b2e5ec6e0599fcf477e27823e0eabef5eac92676c115ebe5427f2f4e24f7a08a

Analysis

max time kernel
28s
max time network
30s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
06-06-2023 19:17

Target

b2e5ec6e0599fcf477e27823e0eabef5eac92676c115ebe5427f2f4e24f7a08a.exe
Size

360KB
MD5

ef927a11a5cf4f26258be468233caf1c
SHA1

112df790c2584989cb1be86b9793f931da87b900
SHA256

b2e5ec6e0599fcf477e27823e0eabef5eac92676c115ebe5427f2f4e24f7a08a
SHA512

4b335b9b5cc6c2045e6be31661e099e3fb27f4a3eb3c6c6992ce72e84f5fe9f9c1538b6db8fd6dc450e6ecc677f78288d9b675a2258c101b73093dfbcc5ba1dc
SSDEEP

6144:QgmW3vPGe2mPyW5DIQv5h1owzhnK8WVlx0YZ5t0phxcMGynx/nRfqWtMoP8fzIQJ:u8PGkyoDnvKwz/W/lkc2x/n1qWtqY

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

b2e5ec6e0599fcf477e27823e0eabef5eac92676c115ebe5427f2f4e24f7a08a.exe

pid	process
1948	b2e5ec6e0599fcf477e27823e0eabef5eac92676c115ebe5427f2f4e24f7a08a.exe
1948	b2e5ec6e0599fcf477e27823e0eabef5eac92676c115ebe5427f2f4e24f7a08a.exe

C:\Users\Admin\AppData\Local\Temp\b2e5ec6e0599fcf477e27823e0eabef5eac92676c115ebe5427f2f4e24f7a08a.exe
"C:\Users\Admin\AppData\Local\Temp\b2e5ec6e0599fcf477e27823e0eabef5eac92676c115ebe5427f2f4e24f7a08a.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1948

memory/1948-54-0x0000000000400000-0x000000000052B000-memory.dmp

Filesize
1.2MB

Download
memory/1948-56-0x0000000000400000-0x000000000052B000-memory.dmp

Filesize
1.2MB

Download
memory/1948-55-0x0000000000400000-0x000000000052B000-memory.dmp

Filesize
1.2MB

Download
memory/1948-57-0x0000000000400000-0x000000000052B000-memory.dmp

Filesize
1.2MB

Download
memory/1948-58-0x0000000000400000-0x000000000052B000-memory.dmp

Filesize
1.2MB

Download