b278a108d4cde5b7a50ff2d6ea6a8c363e73cccde6ae94a853583a2371b2ac24

Analysis

max time kernel
125s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
16-02-2023 18:35

Target

b278a108d4cde5b7a50ff2d6ea6a8c363e73cccde6ae94a853583a2371b2ac24.exe
Size

3.0MB
MD5

6a5daccc7b49bb2c96a9a213c09d778a
SHA1

8614927a6ba2bbc216954a732a9fb5bf34714529
SHA256

b278a108d4cde5b7a50ff2d6ea6a8c363e73cccde6ae94a853583a2371b2ac24
SHA512

d2136a29fe202cce22bc0852b6a1708fcb39ecc94cf7194a6d317ee29d18e91a4a9abc5b96d2e54456e7fa7e4074a3b6d3960a07a16f840a982020aa03e2b044
SSDEEP

49152:84jc6hgS8JUuyLkbkhef6cnVe+j8pojj2e3XdH/ANXtBZGnfcxjEGc23MWP/:8W6uu+kcef6cVe+/jBU70cEGc+3

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

b278a108d4cde5b7a50ff2d6ea6a8c363e73cccde6ae94a853583a2371b2ac24.exe

pid	process
1836	b278a108d4cde5b7a50ff2d6ea6a8c363e73cccde6ae94a853583a2371b2ac24.exe
1836	b278a108d4cde5b7a50ff2d6ea6a8c363e73cccde6ae94a853583a2371b2ac24.exe
1836	b278a108d4cde5b7a50ff2d6ea6a8c363e73cccde6ae94a853583a2371b2ac24.exe

C:\Users\Admin\AppData\Local\Temp\b278a108d4cde5b7a50ff2d6ea6a8c363e73cccde6ae94a853583a2371b2ac24.exe
"C:\Users\Admin\AppData\Local\Temp\b278a108d4cde5b7a50ff2d6ea6a8c363e73cccde6ae94a853583a2371b2ac24.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1836

memory/1836-132-0x0000000000400000-0x0000000000E89000-memory.dmp

Filesize
10.5MB

Download
memory/1836-133-0x0000000000400000-0x0000000000E89000-memory.dmp

Filesize
10.5MB

Download
memory/1836-134-0x0000000000400000-0x0000000000E89000-memory.dmp

Filesize
10.5MB

Download
memory/1836-135-0x0000000000400000-0x0000000000E89000-memory.dmp

Filesize
10.5MB

Download
memory/1836-136-0x0000000000400000-0x0000000000E89000-memory.dmp

Filesize
10.5MB

Download