596263884d5474c2d3bb01238718eb30ce2c8539c99f66fa26b92171c6786c26

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
28-06-2024 11:22

Target

lab_samples/a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215.exe
Size

312KB
MD5

3c1228d714eeda8f94ebbcdb1d75a284
SHA1

1728dfe3e2378b6c88e859e6af79c32b612aefc6
SHA256

a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215
SHA512

b3b6e81b9588fbbf42a96e4ce71e7428b52dd9b59a01ac934e63f1bce309609f507ae6f827c776a3eedc0afe45521466c4ddb76b851476fc774c8e3edcf713e4
SSDEEP

6144:eaXnROjLTs0Yb+AjEk+9x94SsWLkBPR3T7IrRAFoFc3WUk:1hOjXjY9tKxu3WwPRj0eoFc3WR

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215.exe

pid process

1944 a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215.exe

pid	process
1944	a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215.exe

C:\Users\Admin\AppData\Local\Temp\lab_samples\a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215.exe
"C:\Users\Admin\AppData\Local\Temp\lab_samples\a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1944

memory/1944-2-0x00000000007E0000-0x0000000000800000-memory.dmp

Filesize
128KB

Download