b700f4bc1e5761ed105c8b7d7f660728e85862f6b1d9f12ddc6ade6469a13cb0

Analysis

max time kernel
142s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
14-06-2023 17:46

Target

KinnAgent2008.exe20160115.exe
Size

4.4MB
MD5

0c05fd9ee4c047b2958df64c0864c539
SHA1

29eec74dada7c93ac1103033f6b9661c8ea73c4b
SHA256

b700f4bc1e5761ed105c8b7d7f660728e85862f6b1d9f12ddc6ade6469a13cb0
SHA512

99ce41ad5497be22cffad14ee55ce02ae1387ca4dbda66e05f5d1efd25346c6e18539d38eab7de0246659fd28090b9b484f3a5ca336a574a370e7112f1a4bf5c
SSDEEP

98304:/4cmu09KZ9vctZS6v4u075Ty49/tAB6jlE/WoHJjUzyE29OJm143qZlbFn2fCkgF:LXt9vk2uO3jlboH2l29OE6aZjogq

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

KinnAgent2008.exe20160115.exe

pid process

4824 KinnAgent2008.exe20160115.exe
4824 KinnAgent2008.exe20160115.exe
4824 KinnAgent2008.exe20160115.exe

C:\Users\Admin\AppData\Local\Temp\KinnAgent2008.exe20160115.exe
"C:\Users\Admin\AppData\Local\Temp\KinnAgent2008.exe20160115.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4824

memory/4824-134-0x0000000000400000-0x0000000001A86000-memory.dmp

Filesize
22.5MB

Download
memory/4824-133-0x0000000000400000-0x0000000001A86000-memory.dmp

Filesize
22.5MB

Download
memory/4824-135-0x0000000000400000-0x0000000001A86000-memory.dmp

Filesize
22.5MB

Download
memory/4824-136-0x0000000000400000-0x0000000001A86000-memory.dmp

Filesize
22.5MB

Download
memory/4824-137-0x0000000000400000-0x0000000001A86000-memory.dmp

Filesize
22.5MB

Download
memory/4824-138-0x0000000001D60000-0x0000000001D61000-memory.dmp

Filesize
4KB

Download
memory/4824-139-0x0000000000400000-0x0000000001A86000-memory.dmp

Filesize
22.5MB

Download
memory/4824-140-0x0000000001D60000-0x0000000001D61000-memory.dmp

Filesize
4KB

Download