3ff2cfd12e1e89230b71ded151fb6ebef11dcce44f094cd3383e41a478881ead | Triage

Analysis

max time kernel
137s
max time network
131s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 05:08

Sharing

Report Analysis Logs

General

Target

3ff2cfd12e1e89230b71ded151fb6ebef11dcce44f094cd3383e41a478881ead.exe
Size

273KB
MD5

fbcb24fe41480ad471d88db93a030145
SHA1

cf6ea3392d5af0e7927f4d8c5e4fd8a69b5cc4de
SHA256

3ff2cfd12e1e89230b71ded151fb6ebef11dcce44f094cd3383e41a478881ead
SHA512

c2e2d992ec4350c5ba91ce145ecad39bb7945154641a472cc9dd72dd7d0e81da9b52cd51592b5a7e8a3907ea040dea0450aedda421efe045339681d74f6a7ab4

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3656	3ff2cfd12e1e89230b71ded151fb6ebef11dcce44f094cd3383e41a478881ead.exe
3656	3ff2cfd12e1e89230b71ded151fb6ebef11dcce44f094cd3383e41a478881ead.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3656	3ff2cfd12e1e89230b71ded151fb6ebef11dcce44f094cd3383e41a478881ead.exe
3656	3ff2cfd12e1e89230b71ded151fb6ebef11dcce44f094cd3383e41a478881ead.exe
3656	3ff2cfd12e1e89230b71ded151fb6ebef11dcce44f094cd3383e41a478881ead.exe
3656	3ff2cfd12e1e89230b71ded151fb6ebef11dcce44f094cd3383e41a478881ead.exe

C:\Users\Admin\AppData\Local\Temp\3ff2cfd12e1e89230b71ded151fb6ebef11dcce44f094cd3383e41a478881ead.exe
"C:\Users\Admin\AppData\Local\Temp\3ff2cfd12e1e89230b71ded151fb6ebef11dcce44f094cd3383e41a478881ead.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3656-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download