5ea85ac874b09f5b8d48f1490926fa2997ea570a6c62ecdd901f883dd24dc792

Analysis

max time kernel
91s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
13/02/2024, 22:31

Target
skin/default/皮肤制作工具.exe
Size 110KB
Sample240213-2ffg2aae9z
SHA256 d5c4bddebf0af01eb2812dc8ddf71899b70f4863407cbd1721076216bbe49879
MD5 1c15bdda957b8321d974e94acaa26437
SHA1 0de70b680ad339930159da926bc26c7a4be81037
SHA512 73b423285867ef96235a7544474885c482c0c9158b9fdfe53954491bb59310ed6eed1f3a4a8aeafaf3ca977bbf1814a4294265bef4772bfce20f705cad51b279
SSDEEP 1536:tNuYdJMMH2DRDlCnY5Nf12dOZamvKsMGhYB+BS4xEjwieOGLM/g:LHHICcNfYk/hYk04xc7eOGL+g
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1152	皮肤制作工具.exe
1152	皮肤制作工具.exe

C:\Users\Admin\AppData\Local\Temp\skin\default\皮肤制作工具.exe
"C:\Users\Admin\AppData\Local\Temp\skin\default\皮肤制作工具.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1152

memory/1152-0-0x0000000000400000-0x000000000041C000-memory.dmp

Download