fc48a13196efe0a25dbb20d9caa2db96c0ff1c70f3c442e0802417b806712ff6 | Triage

Analysis

max time kernel
128s
max time network
125s
platform
windows10_x64
resource
win10v200430
submitted
17-07-2020 21:42

Sharing

Report Analysis Logs

General

Target

fc48a13196efe0a25dbb20d9caa2db96c0ff1c70f3c442e0802417b806712ff6.exe
Size

276KB
MD5

c91ab42bb677004e4261cd0df6226a52
SHA1

d37a827fbf840ad75596acdab0655042c4e2e80b
SHA256

fc48a13196efe0a25dbb20d9caa2db96c0ff1c70f3c442e0802417b806712ff6
SHA512

005d20af4b91a409edc29fec9389402de6a2494a12c4040a7981c1bd51501e2b4ea615f4b81a67ce6bcf68847e71d93d7e92b18dfa704ef66cab353a5d1ded59

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3264	fc48a13196efe0a25dbb20d9caa2db96c0ff1c70f3c442e0802417b806712ff6.exe
3264	fc48a13196efe0a25dbb20d9caa2db96c0ff1c70f3c442e0802417b806712ff6.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3264	fc48a13196efe0a25dbb20d9caa2db96c0ff1c70f3c442e0802417b806712ff6.exe
3264	fc48a13196efe0a25dbb20d9caa2db96c0ff1c70f3c442e0802417b806712ff6.exe
3264	fc48a13196efe0a25dbb20d9caa2db96c0ff1c70f3c442e0802417b806712ff6.exe
3264	fc48a13196efe0a25dbb20d9caa2db96c0ff1c70f3c442e0802417b806712ff6.exe

C:\Users\Admin\AppData\Local\Temp\fc48a13196efe0a25dbb20d9caa2db96c0ff1c70f3c442e0802417b806712ff6.exe
"C:\Users\Admin\AppData\Local\Temp\fc48a13196efe0a25dbb20d9caa2db96c0ff1c70f3c442e0802417b806712ff6.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3264-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download