ec6af81f8e38fd7596419df23d85cbcb588e0951d43ec01693800a2b6c771903 | Triage™

Analysis

max time kernel
127s
max time network
150s
platform
windows10_x64
resource
win10v200430
submitted
17/07/2020, 16:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ec6af81f8e38fd7596419df23d85cbcb588e0951d43ec01693800a2b6c771903.exe
Size 228KB
Sample200717-3ds21jvqd2
SHA256 ec6af81f8e38fd7596419df23d85cbcb588e0951d43ec01693800a2b6c771903
MD5 2cef351507779d242bfec2f7fda95322
SHA1 18ef0a1d98527fb30d1d6a902c9726cd7d0f95f9
SHA512 532c54a08fc628f910e9ab03bb0013fe0da48924ad49324fa2f49b96cf88a7cc5fdf452b29840d1a7dee033804c221b2935889d4e7e97777262e2ebf052b5ebd
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1612	ec6af81f8e38fd7596419df23d85cbcb588e0951d43ec01693800a2b6c771903.exe
1612	ec6af81f8e38fd7596419df23d85cbcb588e0951d43ec01693800a2b6c771903.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1612	ec6af81f8e38fd7596419df23d85cbcb588e0951d43ec01693800a2b6c771903.exe
1612	ec6af81f8e38fd7596419df23d85cbcb588e0951d43ec01693800a2b6c771903.exe
1612	ec6af81f8e38fd7596419df23d85cbcb588e0951d43ec01693800a2b6c771903.exe
1612	ec6af81f8e38fd7596419df23d85cbcb588e0951d43ec01693800a2b6c771903.exe

C:\Users\Admin\AppData\Local\Temp\ec6af81f8e38fd7596419df23d85cbcb588e0951d43ec01693800a2b6c771903.exe
"C:\Users\Admin\AppData\Local\Temp\ec6af81f8e38fd7596419df23d85cbcb588e0951d43ec01693800a2b6c771903.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:1612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1612-0-0x0000000002220000-0x000000000222C000-memory.dmp

Download