5d1bf0bacfa7893949f76ea5d88451d1e03624e49e364ede6b08595ddda75356 | Triage

Analysis

max time kernel
123s
max time network
128s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 00:45

Sharing

Report Analysis Logs

General

Target

5d1bf0bacfa7893949f76ea5d88451d1e03624e49e364ede6b08595ddda75356.exe
Size

273KB
MD5

7e71484d0fcff78df44fac1129f9cbbc
SHA1

0d88e100874a0f207725568c924be670139bf3be
SHA256

5d1bf0bacfa7893949f76ea5d88451d1e03624e49e364ede6b08595ddda75356
SHA512

8d1d77da1bde4cf2a17951b00f3ade089c4d49a363006e907291c0c5e5fe6c4e1217139938cdc34a8b49089f3fde931ea9e83c124be8476a2bc023a13b52f5c4

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3144	5d1bf0bacfa7893949f76ea5d88451d1e03624e49e364ede6b08595ddda75356.exe
3144	5d1bf0bacfa7893949f76ea5d88451d1e03624e49e364ede6b08595ddda75356.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3144	5d1bf0bacfa7893949f76ea5d88451d1e03624e49e364ede6b08595ddda75356.exe
3144	5d1bf0bacfa7893949f76ea5d88451d1e03624e49e364ede6b08595ddda75356.exe
3144	5d1bf0bacfa7893949f76ea5d88451d1e03624e49e364ede6b08595ddda75356.exe
3144	5d1bf0bacfa7893949f76ea5d88451d1e03624e49e364ede6b08595ddda75356.exe

C:\Users\Admin\AppData\Local\Temp\5d1bf0bacfa7893949f76ea5d88451d1e03624e49e364ede6b08595ddda75356.exe
"C:\Users\Admin\AppData\Local\Temp\5d1bf0bacfa7893949f76ea5d88451d1e03624e49e364ede6b08595ddda75356.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3144-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download