b700f4bc1e5761ed105c8b7d7f660728e85862f6b1d9f12ddc6ade6469a13cb0

Analysis

max time kernel
141s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14-06-2023 17:46

Target

KinnAgent2008.exe20160115.exe
Size

4.4MB
MD5

0c05fd9ee4c047b2958df64c0864c539
SHA1

29eec74dada7c93ac1103033f6b9661c8ea73c4b
SHA256

b700f4bc1e5761ed105c8b7d7f660728e85862f6b1d9f12ddc6ade6469a13cb0
SHA512

99ce41ad5497be22cffad14ee55ce02ae1387ca4dbda66e05f5d1efd25346c6e18539d38eab7de0246659fd28090b9b484f3a5ca336a574a370e7112f1a4bf5c
SSDEEP

98304:/4cmu09KZ9vctZS6v4u075Ty49/tAB6jlE/WoHJjUzyE29OJm143qZlbFn2fCkgF:LXt9vk2uO3jlboH2l29OE6aZjogq

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

KinnAgent2008.exe20160115.exe

pid process

1276 KinnAgent2008.exe20160115.exe
1276 KinnAgent2008.exe20160115.exe
1276 KinnAgent2008.exe20160115.exe

C:\Users\Admin\AppData\Local\Temp\KinnAgent2008.exe20160115.exe
"C:\Users\Admin\AppData\Local\Temp\KinnAgent2008.exe20160115.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1276

memory/1276-54-0x0000000000400000-0x0000000001A86000-memory.dmp

Filesize
22.5MB

Download
memory/1276-55-0x0000000000400000-0x0000000001A86000-memory.dmp

Filesize
22.5MB

Download
memory/1276-56-0x0000000000400000-0x0000000001A86000-memory.dmp

Filesize
22.5MB

Download
memory/1276-57-0x0000000000400000-0x0000000001A86000-memory.dmp

Filesize
22.5MB

Download
memory/1276-58-0x0000000000400000-0x0000000001A86000-memory.dmp

Filesize
22.5MB

Download
memory/1276-59-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/1276-60-0x0000000000400000-0x0000000001A86000-memory.dmp

Filesize
22.5MB

Download
memory/1276-62-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download