596263884d5474c2d3bb01238718eb30ce2c8539c99f66fa26b92171c6786c26

Analysis

max time kernel
92s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
07-07-2024 10:56

Target

lab_samples/a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215.exe
Size

312KB
MD5

3c1228d714eeda8f94ebbcdb1d75a284
SHA1

1728dfe3e2378b6c88e859e6af79c32b612aefc6
SHA256

a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215
SHA512

b3b6e81b9588fbbf42a96e4ce71e7428b52dd9b59a01ac934e63f1bce309609f507ae6f827c776a3eedc0afe45521466c4ddb76b851476fc774c8e3edcf713e4
SSDEEP

6144:eaXnROjLTs0Yb+AjEk+9x94SsWLkBPR3T7IrRAFoFc3WUk:1hOjXjY9tKxu3WwPRj0eoFc3WR

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5008	a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215.exe

C:\Users\Admin\AppData\Local\Temp\lab_samples\a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215.exe
"C:\Users\Admin\AppData\Local\Temp\lab_samples\a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5008

memory/5008-2-0x0000000002190000-0x00000000021B0000-memory.dmp

Filesize
128KB

Download