5156da7763a2663b096cb09445183f6d1abb83c061e7bcc196068f5bac81454f | Triage

Analysis

max time kernel
63s
max time network
136s
platform
windows10_x64
resource
win10v200430
submitted
17-07-2020 22:11

Sharing

Report Analysis Logs

General

Target

5156da7763a2663b096cb09445183f6d1abb83c061e7bcc196068f5bac81454f.exe
Size

276KB
MD5

59154514828386e7d0a8a9198eb50d3f
SHA1

f94c885dc89f065eb1a8840c966ee020eba880ee
SHA256

5156da7763a2663b096cb09445183f6d1abb83c061e7bcc196068f5bac81454f
SHA512

71c5d0d477f5dbf2cfe5edd19e33be75f5767b5f6225619e39959d988c15b1f3d6ccf34dbcd2a6e62fbea46ad514c149916dd3d359ee80d00d392c8b82a7fac1

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2536	5156da7763a2663b096cb09445183f6d1abb83c061e7bcc196068f5bac81454f.exe
2536	5156da7763a2663b096cb09445183f6d1abb83c061e7bcc196068f5bac81454f.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2536	5156da7763a2663b096cb09445183f6d1abb83c061e7bcc196068f5bac81454f.exe
2536	5156da7763a2663b096cb09445183f6d1abb83c061e7bcc196068f5bac81454f.exe
2536	5156da7763a2663b096cb09445183f6d1abb83c061e7bcc196068f5bac81454f.exe
2536	5156da7763a2663b096cb09445183f6d1abb83c061e7bcc196068f5bac81454f.exe

C:\Users\Admin\AppData\Local\Temp\5156da7763a2663b096cb09445183f6d1abb83c061e7bcc196068f5bac81454f.exe
"C:\Users\Admin\AppData\Local\Temp\5156da7763a2663b096cb09445183f6d1abb83c061e7bcc196068f5bac81454f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:2536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2536-0-0x00000000021F0000-0x00000000021FC000-memory.dmp

Filesize
48KB

Download