dcd5375b1d86371b32a348c9ddc1f0ba0bd6081ce94ad9a1fe397e3b36e0e327

Analysis

max time kernel
141s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
27-02-2023 03:13

Target

dcd5375b1d86371b32a348c9ddc1f0ba0bd6081ce94ad9a1fe397e3b36e0e327.exe
Size

643KB
MD5

6a6a2ae3b656f94f0e47a635da069ae2
SHA1

20874b71cec420a840155ed7db9bd8c95cbb39ae
SHA256

dcd5375b1d86371b32a348c9ddc1f0ba0bd6081ce94ad9a1fe397e3b36e0e327
SHA512

47111d03d132feadd530dce3c5098e2d0ceb09d0d17064f7a39270d22ab39cdef67ec713f6371e48b4c81068819f5bbc4c8448981c7f7ddaed7744fddd269fb2
SSDEEP

12288:iCRkdVxT7NweIM+MF2j2Iyc0/pcKp/pKeDD6suM9UazLyYAiAQdqGbd:hRkdX/Nwe9kaRbIeDD6vMOazLaiFq

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

dcd5375b1d86371b32a348c9ddc1f0ba0bd6081ce94ad9a1fe397e3b36e0e327.exe

pid process

1712 dcd5375b1d86371b32a348c9ddc1f0ba0bd6081ce94ad9a1fe397e3b36e0e327.exe

pid	process
1712	dcd5375b1d86371b32a348c9ddc1f0ba0bd6081ce94ad9a1fe397e3b36e0e327.exe

C:\Users\Admin\AppData\Local\Temp\dcd5375b1d86371b32a348c9ddc1f0ba0bd6081ce94ad9a1fe397e3b36e0e327.exe
"C:\Users\Admin\AppData\Local\Temp\dcd5375b1d86371b32a348c9ddc1f0ba0bd6081ce94ad9a1fe397e3b36e0e327.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1712

C:\Users\Admin\AppData\Local\Temp\osxp.ini
Filesize
7KB

MD5
9c47253159ff83f9e775e95b36323c91

SHA1
52413d919233040570fc1acf74412fc5676d1163

SHA256
8cbdcec10a0e5e7434fc8659609f0e7f38a5aa82704f3fb61339e21161c2bcec

SHA512
817a656b24dce23a33f93ec54a102622c93f5a149a1c44c779646ba031e02cc5d2b4573acdea34e7e618ae92eca62e7d3abb894a84a9d1a679e764b3cb5f2364

Download Submit
memory/1712-429-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/1712-430-0x0000000000400000-0x0000000000546000-memory.dmp

Filesize
1.3MB

Download