450ae84bb3f7c71b9a13613f0d44d8df127d992a8645f859c9eebb86f438983b

Analysis

max time kernel
150s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
30-05-2023 05:56

Target

450ae84bb3f7c71b9a13613f0d44d8df127d992a8645f859c9eebb86f438983b.exe
Size

3.8MB
MD5

0bd641e35427d2425129b650e3642861
SHA1

2a239b39e5c76c0063d44e63fe0eaf3a8c818397
SHA256

450ae84bb3f7c71b9a13613f0d44d8df127d992a8645f859c9eebb86f438983b
SHA512

2d71e0661aff22fbbdf52488eab634668312edffabb9665b968460f387c8e836f4f4cf1ca3c363b91591685dddbd2f690294101b60eee1d4781e582287f76d93
SSDEEP

98304:UxLWmmY5zW8MY43s42V+4DPK/keVT8CI:eFo8MY48+FMa8

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

450ae84bb3f7c71b9a13613f0d44d8df127d992a8645f859c9eebb86f438983b.exe

pid	process
1752	450ae84bb3f7c71b9a13613f0d44d8df127d992a8645f859c9eebb86f438983b.exe
1752	450ae84bb3f7c71b9a13613f0d44d8df127d992a8645f859c9eebb86f438983b.exe
1752	450ae84bb3f7c71b9a13613f0d44d8df127d992a8645f859c9eebb86f438983b.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

450ae84bb3f7c71b9a13613f0d44d8df127d992a8645f859c9eebb86f438983b.exe

description	pid	process	target process
PID 1752 wrote to memory of 568	1752	450ae84bb3f7c71b9a13613f0d44d8df127d992a8645f859c9eebb86f438983b.exe	splwow64.exe
PID 1752 wrote to memory of 568	1752	450ae84bb3f7c71b9a13613f0d44d8df127d992a8645f859c9eebb86f438983b.exe	splwow64.exe
PID 1752 wrote to memory of 568	1752	450ae84bb3f7c71b9a13613f0d44d8df127d992a8645f859c9eebb86f438983b.exe	splwow64.exe
PID 1752 wrote to memory of 568	1752	450ae84bb3f7c71b9a13613f0d44d8df127d992a8645f859c9eebb86f438983b.exe	splwow64.exe

memory/1752-54-0x0000000000400000-0x00000000012E3000-memory.dmp

Filesize
14.9MB

Download
memory/1752-55-0x0000000000400000-0x00000000012E3000-memory.dmp

Filesize
14.9MB

Download
memory/1752-56-0x0000000000400000-0x00000000012E3000-memory.dmp

Filesize
14.9MB

Download
memory/1752-57-0x0000000000400000-0x00000000012E3000-memory.dmp

Filesize
14.9MB

Download
memory/1752-58-0x0000000000400000-0x00000000012E3000-memory.dmp

Filesize
14.9MB

Download
memory/1752-60-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/1752-61-0x0000000000400000-0x00000000012E3000-memory.dmp

Filesize
14.9MB

Download
memory/1752-63-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download