8fa7941e5d7fbcb256495ee816202660ba86f9f02b6d0b88cea21ff2092baf93

Analysis

max time kernel
140s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14-06-2023 20:13

Target

8fa7941e5d7fbcb256495ee816202660ba86f9f02b6d0b88cea21ff2092baf93.exe
Size

2.3MB
MD5

1c17faa04d9e1dd7abf2c276a4944c9f
SHA1

f4f3b563a887bdc7e08968af3b280c42396ed1dd
SHA256

8fa7941e5d7fbcb256495ee816202660ba86f9f02b6d0b88cea21ff2092baf93
SHA512

d699ad3656f931bac88671452ef5fa25cefa0c9e6553436dc84dfb8f4c6b8bca89b307433976ccd6ccbd966ba97a51ef1c92f345e65aa5abd81e8710b7b9f514
SSDEEP

49152:QQkWwLdZDqAauJOubAmcCuIvqh5PyvAQ55ASh09e3WVyVztWXWtbpg:QBlBJDSIl4FMRtWXWZpg

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

8fa7941e5d7fbcb256495ee816202660ba86f9f02b6d0b88cea21ff2092baf93.exe

pid	process
1108	8fa7941e5d7fbcb256495ee816202660ba86f9f02b6d0b88cea21ff2092baf93.exe
1108	8fa7941e5d7fbcb256495ee816202660ba86f9f02b6d0b88cea21ff2092baf93.exe
1108	8fa7941e5d7fbcb256495ee816202660ba86f9f02b6d0b88cea21ff2092baf93.exe

C:\Users\Admin\AppData\Local\Temp\8fa7941e5d7fbcb256495ee816202660ba86f9f02b6d0b88cea21ff2092baf93.exe
"C:\Users\Admin\AppData\Local\Temp\8fa7941e5d7fbcb256495ee816202660ba86f9f02b6d0b88cea21ff2092baf93.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1108

memory/1108-54-0x0000000000400000-0x0000000000D61000-memory.dmp

Filesize
9.4MB

Download
memory/1108-55-0x0000000000400000-0x0000000000D61000-memory.dmp

Filesize
9.4MB

Download
memory/1108-56-0x0000000000400000-0x0000000000D61000-memory.dmp

Filesize
9.4MB

Download
memory/1108-57-0x0000000000400000-0x0000000000D61000-memory.dmp

Filesize
9.4MB

Download
memory/1108-58-0x0000000000400000-0x0000000000D61000-memory.dmp

Filesize
9.4MB

Download
memory/1108-59-0x00000000001B0000-0x00000000001B1000-memory.dmp

Filesize
4KB

Download
memory/1108-60-0x0000000000400000-0x0000000000D61000-memory.dmp

Filesize
9.4MB

Download
memory/1108-62-0x00000000001B0000-0x00000000001B1000-memory.dmp

Filesize
4KB

Download
memory/1108-61-0x0000000000400000-0x0000000000D61000-memory.dmp

Filesize
9.4MB

Download
memory/1108-63-0x0000000000400000-0x0000000000D61000-memory.dmp

Filesize
9.4MB

Download
memory/1108-64-0x0000000000400000-0x0000000000D61000-memory.dmp

Filesize
9.4MB

Download
memory/1108-67-0x0000000000400000-0x0000000000D61000-memory.dmp

Filesize
9.4MB

Download