6aab3b6b44e0998f84dac8bf0b42e5964651364f0d4f6695c0c915b8d85333c0

Analysis

max time kernel
147s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
27/06/2024, 22:41

Target
6aab3b6b44e0998f84dac8bf0b42e5964651364f0d4f6695c0c915b8d85333c0.exe
Size 475KB
Sample240627-2mcdysxhmn
SHA256 6aab3b6b44e0998f84dac8bf0b42e5964651364f0d4f6695c0c915b8d85333c0
MD5 61184e11838567d95f18ff2e5b2a4a81
SHA1 51ef12c6276974c727dbcc3616522b4be0813672
SHA512 193213b23bac49a67cbfb75e0327c6127a0e0495ba07baea53172d2b3223ccc0301aca079f3123db1b279546552a0c7580ea12b367620c57148782ed9c9290b2
SSDEEP 12288:JjdAK8wxqkXuxOqLXO3X2orpbKs/ZgjBRq:XA3wxqkXuxOq+rpbRZo
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4952	6aab3b6b44e0998f84dac8bf0b42e5964651364f0d4f6695c0c915b8d85333c0.exe

C:\Users\Admin\AppData\Local\Temp\6aab3b6b44e0998f84dac8bf0b42e5964651364f0d4f6695c0c915b8d85333c0.exe
"C:\Users\Admin\AppData\Local\Temp\6aab3b6b44e0998f84dac8bf0b42e5964651364f0d4f6695c0c915b8d85333c0.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4952

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4544,i,8660989700097327804,17931739887231169645,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:8
1⤵
PID:4384

vpslogs.dat

Path C:\ProgramData\vp\vpslogs.dat
Size 144B
SHA256 8a42af4d852dc854c78dd4d99fc903f13d5736da4720721e5ac474284562a57a
MD5 2c4ce1f81cb70fe07138615e5b619c0a
SHA1 db50e9cfbfcb728bfc2379d172255cade578bf31
SHA512 20a0dce7376c7cb5780651e638469d9b90f7f0a2cbc692fd21e2655adecef0a350e27e53891ad114958e1f05db67c15f7e7da1f05b616281f4920484b7716fa7
MD5 SHA1 SHA512

Submit Download