be2c848ffe89d8a112188f9bc94d60e5ebc6e92da03c5fae61fa7dfdae9d6092

Analysis

max time kernel
28s
max time network
31s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
22-02-2023 21:05

Target

be2c848ffe89d8a112188f9bc94d60e5ebc6e92da03c5fae61fa7dfdae9d6092.exe
Size

2.6MB
MD5

6d93b776514d4118a2b7744a23216135
SHA1

21ce3b4a1ec2cbd12c37e4ee8cca9680de293771
SHA256

be2c848ffe89d8a112188f9bc94d60e5ebc6e92da03c5fae61fa7dfdae9d6092
SHA512

f32ead3f90bdf2eea0ea5de744b94b68568d24b362328edf7ff084ed939568af513d3a828ea20b50bd3c050d09ed5baf96ff16178c9672eb36db715ef94611f9
SSDEEP

49152:90vm1cKJlXnbYsI4s1VhcHRJK/pR7l8UWyq2RB3UFZZ/dpfWs/fv5VT:rc6Eszs1VhcHmp81yqKkFZZTWs/fvrT

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

be2c848ffe89d8a112188f9bc94d60e5ebc6e92da03c5fae61fa7dfdae9d6092.exe

pid	process
1996	be2c848ffe89d8a112188f9bc94d60e5ebc6e92da03c5fae61fa7dfdae9d6092.exe
1996	be2c848ffe89d8a112188f9bc94d60e5ebc6e92da03c5fae61fa7dfdae9d6092.exe
1996	be2c848ffe89d8a112188f9bc94d60e5ebc6e92da03c5fae61fa7dfdae9d6092.exe

C:\Users\Admin\AppData\Local\Temp\be2c848ffe89d8a112188f9bc94d60e5ebc6e92da03c5fae61fa7dfdae9d6092.exe
"C:\Users\Admin\AppData\Local\Temp\be2c848ffe89d8a112188f9bc94d60e5ebc6e92da03c5fae61fa7dfdae9d6092.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1996

memory/1996-54-0x0000000000400000-0x0000000000CCA000-memory.dmp

Filesize
8.8MB

Download
memory/1996-55-0x0000000000400000-0x0000000000CCA000-memory.dmp

Filesize
8.8MB

Download
memory/1996-56-0x0000000000400000-0x0000000000CCA000-memory.dmp

Filesize
8.8MB

Download
memory/1996-57-0x0000000000400000-0x0000000000CCA000-memory.dmp

Filesize
8.8MB

Download
memory/1996-58-0x0000000000400000-0x0000000000CCA000-memory.dmp

Filesize
8.8MB

Download
memory/1996-59-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/1996-60-0x0000000000400000-0x0000000000CCA000-memory.dmp

Filesize
8.8MB

Download