6b692cf83bb837c7642d1c374de2b85d92081fafff6eb41d2145a232aa6162a2

Analysis

user interaction
yes
max time kernel
58s
max time network
61s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/08/2026, 22:51

Target
John 316.exe
Size 597KB
Sample260826-2ssccsbr51
SHA256 6b692cf83bb837c7642d1c374de2b85d92081fafff6eb41d2145a232aa6162a2
MD5 02d3f9d1bc04317841489cfe15c96c46
SHA1 b5b5e5724116b8210135e8bc28c851cb930059fa
SHA512 0203132c748064a908442ca50ae6352c9ccc294f2208e2d9ace4dd1c7c8fe96ad884e1acf25262660e4cf40db343be7d97dd6e9f4f9978e469a0157c81b91397
SSDEEP 12288:lyw8mNf/AN/2TdNW4Znapzt5FRmA0CiYiYnr6C:lRf/AJ0NW4ZapZ5RiYnF
TLSH
T12FD49E41F1F840E8D03FD178968AE61BFA773844172055CBA3D449992FE77E0ABBB612
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4148	John 316.exe

C:\Users\Admin\AppData\Local\Temp\John 316.exe
"C:\Users\Admin\AppData\Local\Temp\John 316.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4148

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4416