bb459c74074b384ff6858d50c1f08896c98e391f77a9c8058153368f3a5cd005 | Triage

Analysis

max time kernel
132s
max time network
133s
platform
windows10_x64
resource
win10
submitted
18-07-2020 06:34

Sharing

Report Analysis Logs

General

Target

bb459c74074b384ff6858d50c1f08896c98e391f77a9c8058153368f3a5cd005.exe
Size

273KB
MD5

9663004096b18000cb8840b898b1495e
SHA1

7328f4b61a0c41342f43e29b484b5699e30ac139
SHA256

bb459c74074b384ff6858d50c1f08896c98e391f77a9c8058153368f3a5cd005
SHA512

550e3299321f99993f94fcf25139c97ab7c8c4b9ea6111b87d941cd6783ea26c97263246ac44c6850a7032a91b59dd3c577e5494dc0c15611e54f1346aa3414d

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
792	bb459c74074b384ff6858d50c1f08896c98e391f77a9c8058153368f3a5cd005.exe
792	bb459c74074b384ff6858d50c1f08896c98e391f77a9c8058153368f3a5cd005.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
792	bb459c74074b384ff6858d50c1f08896c98e391f77a9c8058153368f3a5cd005.exe
792	bb459c74074b384ff6858d50c1f08896c98e391f77a9c8058153368f3a5cd005.exe
792	bb459c74074b384ff6858d50c1f08896c98e391f77a9c8058153368f3a5cd005.exe
792	bb459c74074b384ff6858d50c1f08896c98e391f77a9c8058153368f3a5cd005.exe

C:\Users\Admin\AppData\Local\Temp\bb459c74074b384ff6858d50c1f08896c98e391f77a9c8058153368f3a5cd005.exe
"C:\Users\Admin\AppData\Local\Temp\bb459c74074b384ff6858d50c1f08896c98e391f77a9c8058153368f3a5cd005.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/792-0-0x00000000021D0000-0x00000000021DC000-memory.dmp

Filesize
48KB

Download