18cd15b570283c90ba1969da50f22ab64c0c738cd2b83c668d8c30caafb3c3b3

Analysis

max time kernel
141s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
30-05-2023 01:27

Target

18cd15b570283c90ba1969da50f22ab64c0c738cd2b83c668d8c30caafb3c3b3.exe
Size

3.4MB
MD5

5c6140b99ac2bf615198e09df7e20534
SHA1

3bc40766cd19ed84f188979f27468adff43317d1
SHA256

18cd15b570283c90ba1969da50f22ab64c0c738cd2b83c668d8c30caafb3c3b3
SHA512

74058e6aa0187a4977a9428d1d67b5ed8e171adae2171b548032223c11d65a096e933ed7240a7b3dcb452ba873ad8d8ad10919588ca1f8b802770b48b819c250
SSDEEP

98304:34MtIRiJ0Z0CMUAn8QpWPO9beeEjewd/e:34MtIY9UnQpWcetCwVe

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

18cd15b570283c90ba1969da50f22ab64c0c738cd2b83c668d8c30caafb3c3b3.exe

pid	process
1684	18cd15b570283c90ba1969da50f22ab64c0c738cd2b83c668d8c30caafb3c3b3.exe
1684	18cd15b570283c90ba1969da50f22ab64c0c738cd2b83c668d8c30caafb3c3b3.exe
1684	18cd15b570283c90ba1969da50f22ab64c0c738cd2b83c668d8c30caafb3c3b3.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

18cd15b570283c90ba1969da50f22ab64c0c738cd2b83c668d8c30caafb3c3b3.exe

description	pid	process	target process
PID 1684 wrote to memory of 1992	1684	18cd15b570283c90ba1969da50f22ab64c0c738cd2b83c668d8c30caafb3c3b3.exe	splwow64.exe
PID 1684 wrote to memory of 1992	1684	18cd15b570283c90ba1969da50f22ab64c0c738cd2b83c668d8c30caafb3c3b3.exe	splwow64.exe
PID 1684 wrote to memory of 1992	1684	18cd15b570283c90ba1969da50f22ab64c0c738cd2b83c668d8c30caafb3c3b3.exe	splwow64.exe
PID 1684 wrote to memory of 1992	1684	18cd15b570283c90ba1969da50f22ab64c0c738cd2b83c668d8c30caafb3c3b3.exe	splwow64.exe

memory/1684-54-0x0000000000400000-0x0000000001172000-memory.dmp

Filesize
13.4MB

Download
memory/1684-55-0x0000000000400000-0x0000000001172000-memory.dmp

Filesize
13.4MB

Download
memory/1684-56-0x0000000000400000-0x0000000001172000-memory.dmp

Filesize
13.4MB

Download
memory/1684-57-0x0000000000400000-0x0000000001172000-memory.dmp

Filesize
13.4MB

Download
memory/1684-58-0x0000000000400000-0x0000000001172000-memory.dmp

Filesize
13.4MB

Download
memory/1684-59-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/1684-61-0x0000000000400000-0x0000000001172000-memory.dmp

Filesize
13.4MB

Download
memory/1684-62-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download