99918a1512c12ece43881fd64268c8f2a6061e36c3213bd8dd868fd480182e6c

Analysis

max time kernel
141s
max time network
30s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
25-02-2023 20:38

Target

99918a1512c12ece43881fd64268c8f2a6061e36c3213bd8dd868fd480182e6c.exe
Size

4.2MB
MD5

8c666fd9e890ebb0fa49bc30ff4096a9
SHA1

774dc34985210b982fbc4fc61d8d5c52ecaaee69
SHA256

99918a1512c12ece43881fd64268c8f2a6061e36c3213bd8dd868fd480182e6c
SHA512

a459f2323e16da025a542e2bc2aa7d9072985a6cf1b0b0cb0b2cfde2a8cbe1e1a548c6e771facf09ad2f92a6fbbd54e4709c35a05030196b8caa1f06513e3725
SSDEEP

98304:hwYjo6PHuuzNo4LrNZC3V0oZ1o0WRf3KVFKz18VA2/D:mVauuzbjU2a19WZ3KyaNL

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

99918a1512c12ece43881fd64268c8f2a6061e36c3213bd8dd868fd480182e6c.exe

pid process

1920 99918a1512c12ece43881fd64268c8f2a6061e36c3213bd8dd868fd480182e6c.exe

pid	process
1920	99918a1512c12ece43881fd64268c8f2a6061e36c3213bd8dd868fd480182e6c.exe

C:\Users\Admin\AppData\Local\Temp\99918a1512c12ece43881fd64268c8f2a6061e36c3213bd8dd868fd480182e6c.exe
"C:\Users\Admin\AppData\Local\Temp\99918a1512c12ece43881fd64268c8f2a6061e36c3213bd8dd868fd480182e6c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1920

memory/1920-54-0x0000000000400000-0x0000000002496000-memory.dmp

Filesize
32.6MB

Download
memory/1920-55-0x0000000000400000-0x0000000002496000-memory.dmp

Filesize
32.6MB

Download
memory/1920-58-0x0000000000400000-0x0000000002496000-memory.dmp

Filesize
32.6MB

Download
memory/1920-59-0x0000000000400000-0x0000000002496000-memory.dmp

Filesize
32.6MB

Download