Analysis
- max time kernel
136s - max time network
129s - platform
windows10_x64 - resource
win10v200430 - submitted
17/07/2020, 18:37
Static task
static1
Behavioral task
behavioral1
Sample
392a9593f769c01125c349ef208960f8ce2bc947a8784925fe0cfea97c092b56.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
392a9593f769c01125c349ef208960f8ce2bc947a8784925fe0cfea97c092b56.exe
Resource
win10v200430
0 signatures
0 seconds
General
- Target 392a9593f769c01125c349ef208960f8ce2bc947a8784925fe0cfea97c092b56.exe
- Size 276KB
- Sample200717-x4eedslcyx
- SHA256 392a9593f769c01125c349ef208960f8ce2bc947a8784925fe0cfea97c092b56
- MD5 599c95577d17ada5d8e30744e85951c2
- SHA1 5d6b4d07fcef2a80d1da9b9b6023500dbbc9649e
- SHA512 cb74183eb0445ed953e49df12523afe8916638f175476dd6aab03c92cc3d8b4537ae4517a49fa2d382c1952fb8383834868ae7ef1740fc8636353007dd828066
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2804 392a9593f769c01125c349ef208960f8ce2bc947a8784925fe0cfea97c092b56.exe 2804 392a9593f769c01125c349ef208960f8ce2bc947a8784925fe0cfea97c092b56.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2804 392a9593f769c01125c349ef208960f8ce2bc947a8784925fe0cfea97c092b56.exe 2804 392a9593f769c01125c349ef208960f8ce2bc947a8784925fe0cfea97c092b56.exe 2804 392a9593f769c01125c349ef208960f8ce2bc947a8784925fe0cfea97c092b56.exe 2804 392a9593f769c01125c349ef208960f8ce2bc947a8784925fe0cfea97c092b56.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\392a9593f769c01125c349ef208960f8ce2bc947a8784925fe0cfea97c092b56.exe"C:\Users\Admin\AppData\Local\Temp\392a9593f769c01125c349ef208960f8ce2bc947a8784925fe0cfea97c092b56.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:2804