8298fb3df72d5adf8d8a4bebd0d84074fc1dfc15eae110f787d499978a12c3e1

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
17/10/2024, 19:40

Target

$EXEFILE.exe
Size

6KB
MD5

30bfedc658f64ad26beeaf7f86f59195
SHA1

c117d11c71b174dcbc4befa04d0189ef653a4fbb
SHA256

4cc27e18b1a79e729ef3c3032257f3b1e4b5cb55ea34b9e548380b01493cc2c3
SHA512

79f3ea5c465220d58e139d9829bd3f00faf4a39113e02b8e549f42496fb62263de4751063a085bf3d2962b15c72728309261f1faf3579e36e99198d7ecf536b6
SSDEEP

96:H/xEAOhcoR5m76X/Rlo/u5LaXiVXLBOCPwveaxhdy+v8:fxUaOm76X/RS2syCCGHd1v8

Score

1^/10

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
780	$EXEFILE.exe
780	$EXEFILE.exe

C:\Users\Admin\AppData\Local\Temp\$EXEFILE.exe
"C:\Users\Admin\AppData\Local\Temp\$EXEFILE.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:780

memory/780-0-0x000007FEF603E000-0x000007FEF603F000-memory.dmp

Filesize
4KB

Download
memory/780-1-0x00000000005F0000-0x0000000000632000-memory.dmp

Filesize
264KB

Download
memory/780-2-0x000007FEF5D80000-0x000007FEF671D000-memory.dmp

Filesize
9.6MB

Download
memory/780-3-0x000007FEF5D80000-0x000007FEF671D000-memory.dmp

Filesize
9.6MB

Download
memory/780-4-0x000007FEF5D80000-0x000007FEF671D000-memory.dmp

Filesize
9.6MB

Download
memory/780-6-0x000007FEF5D80000-0x000007FEF671D000-memory.dmp

Filesize
9.6MB

Download
memory/780-5-0x000007FEF5D80000-0x000007FEF671D000-memory.dmp

Filesize
9.6MB

Download
memory/780-7-0x000007FEF5D80000-0x000007FEF671D000-memory.dmp

Filesize
9.6MB

Download
memory/780-8-0x000007FEF603E000-0x000007FEF603F000-memory.dmp

Filesize
4KB

Download
memory/780-9-0x000007FEF5D80000-0x000007FEF671D000-memory.dmp

Filesize
9.6MB

Download
memory/780-11-0x000007FEF5D80000-0x000007FEF671D000-memory.dmp

Filesize
9.6MB

Download