705a1bb645c348f4ff08fcecc798256adf95e332e88963146b38ff14f23725a2 | Triage

Analysis

max time kernel
130s
max time network
132s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 06:43

Sharing

Report Analysis Logs

General

Target

705a1bb645c348f4ff08fcecc798256adf95e332e88963146b38ff14f23725a2.exe
Size

273KB
MD5

6d90c726e9b456e42e822112b754727d
SHA1

30739a80947e2770fe416a5077b893ee15cd3b06
SHA256

705a1bb645c348f4ff08fcecc798256adf95e332e88963146b38ff14f23725a2
SHA512

069cb129b88f4d98de0725e50106e5e91f7068978e0c9a6c2364a782786640a00e9c91801f23ca5bc347c808c6fae2f4898084d2054a66b99c7132a670b2f7f5

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1600	705a1bb645c348f4ff08fcecc798256adf95e332e88963146b38ff14f23725a2.exe
1600	705a1bb645c348f4ff08fcecc798256adf95e332e88963146b38ff14f23725a2.exe
1600	705a1bb645c348f4ff08fcecc798256adf95e332e88963146b38ff14f23725a2.exe
1600	705a1bb645c348f4ff08fcecc798256adf95e332e88963146b38ff14f23725a2.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1600	705a1bb645c348f4ff08fcecc798256adf95e332e88963146b38ff14f23725a2.exe
1600	705a1bb645c348f4ff08fcecc798256adf95e332e88963146b38ff14f23725a2.exe

C:\Users\Admin\AppData\Local\Temp\705a1bb645c348f4ff08fcecc798256adf95e332e88963146b38ff14f23725a2.exe
"C:\Users\Admin\AppData\Local\Temp\705a1bb645c348f4ff08fcecc798256adf95e332e88963146b38ff14f23725a2.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1600-0-0x00000000021E0000-0x00000000021EC000-memory.dmp

Filesize
48KB

Download