Analysis
- max time kernel
123s - max time network
124s - platform
windows10_x64 - resource
win10 - submitted
17/07/2020, 19:53
Static task
static1
Behavioral task
behavioral1
Sample
660f987fae2c29c8c60ad0c274c07468fcd2003ff9a5c2959f15cb4ca5b5a152.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
660f987fae2c29c8c60ad0c274c07468fcd2003ff9a5c2959f15cb4ca5b5a152.exe
Resource
win10
0 signatures
0 seconds
General
- Target 660f987fae2c29c8c60ad0c274c07468fcd2003ff9a5c2959f15cb4ca5b5a152.exe
- Size 276KB
- Sample200717-sraaskekts
- SHA256 660f987fae2c29c8c60ad0c274c07468fcd2003ff9a5c2959f15cb4ca5b5a152
- MD5 339938f2e1593b366feba0150d03c641
- SHA1 f22b0b0ae53a8a31e9b341eaa64c7cca03624fc9
- SHA512 3f37990dc6e61218b9e055c0a39a034393d0e5684c221c9fe1ee30fc0bcb674af73ad0e932e46ce50f1720d45cef1e9be2c8546e3535b4e851226502eb8f1841
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 716 660f987fae2c29c8c60ad0c274c07468fcd2003ff9a5c2959f15cb4ca5b5a152.exe 716 660f987fae2c29c8c60ad0c274c07468fcd2003ff9a5c2959f15cb4ca5b5a152.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 716 660f987fae2c29c8c60ad0c274c07468fcd2003ff9a5c2959f15cb4ca5b5a152.exe 716 660f987fae2c29c8c60ad0c274c07468fcd2003ff9a5c2959f15cb4ca5b5a152.exe 716 660f987fae2c29c8c60ad0c274c07468fcd2003ff9a5c2959f15cb4ca5b5a152.exe 716 660f987fae2c29c8c60ad0c274c07468fcd2003ff9a5c2959f15cb4ca5b5a152.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\660f987fae2c29c8c60ad0c274c07468fcd2003ff9a5c2959f15cb4ca5b5a152.exe"C:\Users\Admin\AppData\Local\Temp\660f987fae2c29c8c60ad0c274c07468fcd2003ff9a5c2959f15cb4ca5b5a152.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:716