2e9bf1a4602dd21e54959748987a4ecb36ed4e14edb71fd0b436f1a3161d044d | Triage

Analysis

max time kernel
123s
max time network
146s
platform
windows10_x64
resource
win10v200430
submitted
17-07-2020 20:10

Sharing

Report Analysis Logs

General

Target

2e9bf1a4602dd21e54959748987a4ecb36ed4e14edb71fd0b436f1a3161d044d.exe
Size

276KB
MD5

f6612f12cbf308a24e7e7a2078659dac
SHA1

e06fe7eceba9176efe1515e9c03dcb7a29de100f
SHA256

2e9bf1a4602dd21e54959748987a4ecb36ed4e14edb71fd0b436f1a3161d044d
SHA512

9a59f8e9fcd0dc68bb9fb41b7c7d0e81eaa19bf9813c39bde875d72fe7a1c09b581098556a1d03f002c227450b8eae621dfc5096aa83c6d7bc8cb9034af8f3e2

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
972	2e9bf1a4602dd21e54959748987a4ecb36ed4e14edb71fd0b436f1a3161d044d.exe
972	2e9bf1a4602dd21e54959748987a4ecb36ed4e14edb71fd0b436f1a3161d044d.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
972	2e9bf1a4602dd21e54959748987a4ecb36ed4e14edb71fd0b436f1a3161d044d.exe
972	2e9bf1a4602dd21e54959748987a4ecb36ed4e14edb71fd0b436f1a3161d044d.exe
972	2e9bf1a4602dd21e54959748987a4ecb36ed4e14edb71fd0b436f1a3161d044d.exe
972	2e9bf1a4602dd21e54959748987a4ecb36ed4e14edb71fd0b436f1a3161d044d.exe

C:\Users\Admin\AppData\Local\Temp\2e9bf1a4602dd21e54959748987a4ecb36ed4e14edb71fd0b436f1a3161d044d.exe
"C:\Users\Admin\AppData\Local\Temp\2e9bf1a4602dd21e54959748987a4ecb36ed4e14edb71fd0b436f1a3161d044d.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/972-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download