bd3190fab963fd090da485e1f3cbd0534b0598fef95bcfd2f1f6fa7b5d0894ed

Analysis

max time kernel
141s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14-06-2023 20:04

Target

KinnAgent200820160818bak.exe
Size

4.4MB
MD5

368af498e9aec377b0d18b59473114c9
SHA1

b0318b1fd25454eeaf1ce51036d30ee155771269
SHA256

bd3190fab963fd090da485e1f3cbd0534b0598fef95bcfd2f1f6fa7b5d0894ed
SHA512

3d2869503da66d28f1110708aec82ee19fb6c8c6d888c220e4910e371304eeacbd717a8228dde74d45316d008d8cdebb6270fc8291989990916b26f5eb0ada4f
SSDEEP

98304:yLCWIsw3EpnNSJYjF1TnvrbBT9ZLc2LU45sfGB6Ti/wnzUWv0axSQ:txUpn+Y51zvvBjocveeBijng0tSQ

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

KinnAgent200820160818bak.exe

pid process

1324 KinnAgent200820160818bak.exe
1324 KinnAgent200820160818bak.exe
1324 KinnAgent200820160818bak.exe

C:\Users\Admin\AppData\Local\Temp\KinnAgent200820160818bak.exe
"C:\Users\Admin\AppData\Local\Temp\KinnAgent200820160818bak.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1324

memory/1324-54-0x0000000000400000-0x0000000001AAF000-memory.dmp

Filesize
22.7MB

Download
memory/1324-55-0x0000000000400000-0x0000000001AAF000-memory.dmp

Filesize
22.7MB

Download
memory/1324-56-0x0000000000400000-0x0000000001AAF000-memory.dmp

Filesize
22.7MB

Download
memory/1324-57-0x0000000000400000-0x0000000001AAF000-memory.dmp

Filesize
22.7MB

Download
memory/1324-58-0x0000000000400000-0x0000000001AAF000-memory.dmp

Filesize
22.7MB

Download
memory/1324-59-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/1324-60-0x0000000000400000-0x0000000001AAF000-memory.dmp

Filesize
22.7MB

Download
memory/1324-62-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download