Analysis
- max time kernel
69s - max time network
126s - platform
windows10_x64 - resource
win10 - submitted
17/07/2020, 18:32
Static task
static1
Behavioral task
behavioral1
Sample
548f27b24439151951cb8d050522464c9def1a24e7ce887e0b4700e727743f4d.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
548f27b24439151951cb8d050522464c9def1a24e7ce887e0b4700e727743f4d.exe
Resource
win10
0 signatures
0 seconds
General
- Target 548f27b24439151951cb8d050522464c9def1a24e7ce887e0b4700e727743f4d.exe
- Size 276KB
- Sample200717-wdvbmrvxta
- SHA256 548f27b24439151951cb8d050522464c9def1a24e7ce887e0b4700e727743f4d
- MD5 764b5e9b1d06bd7ec2ff77861359d48e
- SHA1 72d425a011865ff0b123635bb6e571d103c5d97c
- SHA512 94b99101dca5b8629128757400b4a039a317db8d1217131c372cf25064317c0be6093b4759f0a15c62a4b5879e7f5263ca01c0052d39c5446c6f0e4737d90f46
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3100 548f27b24439151951cb8d050522464c9def1a24e7ce887e0b4700e727743f4d.exe 3100 548f27b24439151951cb8d050522464c9def1a24e7ce887e0b4700e727743f4d.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3100 548f27b24439151951cb8d050522464c9def1a24e7ce887e0b4700e727743f4d.exe 3100 548f27b24439151951cb8d050522464c9def1a24e7ce887e0b4700e727743f4d.exe 3100 548f27b24439151951cb8d050522464c9def1a24e7ce887e0b4700e727743f4d.exe 3100 548f27b24439151951cb8d050522464c9def1a24e7ce887e0b4700e727743f4d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\548f27b24439151951cb8d050522464c9def1a24e7ce887e0b4700e727743f4d.exe"C:\Users\Admin\AppData\Local\Temp\548f27b24439151951cb8d050522464c9def1a24e7ce887e0b4700e727743f4d.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3100