Analysis
- max time kernel
116s - max time network
128s - platform
windows10_x64 - resource
win10 - submitted
17/07/2020, 16:08
Static task
static1
Behavioral task
behavioral1
Sample
6ab006eea702fd61cd055452ef6128cda78f4a15a8bb4dd81d5749b4e439d94f.exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
6ab006eea702fd61cd055452ef6128cda78f4a15a8bb4dd81d5749b4e439d94f.exe
Resource
win10
0 signatures
0 seconds
General
- Target 6ab006eea702fd61cd055452ef6128cda78f4a15a8bb4dd81d5749b4e439d94f.exe
- Size 228KB
- Sample200717-kpday562na
- SHA256 6ab006eea702fd61cd055452ef6128cda78f4a15a8bb4dd81d5749b4e439d94f
- MD5 a3e6d6af1959158c87d4b9cc70e5597a
- SHA1 8b6cee536fecf7376194247c7faef0a466992ec5
- SHA512 7da851d58bad728cbaae72cbe713e13f1a0865fe1b04f5d3bea48faaa3ef9d363eb4edd9347d92f429674e7699d2fcfd8e52696df44c93e1540d5e000cd361f0
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3544 6ab006eea702fd61cd055452ef6128cda78f4a15a8bb4dd81d5749b4e439d94f.exe 3544 6ab006eea702fd61cd055452ef6128cda78f4a15a8bb4dd81d5749b4e439d94f.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3544 6ab006eea702fd61cd055452ef6128cda78f4a15a8bb4dd81d5749b4e439d94f.exe 3544 6ab006eea702fd61cd055452ef6128cda78f4a15a8bb4dd81d5749b4e439d94f.exe 3544 6ab006eea702fd61cd055452ef6128cda78f4a15a8bb4dd81d5749b4e439d94f.exe 3544 6ab006eea702fd61cd055452ef6128cda78f4a15a8bb4dd81d5749b4e439d94f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6ab006eea702fd61cd055452ef6128cda78f4a15a8bb4dd81d5749b4e439d94f.exe"C:\Users\Admin\AppData\Local\Temp\6ab006eea702fd61cd055452ef6128cda78f4a15a8bb4dd81d5749b4e439d94f.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3544