1731753665b1add7d9261d9ae731144a35d9cd77a9df4fb98f03026485c86e45

Analysis

max time kernel
93s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
15/01/2024, 01:50

Target

5bd305ed65829a1740fff19b4f229109.exe
Size

2.1MB
MD5

5bd305ed65829a1740fff19b4f229109
SHA1

b433ef04c67b5f1917f362daf9c3bbce62d1d758
SHA256

1731753665b1add7d9261d9ae731144a35d9cd77a9df4fb98f03026485c86e45
SHA512

5b85b149016cdae4b4303170d27756ec48e5e9c1e5eeb7485c4b96037daf2d4910b77454b0bb2a9cb11b9fd2676fda2b0cdeb0033c28ed5a1d62160d10a3f815
SSDEEP

24576:SQ9VD7F5PTdeK4tRGKacdESVzLWbmXHxQsoscwrSlN/wmaOkIIQg79iAst+QVRw+:SWvTMK4P0camXRj+kOgMA8Z1+

Score

4^/10

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Fonts\Destroy.ttf	5bd305ed65829a1740fff19b4f229109.exe

Suspicious use of SetWindowsHookEx 3 IoCs

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4556 wrote to memory of 540	4556	5bd305ed65829a1740fff19b4f229109.exe	86
PID 4556 wrote to memory of 540	4556	5bd305ed65829a1740fff19b4f229109.exe	86
PID 4556 wrote to memory of 540	4556	5bd305ed65829a1740fff19b4f229109.exe	86

C:\Users\Admin\AppData\Local\Temp\5bd305ed65829a1740fff19b4f229109.exe
"C:\Users\Admin\AppData\Local\Temp\5bd305ed65829a1740fff19b4f229109.exe"
1⤵
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4556
- C:\Users\Admin\AppData\Local\Temp\5bd305ed65829a1740fff19b4f229109.exe
  C:\Users\Admin\AppData\Local\Temp\5bd305ed65829a1740fff19b4f229109.exe /allowprevinstance
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:540