519d6d8d812e4625ed5460b7846409450d8728fa0095b6dc477bb794a537be66 | Triage

Analysis

max time kernel
124s
max time network
147s
platform
windows10_x64
resource
win10v200430
submitted
17-07-2020 20:14

Sharing

Report Analysis Logs

General

Target

519d6d8d812e4625ed5460b7846409450d8728fa0095b6dc477bb794a537be66.exe
Size

276KB
MD5

39b50a2992e614aea12ced1e372cfc4d
SHA1

485674d9660125537cab668f0fe91a4474533393
SHA256

519d6d8d812e4625ed5460b7846409450d8728fa0095b6dc477bb794a537be66
SHA512

227e5c6baf9924d7e24d3c3a65b7e4ca5bd43b9f1cf42bfa9451460f554518f68af5b637a2a7a10ab9dedfb2033a3f46e5a6e536f678a356fc7d8a961acb85a0

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3848	519d6d8d812e4625ed5460b7846409450d8728fa0095b6dc477bb794a537be66.exe
3848	519d6d8d812e4625ed5460b7846409450d8728fa0095b6dc477bb794a537be66.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3848	519d6d8d812e4625ed5460b7846409450d8728fa0095b6dc477bb794a537be66.exe
3848	519d6d8d812e4625ed5460b7846409450d8728fa0095b6dc477bb794a537be66.exe
3848	519d6d8d812e4625ed5460b7846409450d8728fa0095b6dc477bb794a537be66.exe
3848	519d6d8d812e4625ed5460b7846409450d8728fa0095b6dc477bb794a537be66.exe

C:\Users\Admin\AppData\Local\Temp\519d6d8d812e4625ed5460b7846409450d8728fa0095b6dc477bb794a537be66.exe
"C:\Users\Admin\AppData\Local\Temp\519d6d8d812e4625ed5460b7846409450d8728fa0095b6dc477bb794a537be66.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3848-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download