e2a65c70a7894610af7750481274bb10dec700e5a679714a162109e18555c399

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12-02-2024 08:01

Target

96acc64ed98f1d55c1a49d8f5b786474.exe
Size

39KB
MD5

96acc64ed98f1d55c1a49d8f5b786474
SHA1

d195bd73baf8d22069e68ceaf173e2294eaf615c
SHA256

e2a65c70a7894610af7750481274bb10dec700e5a679714a162109e18555c399
SHA512

a3a58aa948a9e76dec24968b563fc21b70ebcda70f99c8d6fdfe0fef8a834d3a8cc6b789680e7b249937fba3ea7e64b78314db0c3133ed8258706547fa66f9d6
SSDEEP

384:JPlVSa4Cof3bZbVs9LLnd40aDZ4/RRvmM9PeUm8jvg6pbvXIU214DlTq9PQv:JPlBs1Oz+h+6gE8jfvYZ1SlTq9Qv

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3664	96acc64ed98f1d55c1a49d8f5b786474.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3664 wrote to memory of 3080	3664	96acc64ed98f1d55c1a49d8f5b786474.exe	86
PID 3664 wrote to memory of 3080	3664	96acc64ed98f1d55c1a49d8f5b786474.exe	86
PID 3664 wrote to memory of 3080	3664	96acc64ed98f1d55c1a49d8f5b786474.exe	86
PID 3664 wrote to memory of 3080	3664	96acc64ed98f1d55c1a49d8f5b786474.exe	86

C:\Users\Admin\AppData\Local\Temp\96acc64ed98f1d55c1a49d8f5b786474.exe
"C:\Users\Admin\AppData\Local\Temp\96acc64ed98f1d55c1a49d8f5b786474.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3664
- C:\Users\Admin\AppData\Local\Temp\96acc64ed98f1d55c1a49d8f5b786474.exe
  2⤵
  PID:3080