7ffcd54be44596fb4d036b27613c7d503dc886cb4fea07de2b7182f3a042a6fd

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 03:24

Target
0cdfec677834e7343abea3a28594eb5b.exe
Size 35KB
Sample231230-dyd5xsebd4
SHA256 7ffcd54be44596fb4d036b27613c7d503dc886cb4fea07de2b7182f3a042a6fd
MD5 0cdfec677834e7343abea3a28594eb5b
SHA1 1fa393c77160f1d882cd7607af190a0ff0acfaf9
SHA512 2512d5ff0ca6e7ccb6335e116b0949ac831ccd5260b6c157850c93ddbe0d9344c1279954dacd04db583b45a364b3c21888def0f9f44bfd8add1cf65e88786d5c
SSDEEP 768:hpTHmJ3p+ljv78zFGMLpPcrVaTnDP+vSeFJd4Ia:hMAjv78zIMd8VsmFJd4P
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1716	0cdfec677834e7343abea3a28594eb5b.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 1716 wrote to memory of 2156	1716	0cdfec677834e7343abea3a28594eb5b.exe	15
PID 1716 wrote to memory of 2156	1716	0cdfec677834e7343abea3a28594eb5b.exe	15
PID 1716 wrote to memory of 2156	1716	0cdfec677834e7343abea3a28594eb5b.exe	15
PID 1716 wrote to memory of 2156	1716	0cdfec677834e7343abea3a28594eb5b.exe	15
PID 1716 wrote to memory of 2156	1716	0cdfec677834e7343abea3a28594eb5b.exe	15

C:\Users\Admin\AppData\Local\Temp\0cdfec677834e7343abea3a28594eb5b.exe
"C:\Users\Admin\AppData\Local\Temp\0cdfec677834e7343abea3a28594eb5b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1716
- C:\Users\Admin\AppData\Local\Temp\0cdfec677834e7343abea3a28594eb5b.exe
  C:\Users\Admin\AppData\Local\Temp\0cdfec677834e7343abea3a28594eb5b.exe
  2⤵
  PID:2156

memory/1716-0-0x0000000000400000-0x00000000004068D4-memory.dmp

Download

memory/1716-3-0x0000000000400000-0x00000000004068D4-memory.dmp

Download