9a9f8aa91bb9f3138ea4eed9c8ea1a79030a99ab0f7ba5ee02e9f660de246f79 | Triage

Analysis

max time kernel
119s
max time network
129s
platform
windows10_x64
resource
win10
submitted
18/07/2020, 05:43

Sharing

Report Analysis Logs

General

Target

9a9f8aa91bb9f3138ea4eed9c8ea1a79030a99ab0f7ba5ee02e9f660de246f79.exe
Size

273KB
MD5

dca3b5affefd00cc18d925154d10d20a
SHA1

70bb81380534c314f6acf7a94ac09ecef6324caf
SHA256

9a9f8aa91bb9f3138ea4eed9c8ea1a79030a99ab0f7ba5ee02e9f660de246f79
SHA512

c0f942acc93a89f72de49f7a0f7fafd9b3f0ddbf5fe745a3771a3980c09dcaa55d9858488194b3b6a0e7f0d81fa3be30cc797c4f4919ecf9ea9148b98667ac82

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2460	9a9f8aa91bb9f3138ea4eed9c8ea1a79030a99ab0f7ba5ee02e9f660de246f79.exe
2460	9a9f8aa91bb9f3138ea4eed9c8ea1a79030a99ab0f7ba5ee02e9f660de246f79.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2460	9a9f8aa91bb9f3138ea4eed9c8ea1a79030a99ab0f7ba5ee02e9f660de246f79.exe
2460	9a9f8aa91bb9f3138ea4eed9c8ea1a79030a99ab0f7ba5ee02e9f660de246f79.exe
2460	9a9f8aa91bb9f3138ea4eed9c8ea1a79030a99ab0f7ba5ee02e9f660de246f79.exe
2460	9a9f8aa91bb9f3138ea4eed9c8ea1a79030a99ab0f7ba5ee02e9f660de246f79.exe

C:\Users\Admin\AppData\Local\Temp\9a9f8aa91bb9f3138ea4eed9c8ea1a79030a99ab0f7ba5ee02e9f660de246f79.exe
"C:\Users\Admin\AppData\Local\Temp\9a9f8aa91bb9f3138ea4eed9c8ea1a79030a99ab0f7ba5ee02e9f660de246f79.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2460-0-0x0000000002260000-0x000000000226C000-memory.dmp

Filesize
48KB

Download