3f5bc754e3c5658ab4d328d83444144fb049e589621c31e404a176607ab58f69

Analysis

max time kernel
150s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 18:12

Target
Long Thân Kỷ Nguyên.exe
Size 651KB
Sample260820-wtmklsfa79
SHA256 3f5bc754e3c5658ab4d328d83444144fb049e589621c31e404a176607ab58f69
MD5 67242cfbc71bcd7b6e02ee4b2848f39c
SHA1 0f2a8c293695cdd52408900c23b3d52d0f9b80ee
SHA512 8e4fa6e616760175d409116805f3fda2ef2a8b75e0134282ff83f472764f0370654386f27e2afd00c4ff255d1b5ad5cfe7d4721ea765819a6d95df6932c9e617
SSDEEP 12288:5/7g4aOD8g7EvGAHOWBBBa2ONelhqAQw3r+rJoour/q3aI/:hFaOrIv9OOTa2nHqAQw3rJF/I/
TLSH
T1CAE49D17B313AE96C042653B4411BBA747A45AD22A1EDB379131FFE37E436468F813E2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3240	Long Thân Kỷ Nguyên.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3240 wrote to memory of 4004	3240	Long Thân Kỷ Nguyên.exe	86

C:\Users\Admin\AppData\Local\Temp\Long Thân Kỷ Nguyên.exe
"C:\Users\Admin\AppData\Local\Temp\Long Thân Kỷ Nguyên.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3240
- C:\Users\Admin\AppData\Local\Temp\UnityCrashHandler64.exe
  "C:\Users\Admin\AppData\Local\Temp\UnityCrashHandler64.exe" --attach 3240 1580376461312
  2⤵
  PID:4004

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4f0 0x398
1⤵
PID:2376