33d604aaedbac7da0eefaadf7d41cc68e1a9f72917d91df5c096a6998fdf4f61

Analysis

max time kernel
40s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
16-02-2023 20:08

Target

33d604aaedbac7da0eefaadf7d41cc68e1a9f72917d91df5c096a6998fdf4f61.exe
Size

4.6MB
MD5

8d7d8675757f4992c765e1916ec5589a
SHA1

2b7042d58b664f7062ef6de35f742fda6c6b7c5c
SHA256

33d604aaedbac7da0eefaadf7d41cc68e1a9f72917d91df5c096a6998fdf4f61
SHA512

41d826d271b57f2ead8d74b191968ee5afd2140ea41003d9d1c26eec15a31ef0bdfeb5f58fdaf277bb54910f82cac31927a513272af05f6e2e0291a9bd7f6b4b
SSDEEP

98304:Jw0lf/Xg9SvMtiJx20Oq8Ppw9heUws2xqTQ+8Tfyopffix3l:JLl3PMU22Op7Poa5ffO

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

33d604aaedbac7da0eefaadf7d41cc68e1a9f72917d91df5c096a6998fdf4f61.exe

pid	process
856	33d604aaedbac7da0eefaadf7d41cc68e1a9f72917d91df5c096a6998fdf4f61.exe
856	33d604aaedbac7da0eefaadf7d41cc68e1a9f72917d91df5c096a6998fdf4f61.exe
856	33d604aaedbac7da0eefaadf7d41cc68e1a9f72917d91df5c096a6998fdf4f61.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

33d604aaedbac7da0eefaadf7d41cc68e1a9f72917d91df5c096a6998fdf4f61.exe

description	pid	process	target process
PID 856 wrote to memory of 1252	856	33d604aaedbac7da0eefaadf7d41cc68e1a9f72917d91df5c096a6998fdf4f61.exe	splwow64.exe
PID 856 wrote to memory of 1252	856	33d604aaedbac7da0eefaadf7d41cc68e1a9f72917d91df5c096a6998fdf4f61.exe	splwow64.exe
PID 856 wrote to memory of 1252	856	33d604aaedbac7da0eefaadf7d41cc68e1a9f72917d91df5c096a6998fdf4f61.exe	splwow64.exe
PID 856 wrote to memory of 1252	856	33d604aaedbac7da0eefaadf7d41cc68e1a9f72917d91df5c096a6998fdf4f61.exe	splwow64.exe

memory/856-54-0x0000000076151000-0x0000000076153000-memory.dmp

Filesize
8KB

Download
memory/856-55-0x0000000000400000-0x000000000169D000-memory.dmp

Filesize
18.6MB

Download
memory/856-56-0x0000000000400000-0x000000000169D000-memory.dmp

Filesize
18.6MB

Download
memory/856-57-0x0000000000400000-0x000000000169D000-memory.dmp

Filesize
18.6MB

Download
memory/856-58-0x0000000000400000-0x000000000169D000-memory.dmp

Filesize
18.6MB

Download
memory/856-59-0x0000000000400000-0x000000000169D000-memory.dmp

Filesize
18.6MB

Download
memory/856-62-0x0000000000400000-0x000000000169D000-memory.dmp

Filesize
18.6MB

Download
memory/1252-60-0x0000000000000000-mapping.dmp

Download
memory/1252-61-0x000007FEFBD11000-0x000007FEFBD13000-memory.dmp

Filesize
8KB

Download