2c9da8abe4f89235c9daf4fe872ffdec67a1267525715c0ed648a3a37fde8f69

Analysis

max time kernel
125s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
30-09-2024 07:22

Target

$TEMP/$EXEFILE.exe
Size

6KB
MD5

5861e9267892e1f14793b1097508b325
SHA1

5a6a89e6a42673c0662396bdd63053f387a34b33
SHA256

6334231bf67a2c5b52ea79cd234298cb0da81da4f939835a4adf243d19f886ae
SHA512

1790085c5a4f1ae5ce6bac8d755e9f9c8a6444769a784197b58714d778ea624caccc6628546005146902235a83743ea13c615694411d0e50c1a3f68df371779f
SSDEEP

96:O7x4GFlhgpfbhTX/Rfo/EsL2fZ3JLBOCCMtmOaxhwwT:OxVfKbFX/RASR3uCvtmhHD

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1720	$EXEFILE.exe
1720	$EXEFILE.exe

C:\Users\Admin\AppData\Local\Temp\$TEMP\$EXEFILE.exe
"C:\Users\Admin\AppData\Local\Temp\$TEMP\$EXEFILE.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1720

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4448,i,1330210614411927383,9239043499051775691,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:8
1⤵
PID:5024

memory/1720-0-0x00007FFCBAE35000-0x00007FFCBAE36000-memory.dmp

Filesize
4KB

Download
memory/1720-1-0x00007FFCBAB80000-0x00007FFCBB521000-memory.dmp

Filesize
9.6MB

Download
memory/1720-2-0x000000001AFF0000-0x000000001B032000-memory.dmp

Filesize
264KB

Download
memory/1720-4-0x000000001B5B0000-0x000000001BA7E000-memory.dmp

Filesize
4.8MB

Download
memory/1720-3-0x00007FFCBAB80000-0x00007FFCBB521000-memory.dmp

Filesize
9.6MB

Download
memory/1720-5-0x000000001BA80000-0x000000001BB1C000-memory.dmp

Filesize
624KB

Download
memory/1720-6-0x0000000000A60000-0x0000000000A68000-memory.dmp

Filesize
32KB

Download
memory/1720-7-0x00007FFCBAB80000-0x00007FFCBB521000-memory.dmp

Filesize
9.6MB

Download
memory/1720-8-0x00007FFCBAB80000-0x00007FFCBB521000-memory.dmp

Filesize
9.6MB

Download
memory/1720-9-0x00007FFCBAB80000-0x00007FFCBB521000-memory.dmp

Filesize
9.6MB

Download
memory/1720-10-0x00007FFCBAE35000-0x00007FFCBAE36000-memory.dmp

Filesize
4KB

Download
memory/1720-11-0x00007FFCBAB80000-0x00007FFCBB521000-memory.dmp

Filesize
9.6MB

Download
memory/1720-14-0x00007FFCBAB80000-0x00007FFCBB521000-memory.dmp

Filesize
9.6MB

Download