6e83e0c682d0323703eb728f80cf43c0d88c8d06af7021176b7d7e1762ba78b1

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
05-05-2024 05:44

Target

Deceit ЧИТ/Cheat/Cyberdeceit.dll
Size

278KB
MD5

e97af6196f6ad879f27634fd35666063
SHA1

66a392dd9dad2acef19201996eb4022fdb4742ab
SHA256

c54d090299e30d69765093f77a5c973801e9e1bd852849227a2995b108b2ba19
SHA512

28a221e11feb125c225adc448a76e80a8c6453acbc7f992f3140a13ea77fdef6cdb6882b4173117032ee1f480628aa2279ca1c248a250f5bc11ff3ef2bef38fe
SSDEEP

6144:S993IGSkaCkOirRAaU/30WlXefc/2F8v7nhipPjm8:S93IGSkaCHw2Hk8uEeOv7nhiM

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

rundll32.exe

pid process

1176 rundll32.exe

pid	process
1176	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Deceit ЧИТ\Cheat\Cyberdeceit.dll",#1
1⤵
- Suspicious use of SetWindowsHookEx
PID:1176

memory/1176-0-0x00007FFC56530000-0x00007FFC56540000-memory.dmp

Filesize
64KB

Download