5a11cfaf52a18a1599c266a136435112c6bd04b973387ffb586c47170397b5d1

Analysis

max time kernel
26s
max time network
29s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
25-02-2023 20:41

Target

5a11cfaf52a18a1599c266a136435112c6bd04b973387ffb586c47170397b5d1.exe
Size

4.9MB
MD5

87b95ed22115b5d46bfdec2245a8ed7b
SHA1

bd2e13fa3facd6732d79321af98ae5cf33e64da6
SHA256

5a11cfaf52a18a1599c266a136435112c6bd04b973387ffb586c47170397b5d1
SHA512

e7031ae15f171ff0c50247b9928c515bcda10dcd0320acedb36f6c5948f5d4222462b4e86443ae3aaf39e81a770314f0138c09285d5125e489ef70fe4db6a1b9
SSDEEP

98304:gvUJGCArwjxKpO8w1c2Lnx2pGHNuLDVWKvbCkxMfwXQ6f4lEZzJxfD:AUJGCZyemqxy5WKvbCWM+TjdxfD

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

5a11cfaf52a18a1599c266a136435112c6bd04b973387ffb586c47170397b5d1.exe

pid process

1484 5a11cfaf52a18a1599c266a136435112c6bd04b973387ffb586c47170397b5d1.exe

pid	process
1484	5a11cfaf52a18a1599c266a136435112c6bd04b973387ffb586c47170397b5d1.exe

C:\Users\Admin\AppData\Local\Temp\5a11cfaf52a18a1599c266a136435112c6bd04b973387ffb586c47170397b5d1.exe
"C:\Users\Admin\AppData\Local\Temp\5a11cfaf52a18a1599c266a136435112c6bd04b973387ffb586c47170397b5d1.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1484

memory/1484-54-0x0000000000400000-0x00000000018D1000-memory.dmp

Filesize
20.8MB

Download
memory/1484-55-0x0000000000400000-0x00000000018D1000-memory.dmp

Filesize
20.8MB

Download
memory/1484-58-0x0000000000400000-0x00000000018D1000-memory.dmp

Filesize
20.8MB

Download
memory/1484-59-0x0000000000400000-0x00000000018D1000-memory.dmp

Filesize
20.8MB

Download