4a66e5f952518f55be3d36573a6f99cd4cf746cb7744375075ecf4ada7f156db

Analysis

max time kernel
140s
max time network
123s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
18-01-2024 01:15

Target

3f5833f7f8e59d0cf2dead9a3bab2e8abd7f4b34c9183c985374862bfab6f41c.exe
Size

1.8MB
MD5

2d73bda441ed0bfa5c9ec558a3559d0b
SHA1

db50c052e2b5024a0b4b4976eb543c726cb41638
SHA256

3f5833f7f8e59d0cf2dead9a3bab2e8abd7f4b34c9183c985374862bfab6f41c
SHA512

9db8d976c2d04322e1ea89fc6c3cd70f4aefdebb92058461b9254ac446270f5f7dd00cbf43729494ec9f97a3d4f88c866c1daf500425f05fef812c8c73af01e6
SSDEEP

49152:2BwIIjrGYXM+uw/nrfUG5DUBoiyiLyNDvz:4NbwPrfUgDUoB9Dv

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1720	3f5833f7f8e59d0cf2dead9a3bab2e8abd7f4b34c9183c985374862bfab6f41c.exe

C:\Users\Admin\AppData\Local\Temp\3f5833f7f8e59d0cf2dead9a3bab2e8abd7f4b34c9183c985374862bfab6f41c.exe
"C:\Users\Admin\AppData\Local\Temp\3f5833f7f8e59d0cf2dead9a3bab2e8abd7f4b34c9183c985374862bfab6f41c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1720

memory/1720-0-0x0000000001190000-0x00000000016A6000-memory.dmp

Filesize
5.1MB

Download
memory/1720-1-0x00000000003C0000-0x00000000003C1000-memory.dmp

Filesize
4KB

Download
memory/1720-2-0x0000000001190000-0x00000000016A6000-memory.dmp

Filesize
5.1MB

Download