6cf9f75aaddd22dd30d7a170531f42f77c152be4184f7d256f571f94666eb5dc

Analysis

max time kernel
139s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-01-2024 07:23

Target

2472-21-0x0000000000400000-0x0000000000417000-memory.exe
Size

92KB
MD5

fdc3216e51e0a0b4cce9062529e05207
SHA1

8345ca00c954d15501752ee95f6ae62fc1680049
SHA256

6cf9f75aaddd22dd30d7a170531f42f77c152be4184f7d256f571f94666eb5dc
SHA512

8c5fe93244211c730a00629142436f61908c9dee6690de0dd4ba105782665259461dad9d1d1a23bf646e91fa9c67156a6abbcc1feafa4ce5384bf960d0b42861
SSDEEP

1536:ohhW0YTGZWdVseJxaM9kraLdV2QkQ1TbPX8IHOCkIsI4ESHNTh9E+JP19qkP60rC:uhzYTGWVvJ8f2v1TbPzuMsIFSHNThy+e

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

2472-21-0x0000000000400000-0x0000000000417000-memory.exe

pid process

2148 2472-21-0x0000000000400000-0x0000000000417000-memory.exe

pid	process
2148	2472-21-0x0000000000400000-0x0000000000417000-memory.exe

C:\Users\Admin\AppData\Local\Temp\2472-21-0x0000000000400000-0x0000000000417000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\2472-21-0x0000000000400000-0x0000000000417000-memory.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2148