5578d0dd0e9a6d2bd5bf5f5b7f337ba701c3ffe3a8dcb65a6c93c41b1350d56b | Triage

Analysis

max time kernel
149s
max time network
143s
platform
windows10_x64
resource
win10
submitted
17/07/2020, 20:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5578d0dd0e9a6d2bd5bf5f5b7f337ba701c3ffe3a8dcb65a6c93c41b1350d56b.exe
Size

276KB
MD5

386c6c93769d08dd8c478b9b9948b7f8
SHA1

8b483b698518040983144a02c621091067ce8b12
SHA256

5578d0dd0e9a6d2bd5bf5f5b7f337ba701c3ffe3a8dcb65a6c93c41b1350d56b
SHA512

707952857a4b0257acb39452e6696c5a1da3e676f9cd6535463ddef74549920c34dd369be2ee7c4c9107eb2ffbdbc0d428ecd2cbb65001b239ea77d59c23fd79

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2784	5578d0dd0e9a6d2bd5bf5f5b7f337ba701c3ffe3a8dcb65a6c93c41b1350d56b.exe
2784	5578d0dd0e9a6d2bd5bf5f5b7f337ba701c3ffe3a8dcb65a6c93c41b1350d56b.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2784	5578d0dd0e9a6d2bd5bf5f5b7f337ba701c3ffe3a8dcb65a6c93c41b1350d56b.exe
2784	5578d0dd0e9a6d2bd5bf5f5b7f337ba701c3ffe3a8dcb65a6c93c41b1350d56b.exe
2784	5578d0dd0e9a6d2bd5bf5f5b7f337ba701c3ffe3a8dcb65a6c93c41b1350d56b.exe
2784	5578d0dd0e9a6d2bd5bf5f5b7f337ba701c3ffe3a8dcb65a6c93c41b1350d56b.exe
2784	5578d0dd0e9a6d2bd5bf5f5b7f337ba701c3ffe3a8dcb65a6c93c41b1350d56b.exe
2784	5578d0dd0e9a6d2bd5bf5f5b7f337ba701c3ffe3a8dcb65a6c93c41b1350d56b.exe

C:\Users\Admin\AppData\Local\Temp\5578d0dd0e9a6d2bd5bf5f5b7f337ba701c3ffe3a8dcb65a6c93c41b1350d56b.exe
"C:\Users\Admin\AppData\Local\Temp\5578d0dd0e9a6d2bd5bf5f5b7f337ba701c3ffe3a8dcb65a6c93c41b1350d56b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:2784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2784-0-0x00000000021E0000-0x00000000021EC000-memory.dmp

Filesize
48KB

Download