6e1441b4feb0d3221070fd8a4f3343fbf6e0590e8748d7cc12bad39c54a8893f

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
17-02-2023 20:02

Target

6e1441b4feb0d3221070fd8a4f3343fbf6e0590e8748d7cc12bad39c54a8893f.exe
Size

2.4MB
MD5

0a4ee6858195434bc4c2edcbde1de085
SHA1

5367f9af61b19ba2f911101740a274b0f60a0210
SHA256

6e1441b4feb0d3221070fd8a4f3343fbf6e0590e8748d7cc12bad39c54a8893f
SHA512

129a408325728bbd99fc8042f6921019d65e433d542c80e22fa2d17c29671533adc2058eac59820207837596b0e531f25a9c48ab568c01d7712ca7e6cdaecc66
SSDEEP

49152:Nms0NWZTxROFarfnDJgFqhzqRh/BwFXr6nCHyc/9rNt9nyt1:Nf0kZFRear7irRh/E76n4/ZNP

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

6e1441b4feb0d3221070fd8a4f3343fbf6e0590e8748d7cc12bad39c54a8893f.exe

pid	process
1412	6e1441b4feb0d3221070fd8a4f3343fbf6e0590e8748d7cc12bad39c54a8893f.exe
1412	6e1441b4feb0d3221070fd8a4f3343fbf6e0590e8748d7cc12bad39c54a8893f.exe
1412	6e1441b4feb0d3221070fd8a4f3343fbf6e0590e8748d7cc12bad39c54a8893f.exe

C:\Users\Admin\AppData\Local\Temp\6e1441b4feb0d3221070fd8a4f3343fbf6e0590e8748d7cc12bad39c54a8893f.exe
"C:\Users\Admin\AppData\Local\Temp\6e1441b4feb0d3221070fd8a4f3343fbf6e0590e8748d7cc12bad39c54a8893f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1412

memory/1412-54-0x0000000075771000-0x0000000075773000-memory.dmp

Filesize
8KB

Download
memory/1412-55-0x0000000000400000-0x0000000000D9F000-memory.dmp

Filesize
9.6MB

Download
memory/1412-56-0x0000000000400000-0x0000000000D9F000-memory.dmp

Filesize
9.6MB

Download
memory/1412-57-0x0000000000400000-0x0000000000D9F000-memory.dmp

Filesize
9.6MB

Download
memory/1412-58-0x0000000000400000-0x0000000000D9F000-memory.dmp

Filesize
9.6MB

Download
memory/1412-59-0x0000000000400000-0x0000000000D9F000-memory.dmp

Filesize
9.6MB

Download
memory/1412-60-0x0000000000400000-0x0000000000D9F000-memory.dmp

Filesize
9.6MB

Download