Analysis
-
max time kernel
131s -
max time network
122s -
platform
windows10_x64 -
resource
win10 -
submitted
18-07-2020 22:20
Static task
static1
Behavioral task
behavioral1
Sample
eb8ba7e3619a67ca50d7f81dd5eac5db93bf5716b7878c7d3f288318628b3655.exe
Resource
win7v200430
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
eb8ba7e3619a67ca50d7f81dd5eac5db93bf5716b7878c7d3f288318628b3655.exe
Resource
win10
windows10_x64
0 signatures
0 seconds
General
-
Target
eb8ba7e3619a67ca50d7f81dd5eac5db93bf5716b7878c7d3f288318628b3655.exe
-
Size
100KB
-
MD5
94b76751889e0643685f2238ea270723
-
SHA1
c2291a9aa3db6812769333b5f93493666c03b953
-
SHA256
eb8ba7e3619a67ca50d7f81dd5eac5db93bf5716b7878c7d3f288318628b3655
-
SHA512
00434fd8a6d7592c89bf8ed5cc05ad8929aade6b616c4c8bb3facfdbc9c33c4c8a761061edd884d5bee5c96d510c8e0913a76fde7db167b341f4b71e10067a42
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2920 eb8ba7e3619a67ca50d7f81dd5eac5db93bf5716b7878c7d3f288318628b3655.exe 2920 eb8ba7e3619a67ca50d7f81dd5eac5db93bf5716b7878c7d3f288318628b3655.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2920 eb8ba7e3619a67ca50d7f81dd5eac5db93bf5716b7878c7d3f288318628b3655.exe 2920 eb8ba7e3619a67ca50d7f81dd5eac5db93bf5716b7878c7d3f288318628b3655.exe 2920 eb8ba7e3619a67ca50d7f81dd5eac5db93bf5716b7878c7d3f288318628b3655.exe 2920 eb8ba7e3619a67ca50d7f81dd5eac5db93bf5716b7878c7d3f288318628b3655.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\eb8ba7e3619a67ca50d7f81dd5eac5db93bf5716b7878c7d3f288318628b3655.exe"C:\Users\Admin\AppData\Local\Temp\eb8ba7e3619a67ca50d7f81dd5eac5db93bf5716b7878c7d3f288318628b3655.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:2920