3cd8b9a28457e586e2988300a4ec89cbda4df6c54914d920a2653b1b20018db9 | Triage

Analysis

max time kernel
64s
max time network
133s
platform
windows10_x64
resource
win10v200430
submitted
17-07-2020 19:11

Sharing

Report Analysis Logs

General

Target

3cd8b9a28457e586e2988300a4ec89cbda4df6c54914d920a2653b1b20018db9.exe
Size

276KB
MD5

bfa1ebf8ad8a6ec76bf9d672ee16ce40
SHA1

644b464c860d607104dfb81d2c0be3f0ee50f9db
SHA256

3cd8b9a28457e586e2988300a4ec89cbda4df6c54914d920a2653b1b20018db9
SHA512

6c2e8b1a57c0a3cdffd3a5a790115b9c64ee053ae3151492f15554bef922cd1f32b4b446bb4f49be886bdf28736ccbb37aff40d975264f89997feeb2e93c12de

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2564	3cd8b9a28457e586e2988300a4ec89cbda4df6c54914d920a2653b1b20018db9.exe
2564	3cd8b9a28457e586e2988300a4ec89cbda4df6c54914d920a2653b1b20018db9.exe
2564	3cd8b9a28457e586e2988300a4ec89cbda4df6c54914d920a2653b1b20018db9.exe
2564	3cd8b9a28457e586e2988300a4ec89cbda4df6c54914d920a2653b1b20018db9.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2564	3cd8b9a28457e586e2988300a4ec89cbda4df6c54914d920a2653b1b20018db9.exe
2564	3cd8b9a28457e586e2988300a4ec89cbda4df6c54914d920a2653b1b20018db9.exe

C:\Users\Admin\AppData\Local\Temp\3cd8b9a28457e586e2988300a4ec89cbda4df6c54914d920a2653b1b20018db9.exe
"C:\Users\Admin\AppData\Local\Temp\3cd8b9a28457e586e2988300a4ec89cbda4df6c54914d920a2653b1b20018db9.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2564-0-0x00000000021D0000-0x00000000021DC000-memory.dmp

Filesize
48KB

Download