9705f7cf706659efca059c0c64fcf65767a8d6ecf4cac953ea7b5a5899a5eef2 | Triage

Analysis

max time kernel
69s
max time network
124s
platform
windows10_x64
resource
win10
submitted
18-07-2020 17:11

Sharing

Report Analysis Logs

General

Target

9705f7cf706659efca059c0c64fcf65767a8d6ecf4cac953ea7b5a5899a5eef2.exe
Size

100KB
MD5

d1e52111d0937fcd9751c47da4afc997
SHA1

2332f0470a522a193b9ea3373e75364b5f6ec52f
SHA256

9705f7cf706659efca059c0c64fcf65767a8d6ecf4cac953ea7b5a5899a5eef2
SHA512

000054f931018d498e6d37762dcb5b8f70907d9ce3c197b7af1dbeba595571d578acbe8b93e0b99434f673270200908dc03696a73325c29665b71c96ac64fda5

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3100	9705f7cf706659efca059c0c64fcf65767a8d6ecf4cac953ea7b5a5899a5eef2.exe
3100	9705f7cf706659efca059c0c64fcf65767a8d6ecf4cac953ea7b5a5899a5eef2.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3100	9705f7cf706659efca059c0c64fcf65767a8d6ecf4cac953ea7b5a5899a5eef2.exe
3100	9705f7cf706659efca059c0c64fcf65767a8d6ecf4cac953ea7b5a5899a5eef2.exe
3100	9705f7cf706659efca059c0c64fcf65767a8d6ecf4cac953ea7b5a5899a5eef2.exe
3100	9705f7cf706659efca059c0c64fcf65767a8d6ecf4cac953ea7b5a5899a5eef2.exe

C:\Users\Admin\AppData\Local\Temp\9705f7cf706659efca059c0c64fcf65767a8d6ecf4cac953ea7b5a5899a5eef2.exe
"C:\Users\Admin\AppData\Local\Temp\9705f7cf706659efca059c0c64fcf65767a8d6ecf4cac953ea7b5a5899a5eef2.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3100-0-0x0000000002210000-0x000000000221C000-memory.dmp

Filesize
48KB

Download