7b16382c24a5fdfa20c22ba76f483b6c840ace2cc0fc1e7934a37b67adc54627

Analysis

max time kernel
150s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/07/2026, 17:27

Target
7b16382c24a5fdfa20c22ba76f483b6c840ace2cc0fc1e7934a37b67adc54627.exe
Size 652KB
Sample260718-v1devabz5w
SHA256 7b16382c24a5fdfa20c22ba76f483b6c840ace2cc0fc1e7934a37b67adc54627
MD5 6ef6c69fa1b924a2a2dcdb72926c22d1
SHA1 b6f3a37a1d9a12bea3a1548bea256067d9369b7b
SHA512 fb0e337c787f10b3a119d10c753875c3a3332c97511412cd0fe17430d38538cf8ab376dd2c8044412b482f70fc4f566e7532be43865cc85308f84a6b3e0e938a
SSDEEP 6144:BfDKo6eWOkROP5xRhgr+3d1R4CvucmD2KMqaHZpq+KGr7uWK32ZYr21u:dKoClOzgrKd1R4KfU2Bq4ZrQ32aq1u
TLSH
T110E49F6177E412EAD1B7D13E8AD68F6AF6B2B8150720D7C701D442592F2BAE84E3F311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings	calc.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3772	OpenWith.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3788 wrote to memory of 4264	3788	7b16382c24a5fdfa20c22ba76f483b6c840ace2cc0fc1e7934a37b67adc54627.exe	85

C:\Users\Admin\AppData\Local\Temp\7b16382c24a5fdfa20c22ba76f483b6c840ace2cc0fc1e7934a37b67adc54627.exe
"C:\Users\Admin\AppData\Local\Temp\7b16382c24a5fdfa20c22ba76f483b6c840ace2cc0fc1e7934a37b67adc54627.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3788
- C:\Windows\SYSTEM32\calc.exe
  calc.exe
  2⤵
  - Modifies registry class
  PID:4264

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:3772