7b638cf14d6a0a442ff21de012420ff235ca91818a23700a7c36e7bd50b52421

Analysis

max time kernel
140s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19-04-2024 19:46

Target

20063914274000/lib/VISConf.exe
Size

100KB
MD5

b82f36f047a4203e9c0dcd563458cca8
SHA1

616c8b12114ea14373ae3919a402ef4d7ef769a6
SHA256

89dd858fd0de819aea053477ff36b15f169087ca50e461d85f51b2179e2bd353
SHA512

e596633801af32165b01243af866dfd1ce9daaca9b2a01d516addda9db40ec344d617301f05a7e315308dc419425e1e55ca76274510a263d1bb4667ec384fb74
SSDEEP

1536:svhpGkWDDjpb1Vn5AO+E37d/KyOD2FVs0sniUrYHQ6zQ6cMla1NF:SjxWDDjpb1Vn57+a1OD2FwN6c++NF

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

VISConf.exe

pid process

2248 VISConf.exe
2248 VISConf.exe

pid	process
2248	VISConf.exe
2248	VISConf.exe

C:\Users\Admin\AppData\Local\Temp\20063914274000\lib\VISConf.exe
"C:\Users\Admin\AppData\Local\Temp\20063914274000\lib\VISConf.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2248

memory/2248-0-0x0000000010000000-0x0000000010147000-memory.dmp

Filesize
1.3MB

Download
memory/2248-1-0x0000000001ED0000-0x0000000002048000-memory.dmp

Filesize
1.5MB

Download
memory/2248-2-0x0000000010000000-0x0000000010147000-memory.dmp

Filesize
1.3MB

Download
memory/2248-3-0x0000000001ED0000-0x0000000002048000-memory.dmp

Filesize
1.5MB

Download