2045bc83d01469c300d53990490fb748a8888a9d5f886b3bf86539e58e0bda57 | Triage

Analysis

max time kernel
120s
max time network
123s
platform
windows10_x64
resource
win10
submitted
18-07-2020 02:55

Sharing

Report Analysis Logs

General

Target

2045bc83d01469c300d53990490fb748a8888a9d5f886b3bf86539e58e0bda57.exe
Size

273KB
MD5

ca5fe66e5770aae7e5711615d97b9924
SHA1

fff85ce9e72f43bc7e47bb160975e03858a55d6f
SHA256

2045bc83d01469c300d53990490fb748a8888a9d5f886b3bf86539e58e0bda57
SHA512

c0adaddf3fd7f6b4c577db37364fce3afba24186950c1342fd9a37501d2f1af702aa62d69b3d8c33e72a5ec994fefa94aeedf21e59b5648efa0d9e2bb20c69e5

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3676	2045bc83d01469c300d53990490fb748a8888a9d5f886b3bf86539e58e0bda57.exe
3676	2045bc83d01469c300d53990490fb748a8888a9d5f886b3bf86539e58e0bda57.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3676	2045bc83d01469c300d53990490fb748a8888a9d5f886b3bf86539e58e0bda57.exe
3676	2045bc83d01469c300d53990490fb748a8888a9d5f886b3bf86539e58e0bda57.exe
3676	2045bc83d01469c300d53990490fb748a8888a9d5f886b3bf86539e58e0bda57.exe
3676	2045bc83d01469c300d53990490fb748a8888a9d5f886b3bf86539e58e0bda57.exe

C:\Users\Admin\AppData\Local\Temp\2045bc83d01469c300d53990490fb748a8888a9d5f886b3bf86539e58e0bda57.exe
"C:\Users\Admin\AppData\Local\Temp\2045bc83d01469c300d53990490fb748a8888a9d5f886b3bf86539e58e0bda57.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3676-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download