790bf6d261dca31cf47d4a354aaeed3da4779549d4d62f984b1c16b74ac3f27b

Analysis

max time kernel
28s
max time network
30s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
15-02-2023 20:20

Target

790bf6d261dca31cf47d4a354aaeed3da4779549d4d62f984b1c16b74ac3f27b.exe
Size

248KB
MD5

bbf72b01739f4a6975723692dc7ec821
SHA1

27b1d6e9a7c6e1a23b2bf4b27dddcf6eccd833ee
SHA256

790bf6d261dca31cf47d4a354aaeed3da4779549d4d62f984b1c16b74ac3f27b
SHA512

0c6f40ff1ac38c8f661afc132b37b6fa84b7a6fe04f36defc3d82aff7ad32640dd47fddf35eea2ceca69527e82654e0b0f7b191023f2b225c1b93344595bd3e8
SSDEEP

6144:njezLPjMD2luLbmScagNR3YcG6zOxLK7c:nArjM6lKbmIgBM6cW

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

790bf6d261dca31cf47d4a354aaeed3da4779549d4d62f984b1c16b74ac3f27b.exe

pid	process
1364	790bf6d261dca31cf47d4a354aaeed3da4779549d4d62f984b1c16b74ac3f27b.exe
1364	790bf6d261dca31cf47d4a354aaeed3da4779549d4d62f984b1c16b74ac3f27b.exe

C:\Users\Admin\AppData\Local\Temp\790bf6d261dca31cf47d4a354aaeed3da4779549d4d62f984b1c16b74ac3f27b.exe
"C:\Users\Admin\AppData\Local\Temp\790bf6d261dca31cf47d4a354aaeed3da4779549d4d62f984b1c16b74ac3f27b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1364

memory/1364-54-0x0000000074DE1000-0x0000000074DE3000-memory.dmp

Filesize
8KB

Download
memory/1364-55-0x0000000000400000-0x00000000004AF000-memory.dmp

Filesize
700KB

Download
memory/1364-57-0x0000000000400000-0x00000000004AF000-memory.dmp

Filesize
700KB

Download
memory/1364-56-0x0000000000400000-0x00000000004AF000-memory.dmp

Filesize
700KB

Download
memory/1364-58-0x0000000000400000-0x00000000004AF000-memory.dmp

Filesize
700KB

Download
memory/1364-59-0x0000000000400000-0x00000000004AF000-memory.dmp

Filesize
700KB

Download