Analysis
-
max time kernel
109s -
max time network
132s -
platform
windows10_x64 -
resource
win10v200430 -
submitted
17-07-2020 20:29
Static task
static1
Behavioral task
behavioral1
Sample
b1b458572f4182e1ff1a3fec7f863c9c355dc250a3e8c052f52157f8b2a92f4c.exe
Resource
win7
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
b1b458572f4182e1ff1a3fec7f863c9c355dc250a3e8c052f52157f8b2a92f4c.exe
Resource
win10v200430
windows10_x64
0 signatures
0 seconds
General
-
Target
b1b458572f4182e1ff1a3fec7f863c9c355dc250a3e8c052f52157f8b2a92f4c.exe
-
Size
276KB
-
MD5
fea09b404c4f888059eab17ba5a30589
-
SHA1
4d830a933d03d7667bbeba3e09c5a8be5a3f80b2
-
SHA256
b1b458572f4182e1ff1a3fec7f863c9c355dc250a3e8c052f52157f8b2a92f4c
-
SHA512
ee85b7a520376d632dfe8742a34d82dfe290a82c43b1d2c1c54fb4ec18f50fa03d637ac3b4dd3d3fe819e01736e9b8264d9d9bec49d29f6f1598b91585fc2126
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
b1b458572f4182e1ff1a3fec7f863c9c355dc250a3e8c052f52157f8b2a92f4c.exepid process 2416 b1b458572f4182e1ff1a3fec7f863c9c355dc250a3e8c052f52157f8b2a92f4c.exe 2416 b1b458572f4182e1ff1a3fec7f863c9c355dc250a3e8c052f52157f8b2a92f4c.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes:
b1b458572f4182e1ff1a3fec7f863c9c355dc250a3e8c052f52157f8b2a92f4c.exepid process 2416 b1b458572f4182e1ff1a3fec7f863c9c355dc250a3e8c052f52157f8b2a92f4c.exe 2416 b1b458572f4182e1ff1a3fec7f863c9c355dc250a3e8c052f52157f8b2a92f4c.exe 2416 b1b458572f4182e1ff1a3fec7f863c9c355dc250a3e8c052f52157f8b2a92f4c.exe 2416 b1b458572f4182e1ff1a3fec7f863c9c355dc250a3e8c052f52157f8b2a92f4c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b1b458572f4182e1ff1a3fec7f863c9c355dc250a3e8c052f52157f8b2a92f4c.exe"C:\Users\Admin\AppData\Local\Temp\b1b458572f4182e1ff1a3fec7f863c9c355dc250a3e8c052f52157f8b2a92f4c.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:2416