c4e8f5941e5f46ba5f566236d18e1e4866a341f29cf419528a8f987d967af1c2

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231127-en
resource tags

arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system
submitted
28-11-2023 13:10

Target

ForCrypt.exe
Size

483KB
MD5

5b767aa455dc7d4478e43c086a849a89
SHA1

5ee61f7674fae8b811366765ded9ad4b19f85956
SHA256

c4e8f5941e5f46ba5f566236d18e1e4866a341f29cf419528a8f987d967af1c2
SHA512

1fa85398e782c12f285a49eeb48d4e8fd1b2b4d91807e9f104e98a12dac51a4547398f3a9db7c71568a15bdfc747b689372ddab84885663e14399a77644020a4
SSDEEP

6144:+/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZuAXec7A57ov:+/uPq3AfK496Gw0lwGXN3pvs/Zuj8v

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

ForCrypt.exe

pid process

4196 ForCrypt.exe

pid	process
4196	ForCrypt.exe

C:\Users\Admin\AppData\Local\Temp\ForCrypt.exe
"C:\Users\Admin\AppData\Local\Temp\ForCrypt.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4196