b5476446d4f5ac386bdd94987323ed71f70de54016ba19ce31e6e46b43e267ce

Analysis

max time kernel
149s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
08/05/2024, 19:08

Target
sz.exe
Size 1.2MB
Sample240508-xtnncaae6s
SHA256 bcc516b915a8826ef12689e455d0b1afaa7ad1eae534729eb43e6639a95992f6
MD5 5fd84590e2e1358a8e51fb76b1b3d721
SHA1 eea0902b66e1082a5ba9a1ad7c4bcd3fb5d53154
SHA512 3e9de52d11522b5115d30b51a6cf5b43e28df27432e7d0aa0eeecd0648ab1d3622b30f921bbed011681ba7c286d71053486bb0b6949103b69adab1cc4e5e1281
SSDEEP 24576:hyPL2BkBGuDHCu9lpaE6ua0gY28UlyvCKk3U9wlozxjv2k6DjIVnF0SK+OGkn:G2BkBpCurMpujW8ptxOkMj6nFjdO5n
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4788	sz.exe
4788	sz.exe

C:\Users\Admin\AppData\Local\Temp\sz.exe
"C:\Users\Admin\AppData\Local\Temp\sz.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4788

memory/4788-3-0x00000000038F0000-0x00000000038F1000-memory.dmp

Download

memory/4788-4-0x00000000038F0000-0x00000000038F1000-memory.dmp

Download