9c294976781ff3b97dc31301cd6a22db0e13ab81241ab605bd82c8006be0d9c2 | Triage

Analysis

max time kernel
135s
max time network
124s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 13:10

Sharing

Report Analysis Logs

General

Target

9c294976781ff3b97dc31301cd6a22db0e13ab81241ab605bd82c8006be0d9c2.exe
Size

100KB
MD5

8c36ce9d7b28d0f1c6e681c20476d2e3
SHA1

2dec81c034c6230498697c3317779a597c715dcd
SHA256

9c294976781ff3b97dc31301cd6a22db0e13ab81241ab605bd82c8006be0d9c2
SHA512

9dc6726e766c811d6baa1d21099f663d856b0fac5b323bf3dd933d4fc768c874830e02417286cde845d6c025dca41a2b3cd3e67141fada6ea1ef30c607960472

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2804	9c294976781ff3b97dc31301cd6a22db0e13ab81241ab605bd82c8006be0d9c2.exe
2804	9c294976781ff3b97dc31301cd6a22db0e13ab81241ab605bd82c8006be0d9c2.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2804	9c294976781ff3b97dc31301cd6a22db0e13ab81241ab605bd82c8006be0d9c2.exe
2804	9c294976781ff3b97dc31301cd6a22db0e13ab81241ab605bd82c8006be0d9c2.exe
2804	9c294976781ff3b97dc31301cd6a22db0e13ab81241ab605bd82c8006be0d9c2.exe
2804	9c294976781ff3b97dc31301cd6a22db0e13ab81241ab605bd82c8006be0d9c2.exe

C:\Users\Admin\AppData\Local\Temp\9c294976781ff3b97dc31301cd6a22db0e13ab81241ab605bd82c8006be0d9c2.exe
"C:\Users\Admin\AppData\Local\Temp\9c294976781ff3b97dc31301cd6a22db0e13ab81241ab605bd82c8006be0d9c2.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:2804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2804-0-0x00000000022E0000-0x00000000022EC000-memory.dmp

Filesize
48KB

Download