Analysis
-
max time kernel
116s -
max time network
130s -
platform
windows10_x64 -
resource
win10 -
submitted
17/07/2020, 22:54
Static task
static1
Behavioral task
behavioral1
Sample
6e9208e419b82f71dc9ce7e49463b97eb55d23b00149a19d6dab00d5fa008a30.exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
6e9208e419b82f71dc9ce7e49463b97eb55d23b00149a19d6dab00d5fa008a30.exe
Resource
win10
0 signatures
0 seconds
General
-
Target
6e9208e419b82f71dc9ce7e49463b97eb55d23b00149a19d6dab00d5fa008a30.exe
-
Size
273KB
-
MD5
65a549b430d249513a366cb096b582f2
-
SHA1
b6b640b4d55b16a2107ba25b1166f3b8d7608aae
-
SHA256
6e9208e419b82f71dc9ce7e49463b97eb55d23b00149a19d6dab00d5fa008a30
-
SHA512
6b7a8f844fd404fbbd0e823a42b916054192e763e618f24cfa34f9e13143df1aebd165ce2173abf9dd180fa7a50b54bccd94a5f1ebc3b9db3921bb999c2a419f
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3588 6e9208e419b82f71dc9ce7e49463b97eb55d23b00149a19d6dab00d5fa008a30.exe 3588 6e9208e419b82f71dc9ce7e49463b97eb55d23b00149a19d6dab00d5fa008a30.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3588 6e9208e419b82f71dc9ce7e49463b97eb55d23b00149a19d6dab00d5fa008a30.exe 3588 6e9208e419b82f71dc9ce7e49463b97eb55d23b00149a19d6dab00d5fa008a30.exe 3588 6e9208e419b82f71dc9ce7e49463b97eb55d23b00149a19d6dab00d5fa008a30.exe 3588 6e9208e419b82f71dc9ce7e49463b97eb55d23b00149a19d6dab00d5fa008a30.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6e9208e419b82f71dc9ce7e49463b97eb55d23b00149a19d6dab00d5fa008a30.exe"C:\Users\Admin\AppData\Local\Temp\6e9208e419b82f71dc9ce7e49463b97eb55d23b00149a19d6dab00d5fa008a30.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3588