4645abda91563ac0317a228ca55fb67e8e6bdf71f8fcc8af44d39ec87c993daf | Triage

Analysis

max time kernel
62s
max time network
126s
platform
windows10_x64
resource
win10
submitted
18-07-2020 03:15

Sharing

Report Analysis Logs

General

Target

4645abda91563ac0317a228ca55fb67e8e6bdf71f8fcc8af44d39ec87c993daf.exe
Size

273KB
MD5

5f2fc01532f38b5391d8548044e550e9
SHA1

890171219d39a664594f9dcfa21641a61bdc8ea8
SHA256

4645abda91563ac0317a228ca55fb67e8e6bdf71f8fcc8af44d39ec87c993daf
SHA512

14f0d8d1bf3a028a314789a132f6b623f573e0ae56b90eadbecdd7c5d2c648feffc34eeb283ea7ac27a91542d3b64182d8d62e57ceda62e509703511801f096c

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2892	4645abda91563ac0317a228ca55fb67e8e6bdf71f8fcc8af44d39ec87c993daf.exe
2892	4645abda91563ac0317a228ca55fb67e8e6bdf71f8fcc8af44d39ec87c993daf.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2892	4645abda91563ac0317a228ca55fb67e8e6bdf71f8fcc8af44d39ec87c993daf.exe
2892	4645abda91563ac0317a228ca55fb67e8e6bdf71f8fcc8af44d39ec87c993daf.exe
2892	4645abda91563ac0317a228ca55fb67e8e6bdf71f8fcc8af44d39ec87c993daf.exe
2892	4645abda91563ac0317a228ca55fb67e8e6bdf71f8fcc8af44d39ec87c993daf.exe

C:\Users\Admin\AppData\Local\Temp\4645abda91563ac0317a228ca55fb67e8e6bdf71f8fcc8af44d39ec87c993daf.exe
"C:\Users\Admin\AppData\Local\Temp\4645abda91563ac0317a228ca55fb67e8e6bdf71f8fcc8af44d39ec87c993daf.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:2892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2892-0-0x0000000002320000-0x000000000232C000-memory.dmp

Filesize
48KB

Download