9c93cd60a6108167da782ab136db0779f684b4a6cfbf6e9ac570a66c31431ac2

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08-05-2024 20:08

Target

$APPDATA/HZDP/HZDStat.exe
Size

57KB
MD5

35c6d4f3e82b90d4ee994e56db88e6a7
SHA1

c0973bfb842fa447febe566abf0d5095a143fc3e
SHA256

9117253faa8d3e3dc992c4fa792c2e20a7b2efd2bf83f9ef831e90dcc6854908
SHA512

b08d090e4351ff5fc335a4ab4e51fffff006f0114cc7463b76fe65c5bc37964bd6223ec5bff5a602a08dab0eac78f7d04f0202db2fb2c78860bbb802d68713ab
SSDEEP

1536:MqTHDfqKnxONtQUUUUUcUocboUUUUUUUUUUUrqMFUUUUUUUUUUUUYUoUU1xbPUU3:hTHD5ONiUUUUUcUocboUUUUUUUUUUUrw

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

HZDStat.exe

pid process

2124 HZDStat.exe

pid	process
2124	HZDStat.exe

C:\Users\Admin\AppData\Local\Temp\$APPDATA\HZDP\HZDStat.exe
"C:\Users\Admin\AppData\Local\Temp\$APPDATA\HZDP\HZDStat.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2124