acac2e1bad58381fb4fa36027b7e9e8fb15158ef32f36533953f0e24068fe634

Analysis

max time kernel
142s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
16-05-2024 07:18

Target

hab_910.exe
Size

23.8MB
MD5

5315cb4a7c918bb55558404a33ab5150
SHA1

fed51c7af5bdd149402a061a8cf84d1419c5fae5
SHA256

141103b94a9e568b6e08289b1232c43047b8dd3ab79f830e045589847058ec2a
SHA512

46b4380aa4ed5aa67f2e6a68c5b9d2d5088c438a5f0c7b9270c3c80730031d95d23a175dd11ee8295ef0e8773d06bfdb2c09b76ab3bca1e2536d8ef6e579cf68
SSDEEP

393216:fF4KPkKrZ738l0YvUnpPZE65fhKoUdR1p4oORU7KIhursaz4tnbNExl2EdbG8rOX:zrrZXpPKQsyPrshbSx4WbsudK

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3852	hab_910.exe

C:\Users\Admin\AppData\Local\Temp\hab_910.exe
"C:\Users\Admin\AppData\Local\Temp\hab_910.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3852

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4280,i,2607710392823067546,4648797561512801463,262144 --variations-seed-version --mojo-platform-channel-handle=2860 /prefetch:8
1⤵
PID:4416

memory/3852-5-0x000000006ED40000-0x000000006EDA6000-memory.dmp

Filesize
408KB

Download
memory/3852-2-0x000000006E940000-0x000000006E950000-memory.dmp

Filesize
64KB

Download
memory/3852-6-0x000000006A1C0000-0x000000006A435000-memory.dmp

Filesize
2.5MB

Download
memory/3852-4-0x000000006FF00000-0x000000007002F000-memory.dmp

Filesize
1.2MB

Download
memory/3852-3-0x0000000061F00000-0x0000000061F48000-memory.dmp

Filesize
288KB

Download
memory/3852-1-0x000000006FBC0000-0x000000006FBC7000-memory.dmp

Filesize
28KB

Download
memory/3852-0-0x0000000000400000-0x0000000001BD3000-memory.dmp

Filesize
23.8MB

Download
memory/3852-10-0x0000000065100000-0x0000000065A83000-memory.dmp

Filesize
9.5MB

Download
memory/3852-30-0x000000006A1C0000-0x000000006A435000-memory.dmp

Filesize
2.5MB

Download
memory/3852-66-0x000000006A1C0000-0x000000006A435000-memory.dmp

Filesize
2.5MB

Download
memory/3852-78-0x000000006A1C0000-0x000000006A435000-memory.dmp

Filesize
2.5MB

Download