dbf3b53d726f435ae3859a79251259b7ac609cd9d7248f5edec5bb92840f1c6c

Analysis

max time kernel
31s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
29-05-2023 06:49

Target

dbf3b53d726f435ae3859a79251259b7ac609cd9d7248f5edec5bb92840f1c6c.exe
Size

395KB
MD5

33010b99a58555cec3e832cf2f37876b
SHA1

cbeece8bf34d23c65b91ab71e0f8a24dc9bf17a4
SHA256

dbf3b53d726f435ae3859a79251259b7ac609cd9d7248f5edec5bb92840f1c6c
SHA512

e140f4ce8f2155dcf92046ac37b9c74b984da8c8294af9098d3b0bcce7b962a44ccbc9534ab5aecb80fd8cd6a9577ed263422de5b5b8939cf7ebccb80c6bd878
SSDEEP

6144:8K91Mw2b3YZKMPfWy71GrGE4Qq1ywpSSKdDTu5jGwMyYejmcSIGQUYOi:hMwSMPVYq1yES3DajjMyYexJh

Score

1^/10

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

dbf3b53d726f435ae3859a79251259b7ac609cd9d7248f5edec5bb92840f1c6c.exe

pid	process
1720	dbf3b53d726f435ae3859a79251259b7ac609cd9d7248f5edec5bb92840f1c6c.exe
1720	dbf3b53d726f435ae3859a79251259b7ac609cd9d7248f5edec5bb92840f1c6c.exe
1720	dbf3b53d726f435ae3859a79251259b7ac609cd9d7248f5edec5bb92840f1c6c.exe
1720	dbf3b53d726f435ae3859a79251259b7ac609cd9d7248f5edec5bb92840f1c6c.exe

C:\Users\Admin\AppData\Local\Temp\dbf3b53d726f435ae3859a79251259b7ac609cd9d7248f5edec5bb92840f1c6c.exe
"C:\Users\Admin\AppData\Local\Temp\dbf3b53d726f435ae3859a79251259b7ac609cd9d7248f5edec5bb92840f1c6c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1720

memory/1720-55-0x0000000000400000-0x00000000004E7000-memory.dmp

Filesize
924KB

Download
memory/1720-56-0x0000000000400000-0x00000000004E7000-memory.dmp

Filesize
924KB

Download
memory/1720-54-0x0000000000400000-0x00000000004E7000-memory.dmp

Filesize
924KB

Download
memory/1720-57-0x0000000000400000-0x00000000004E7000-memory.dmp

Filesize
924KB

Download
memory/1720-58-0x0000000000400000-0x00000000004E7000-memory.dmp

Filesize
924KB

Download