5a6c34698a8ff0f0d0bb051386109e82c5a719d6afc35c136219924a95b0ef5b

Analysis

max time kernel
30s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
29-05-2023 07:33

Target

5a6c34698a8ff0f0d0bb051386109e82c5a719d6afc35c136219924a95b0ef5b.exe
Size

371KB
MD5

d72e532fdc12ccc84404f1446babd206
SHA1

f8543f1a939a2891b8f41c6ebcb732dbab06ed08
SHA256

5a6c34698a8ff0f0d0bb051386109e82c5a719d6afc35c136219924a95b0ef5b
SHA512

4db68ffab69eb0b05752a38690356b9cdeb7ec9bacb743f4fd37ea0f87d7902c6677e899a3442a90d7d83df58430e40ea96b6f872ed1800b13f080c671327206
SSDEEP

6144:zNZoPdEMurlEFS7odz56lPbRSPkSNGi9KNLTseUhLMXOjtaOVLUhCUojOQ6:5Z4dE1Ewo5+SPkSNh9OTsez+joOVBUoK

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

5a6c34698a8ff0f0d0bb051386109e82c5a719d6afc35c136219924a95b0ef5b.exe

pid process

2004 5a6c34698a8ff0f0d0bb051386109e82c5a719d6afc35c136219924a95b0ef5b.exe

pid	process
2004	5a6c34698a8ff0f0d0bb051386109e82c5a719d6afc35c136219924a95b0ef5b.exe

C:\Users\Admin\AppData\Local\Temp\5a6c34698a8ff0f0d0bb051386109e82c5a719d6afc35c136219924a95b0ef5b.exe
"C:\Users\Admin\AppData\Local\Temp\5a6c34698a8ff0f0d0bb051386109e82c5a719d6afc35c136219924a95b0ef5b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2004

memory/2004-55-0x0000000000400000-0x0000000000587000-memory.dmp

Filesize
1.5MB

Download
memory/2004-54-0x0000000000400000-0x0000000000587000-memory.dmp

Filesize
1.5MB

Download
memory/2004-58-0x0000000000400000-0x0000000000587000-memory.dmp

Filesize
1.5MB

Download
memory/2004-59-0x0000000000400000-0x0000000000587000-memory.dmp

Filesize
1.5MB

Download