a41d1e5f1099e2761e29bee4962b0c3769b3673d895d66d81241df511c6d8288 | Triage

Analysis

max time kernel
146s
max time network
128s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 07:16

Sharing

Report Analysis Logs

General

Target

a41d1e5f1099e2761e29bee4962b0c3769b3673d895d66d81241df511c6d8288.exe
Size

273KB
MD5

c1de7b2b4b282cebc216234badeb1c46
SHA1

dc6331bc6c7f75a33b1c5fb81ce7db897765d096
SHA256

a41d1e5f1099e2761e29bee4962b0c3769b3673d895d66d81241df511c6d8288
SHA512

ac60480b5db179cdf38741d051d8d6f8b1568a73b6a38a929529fff1e0d332a7136b60620674bd77a1d91bb6e29776d608121a9f886b995499e950810df1d685

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3008	a41d1e5f1099e2761e29bee4962b0c3769b3673d895d66d81241df511c6d8288.exe
3008	a41d1e5f1099e2761e29bee4962b0c3769b3673d895d66d81241df511c6d8288.exe
3008	a41d1e5f1099e2761e29bee4962b0c3769b3673d895d66d81241df511c6d8288.exe
3008	a41d1e5f1099e2761e29bee4962b0c3769b3673d895d66d81241df511c6d8288.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3008	a41d1e5f1099e2761e29bee4962b0c3769b3673d895d66d81241df511c6d8288.exe
3008	a41d1e5f1099e2761e29bee4962b0c3769b3673d895d66d81241df511c6d8288.exe

C:\Users\Admin\AppData\Local\Temp\a41d1e5f1099e2761e29bee4962b0c3769b3673d895d66d81241df511c6d8288.exe
"C:\Users\Admin\AppData\Local\Temp\a41d1e5f1099e2761e29bee4962b0c3769b3673d895d66d81241df511c6d8288.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3008-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download