1ec93ba6bb93ad0a8cf749f998ba4ca2bf1edd56108f84f55b8585aace2c837e

Analysis

max time kernel
126s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
29/06/2024, 09:23

Target
1ec93ba6bb93ad0a8cf749f998ba4ca2bf1edd56108f84f55b8585aace2c837e.exe
Size 3.1MB
Sample240629-lcmtyavcjf
SHA256 1ec93ba6bb93ad0a8cf749f998ba4ca2bf1edd56108f84f55b8585aace2c837e
MD5 a791fffe9f51650ec750084d3074f237
SHA1 e645708f77a4baa60452ba790c7e41500d6b933c
SHA512 8b204745bc6e9087e0082664d98ad99a00fba1120ccd2809e507f4a479a83951c10ae09282a047def814006ab004ca5951a20b28ec80ba2b7e60ec93956b0b00
SSDEEP 98304:gIiiFrvIp7aJIWLb66D6E66f66DnE66i66DW6626DE66g6D6Z66E6D6566d6D66g:BFrF66D6E66f66DnE66i66DW6626DE6G
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1624	1ec93ba6bb93ad0a8cf749f998ba4ca2bf1edd56108f84f55b8585aace2c837e.exe
1624	1ec93ba6bb93ad0a8cf749f998ba4ca2bf1edd56108f84f55b8585aace2c837e.exe
1624	1ec93ba6bb93ad0a8cf749f998ba4ca2bf1edd56108f84f55b8585aace2c837e.exe

C:\Users\Admin\AppData\Local\Temp\1ec93ba6bb93ad0a8cf749f998ba4ca2bf1edd56108f84f55b8585aace2c837e.exe
"C:\Users\Admin\AppData\Local\Temp\1ec93ba6bb93ad0a8cf749f998ba4ca2bf1edd56108f84f55b8585aace2c837e.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1624

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3804,i,1809100026287847100,9768898026582633513,262144 --variations-seed-version --mojo-platform-channel-handle=4024 /prefetch:8
1⤵
PID:432

memory/1624-0-0x0000000010000000-0x0000000010178000-memory.dmp

Download