f1f034e1ebc4c5ded82bd61f3f8ac65df6b21b6c267707fc1304703b304773f9.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4936

memory/4936-133-0x0000000000400000-0x0000000000CED000-memory.dmp

Filesize
8.9MB

Download
memory/4936-132-0x0000000000400000-0x0000000000CED000-memory.dmp

Filesize
8.9MB

Download
memory/4936-134-0x0000000000400000-0x0000000000CED000-memory.dmp

Filesize
8.9MB

Download
memory/4936-135-0x0000000000400000-0x0000000000CED000-memory.dmp

Filesize
8.9MB

Download
memory/4936-136-0x0000000000400000-0x0000000000CED000-memory.dmp

Filesize
8.9MB

Download
memory/4936-137-0x0000000000400000-0x0000000000CED000-memory.dmp

Filesize
8.9MB

Download