b4f3b5d4db14198aa37f16e96e09c265d5e7ce323852c25d5eb7fe26ba382147

Analysis

max time kernel
159s
max time network
179s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
19/04/2024, 20:58

Target

dc crack/RAT/data/Zip.exe
Size

263KB
MD5

9a2ea4da5eec75298f16ba444d3a98d6
SHA1

f4f790430556e36d418498cd2f3112d04dabf877
SHA256

2293fe261d5c6f5f2a33004b11f068037677b7aa5a6f792031e31555f31f0d69
SHA512

69c86181722d2416c1836c9d24df268ba04704898643d2e741d76d1f1493cd140013c95d8e00ce7a95a280cdd5869769a0fffa2fb0c8dc41bb4c8d8fd69f58f4
SSDEEP

3072:sv/MtM8A6OOodzRMOSgNs2Dsx7Cwbj59HvhaxO6M65ysytvg6VNf0ETA8B9kxpjK:sstlOOo8x7n59Z+zyu65QxpX+t4sP

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5008	Zip.exe
5008	Zip.exe

C:\Users\Admin\AppData\Local\Temp\dc crack\RAT\data\Zip.exe
"C:\Users\Admin\AppData\Local\Temp\dc crack\RAT\data\Zip.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5008

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3108 --field-trial-handle=3060,i,1774866140584649235,8085848018931772189,262144 --variations-seed-version /prefetch:8
1⤵
PID:1588