2fd5d48dbd484e5d645f90c1edad3319a74294cfa6848568246d5da1aaac96d0 | Triage

Analysis

max time kernel
70s
max time network
123s
platform
windows10_x64
resource
win10
submitted
18-07-2020 14:59

Sharing

Report Analysis Logs

General

Target

2fd5d48dbd484e5d645f90c1edad3319a74294cfa6848568246d5da1aaac96d0.exe
Size

100KB
MD5

1802e7aeddb3892c79e6707fd8aab409
SHA1

1c828a308f207dd2b78f0b4e3a20ac0894645eba
SHA256

2fd5d48dbd484e5d645f90c1edad3319a74294cfa6848568246d5da1aaac96d0
SHA512

7456e299b118fa4bef690d8f3a5f2a9b142860679fe58acd8af6ca82d566343eb734abc0117b6760b541007b022a92832999b0c7009f22a4a1f50d6963e18ba6

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3100	2fd5d48dbd484e5d645f90c1edad3319a74294cfa6848568246d5da1aaac96d0.exe
3100	2fd5d48dbd484e5d645f90c1edad3319a74294cfa6848568246d5da1aaac96d0.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3100	2fd5d48dbd484e5d645f90c1edad3319a74294cfa6848568246d5da1aaac96d0.exe
3100	2fd5d48dbd484e5d645f90c1edad3319a74294cfa6848568246d5da1aaac96d0.exe
3100	2fd5d48dbd484e5d645f90c1edad3319a74294cfa6848568246d5da1aaac96d0.exe
3100	2fd5d48dbd484e5d645f90c1edad3319a74294cfa6848568246d5da1aaac96d0.exe

C:\Users\Admin\AppData\Local\Temp\2fd5d48dbd484e5d645f90c1edad3319a74294cfa6848568246d5da1aaac96d0.exe
"C:\Users\Admin\AppData\Local\Temp\2fd5d48dbd484e5d645f90c1edad3319a74294cfa6848568246d5da1aaac96d0.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3100-0-0x00000000022D0000-0x00000000022DC000-memory.dmp

Filesize
48KB

Download