f05c566194635618c937165b48ecc712bc3f9d689367e4568c4c214ce9890a09

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
02/03/2024, 11:31

Target
1840-134-0x0000000000400000-0x0000000000477000-memory.exe
Size 476KB
Sample240302-nmsjaacg7s
SHA256 f05c566194635618c937165b48ecc712bc3f9d689367e4568c4c214ce9890a09
MD5 7d3aa8f9c9c514ccd3d46f6c8d88834b
SHA1 e609c6beebfac511f426fb53092237f62ad24ddb
SHA512 cc273c3e7a48c7587dbb7158fd9fbf2653635ebb0463c7e130a0ba9b2f0b1ca0f73f153a40236a2fad4cc8035481767e69b06748032207fcdf7a8b100dc3048e
SSDEEP 12288:aBMa2SdiKUsNpyxGH6EdEQvrRuQ9/mG031ign8bxxW0OLWmJS:aua3diKtA+/CYrRuQ9/l4Axc+mo
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1284	1840-134-0x0000000000400000-0x0000000000477000-memory.exe

C:\Users\Admin\AppData\Local\Temp\1840-134-0x0000000000400000-0x0000000000477000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1840-134-0x0000000000400000-0x0000000000477000-memory.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1284