e74ffe1434d51967d227826b273e637743112bfc49b93b701e4c6fbdef5858d1

Analysis

max time kernel
147s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
20/07/2024, 12:37

Target
e74ffe1434d51967d227826b273e637743112bfc49b93b701e4c6fbdef5858d1.exe
Size 482KB
Sample240720-ptsnassfkb
SHA256 e74ffe1434d51967d227826b273e637743112bfc49b93b701e4c6fbdef5858d1
MD5 fa702e456caa471e2b07df76d37de539
SHA1 d8eb319323259db640dae55d84c54126c03f9cad
SHA512 f09cf0001ccb70b3ce581164122be661fddd8aa00aef83871e9cee1e0cebac1c2d7f1c32987834b1d45b38d7860d9834c014597fef6d78fdebdb37751669b603
SSDEEP 6144:WXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZoAX0cN05Gv:WX7tPMK8ctGe4Dzl4h2QnuPs/Zoxcv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3088	e74ffe1434d51967d227826b273e637743112bfc49b93b701e4c6fbdef5858d1.exe

C:\Users\Admin\AppData\Local\Temp\e74ffe1434d51967d227826b273e637743112bfc49b93b701e4c6fbdef5858d1.exe
"C:\Users\Admin\AppData\Local\Temp\e74ffe1434d51967d227826b273e637743112bfc49b93b701e4c6fbdef5858d1.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3088

logs.dat

Path C:\ProgramData\vandash\logs.dat
Size 144B
SHA256 393e4261f285b6c09f0618dd9a7a08ba644b288cbb23f81f9cf49e15448487ba
MD5 345597df0422e0f4dc8fec469b810028
SHA1 aaa32dce8493968ff8f8f626085b5e470b953687
SHA512 d99e2fbfe21c55cec82c7009aad335018b1a206f660bae0b2ebf50d720a41ab188b549bbb5b1d105b1ee5f11dd36add4dce97c911408e563d3753d5cd2c8773f
MD5 SHA1 SHA512

Submit Download