eff2c48748ef6262cf45cf694db18cf5a27e16727213150c89123d62d17b4d2a

Analysis

max time kernel
142s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
13/01/2024, 10:45

Target

58b8d07cb37be4381ee323056ac07b79.exe
Size

1.4MB
MD5

58b8d07cb37be4381ee323056ac07b79
SHA1

af491348100ed6711e6d31c8a1be80be02b89cd0
SHA256

eff2c48748ef6262cf45cf694db18cf5a27e16727213150c89123d62d17b4d2a
SHA512

62a2e6808697838c142ec8983d4bcbe3bd3613714e64a04e7f86e508436a9099601497225205961bfd8c74fe73b183772d4e46fa64d3f5384736e7417b9e04ea
SSDEEP

24576:5xYZuHhss+JMy5BoSUCotvutmaE/tGaE/F:ACSCtjy5F

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2240	58b8d07cb37be4381ee323056ac07b79.exe
2240	58b8d07cb37be4381ee323056ac07b79.exe

C:\Users\Admin\AppData\Local\Temp\58b8d07cb37be4381ee323056ac07b79.exe
"C:\Users\Admin\AppData\Local\Temp\58b8d07cb37be4381ee323056ac07b79.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2240

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\VH9W14NQ\twitter-bird[1].htm

Filesize
1KB

MD5
0b1cd114b167a6c0cd7d896ee0fc0233

SHA1
05d94767c1502e39461cb33b2888a0d8163684f7

SHA256
a67219b74655e4fa4cc0afe9b039133647dee6a0ead0436b18c4b19d8a5a9f5c

SHA512
e7ef02fd69e370457071201e74b859ff5702e36382660a1cc5b20f34674a29d76d0e2be478cd248105b03f522e1ec8fa847b022074e81518ed9bbf91b74cbb6d

Download Submit
memory/2240-0-0x0000000002350000-0x0000000002351000-memory.dmp

Filesize
4KB

Download
memory/2240-13-0x0000000000400000-0x0000000000548000-memory.dmp

Filesize
1.3MB

Download
memory/2240-15-0x0000000002350000-0x0000000002351000-memory.dmp

Filesize
4KB

Download