d69671c46a29c19f5f5274475ae057e34bf6d771c43f802ef69f60c4b7f0f556 | Triage

Analysis

max time kernel
65s
max time network
125s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 16:05

Sharing

Report Analysis Logs

General

Target

d69671c46a29c19f5f5274475ae057e34bf6d771c43f802ef69f60c4b7f0f556.exe
Size

100KB
MD5

22e1bc3e08b263d3dbb0b26972829881
SHA1

347dd6fe27ced6fc47ba6cf6212aa35c45492f64
SHA256

d69671c46a29c19f5f5274475ae057e34bf6d771c43f802ef69f60c4b7f0f556
SHA512

4246130d496fec30ba979660690061f02bf7d96d4341592ce9cd9f76a2e6954c4c590f2427c98950df668fc6f3db554969831ce8d25574e10eed0006433e4eaa

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
428	d69671c46a29c19f5f5274475ae057e34bf6d771c43f802ef69f60c4b7f0f556.exe
428	d69671c46a29c19f5f5274475ae057e34bf6d771c43f802ef69f60c4b7f0f556.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
428	d69671c46a29c19f5f5274475ae057e34bf6d771c43f802ef69f60c4b7f0f556.exe
428	d69671c46a29c19f5f5274475ae057e34bf6d771c43f802ef69f60c4b7f0f556.exe
428	d69671c46a29c19f5f5274475ae057e34bf6d771c43f802ef69f60c4b7f0f556.exe
428	d69671c46a29c19f5f5274475ae057e34bf6d771c43f802ef69f60c4b7f0f556.exe

C:\Users\Admin\AppData\Local\Temp\d69671c46a29c19f5f5274475ae057e34bf6d771c43f802ef69f60c4b7f0f556.exe
"C:\Users\Admin\AppData\Local\Temp\d69671c46a29c19f5f5274475ae057e34bf6d771c43f802ef69f60c4b7f0f556.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:428

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/428-0-0x00000000038E0000-0x00000000038EC000-memory.dmp

Filesize
48KB

Download