317771a264b840de404a5f220372ffbd8fb84c0a8adab7fb393d0cf335e5c473 | Triage™

Analysis

max time kernel
131s
max time network
132s
platform
windows10_x64
resource
win10v200430
submitted
17/07/2020, 19:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
317771a264b840de404a5f220372ffbd8fb84c0a8adab7fb393d0cf335e5c473.exe
Size 276KB
Sample200717-psgp8b8wsn
SHA256 317771a264b840de404a5f220372ffbd8fb84c0a8adab7fb393d0cf335e5c473
MD5 f7792075abdf7155b03276fcc529153c
SHA1 2d9b4b7285e4d573f64ef0f0e0ef28de555296db
SHA512 26a2448d41aa3e1bf99420892db9abb15062e8ed8a6492b7343bab805fa80d9513e8663974132199cb914e9616ffa39640276200da1ba23f1ce777d9944da737
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1732	317771a264b840de404a5f220372ffbd8fb84c0a8adab7fb393d0cf335e5c473.exe
1732	317771a264b840de404a5f220372ffbd8fb84c0a8adab7fb393d0cf335e5c473.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1732	317771a264b840de404a5f220372ffbd8fb84c0a8adab7fb393d0cf335e5c473.exe
1732	317771a264b840de404a5f220372ffbd8fb84c0a8adab7fb393d0cf335e5c473.exe
1732	317771a264b840de404a5f220372ffbd8fb84c0a8adab7fb393d0cf335e5c473.exe
1732	317771a264b840de404a5f220372ffbd8fb84c0a8adab7fb393d0cf335e5c473.exe

C:\Users\Admin\AppData\Local\Temp\317771a264b840de404a5f220372ffbd8fb84c0a8adab7fb393d0cf335e5c473.exe
"C:\Users\Admin\AppData\Local\Temp\317771a264b840de404a5f220372ffbd8fb84c0a8adab7fb393d0cf335e5c473.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1732-0-0x00000000021D0000-0x00000000021DC000-memory.dmp

Download