a39c84844f5285baad7cda2ea9dc8efde3fa5738a3336a3aa80315ca95d94b36 | Triage

Analysis

max time kernel
132s
max time network
133s
platform
windows10_x64
resource
win10
submitted
18-07-2020 01:49

Sharing

Report Analysis Logs

General

Target

a39c84844f5285baad7cda2ea9dc8efde3fa5738a3336a3aa80315ca95d94b36.exe
Size

273KB
MD5

8b91bdcd32bda16a291fc9a3737ce3d4
SHA1

5093bd824f853e25b3a1a9d520ca6ec520755490
SHA256

a39c84844f5285baad7cda2ea9dc8efde3fa5738a3336a3aa80315ca95d94b36
SHA512

d46669c17b98527e0cd0898946f12da4caced0f8be0ed72e78d4e36b73183fa35b60b2712148efd09cdf0c8034fd9abbf0b734159ef1d8aa044d41dfc0a2f399

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2460	a39c84844f5285baad7cda2ea9dc8efde3fa5738a3336a3aa80315ca95d94b36.exe
2460	a39c84844f5285baad7cda2ea9dc8efde3fa5738a3336a3aa80315ca95d94b36.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2460	a39c84844f5285baad7cda2ea9dc8efde3fa5738a3336a3aa80315ca95d94b36.exe
2460	a39c84844f5285baad7cda2ea9dc8efde3fa5738a3336a3aa80315ca95d94b36.exe
2460	a39c84844f5285baad7cda2ea9dc8efde3fa5738a3336a3aa80315ca95d94b36.exe
2460	a39c84844f5285baad7cda2ea9dc8efde3fa5738a3336a3aa80315ca95d94b36.exe

C:\Users\Admin\AppData\Local\Temp\a39c84844f5285baad7cda2ea9dc8efde3fa5738a3336a3aa80315ca95d94b36.exe
"C:\Users\Admin\AppData\Local\Temp\a39c84844f5285baad7cda2ea9dc8efde3fa5738a3336a3aa80315ca95d94b36.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2460-0-0x0000000002260000-0x000000000226C000-memory.dmp

Filesize
48KB

Download