d5b4542dc001a5458e5989d2348973f2b29589d38bf9bd84d757d2731c2a2f79

Analysis

max time kernel
899s
max time network
409s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/05/2026, 18:50

Target
REC.exe
Size 69.9MB
Sample260516-xhbveagx21
SHA256 d5b4542dc001a5458e5989d2348973f2b29589d38bf9bd84d757d2731c2a2f79
MD5 d1f64a173f609e7d68a0afb6901ac29e
SHA1 c1e14bda8af5f84f2a41b019ceed41d8e033e023
SHA512 873db8f3dbcee8675c5a602ada8511bdac84e98ec5392fb8a263ea0b623719f936528bdb766e4d4fb64b6e5614400a63efce6441eb1719bd7b62e4341a9c7a13
SSDEEP 393216:zBhrU+fwhUoObW8NkM9fc44JWctj2AXmiAo/SPACHCon5iuBd7OpDWXckdEa9Mvl:znrUjUduMUtj2ATNLuo7
TLSH
T1F8F74B57F163B0CDE0EAD672534B2631FA71B8544B354FDB92608A283E70BA0677EB05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2432	REC.exe

C:\Users\Admin\AppData\Local\Temp\REC.exe
"C:\Users\Admin\AppData\Local\Temp\REC.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2432