7b638cf14d6a0a442ff21de012420ff235ca91818a23700a7c36e7bd50b52421

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
19-04-2024 19:46

Target

20063914274000/lib/VISConf.exe
Size

100KB
MD5

b82f36f047a4203e9c0dcd563458cca8
SHA1

616c8b12114ea14373ae3919a402ef4d7ef769a6
SHA256

89dd858fd0de819aea053477ff36b15f169087ca50e461d85f51b2179e2bd353
SHA512

e596633801af32165b01243af866dfd1ce9daaca9b2a01d516addda9db40ec344d617301f05a7e315308dc419425e1e55ca76274510a263d1bb4667ec384fb74
SSDEEP

1536:svhpGkWDDjpb1Vn5AO+E37d/KyOD2FVs0sniUrYHQ6zQ6cMla1NF:SjxWDDjpb1Vn57+a1OD2FwN6c++NF

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

VISConf.exe

pid process

4484 VISConf.exe
4484 VISConf.exe

pid	process
4484	VISConf.exe
4484	VISConf.exe

C:\Users\Admin\AppData\Local\Temp\20063914274000\lib\VISConf.exe
"C:\Users\Admin\AppData\Local\Temp\20063914274000\lib\VISConf.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4484

memory/4484-0-0x0000000010000000-0x0000000010147000-memory.dmp

Filesize
1.3MB

Download
memory/4484-1-0x00000000021F0000-0x0000000002368000-memory.dmp

Filesize
1.5MB

Download
memory/4484-2-0x0000000010000000-0x0000000010147000-memory.dmp

Filesize
1.3MB

Download