Analysis
-
max time kernel
62s -
max time network
141s -
platform
windows10_x64 -
resource
win10 -
submitted
18-07-2020 04:57
Static task
static1
Behavioral task
behavioral1
Sample
3a44168093a51fd500aba3458115ace8d64562e875d02f40f95545222e639b86.exe
Resource
win7v200430
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
3a44168093a51fd500aba3458115ace8d64562e875d02f40f95545222e639b86.exe
Resource
win10
windows10_x64
0 signatures
0 seconds
General
-
Target
3a44168093a51fd500aba3458115ace8d64562e875d02f40f95545222e639b86.exe
-
Size
273KB
-
MD5
03eea406b30621dac45d6ecd26263fa4
-
SHA1
b98044b56c460669cb25cdec500a799732371ca4
-
SHA256
3a44168093a51fd500aba3458115ace8d64562e875d02f40f95545222e639b86
-
SHA512
c6dd1ee33ec8bc4ff81a61fe5c551e9c666ddb51d4d6a066b004bf87661fdebd1b7e3e56236feec99de081002a453bb092583b61e4eff0438fafc9b5a6967ce4
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3680 3a44168093a51fd500aba3458115ace8d64562e875d02f40f95545222e639b86.exe 3680 3a44168093a51fd500aba3458115ace8d64562e875d02f40f95545222e639b86.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3680 3a44168093a51fd500aba3458115ace8d64562e875d02f40f95545222e639b86.exe 3680 3a44168093a51fd500aba3458115ace8d64562e875d02f40f95545222e639b86.exe 3680 3a44168093a51fd500aba3458115ace8d64562e875d02f40f95545222e639b86.exe 3680 3a44168093a51fd500aba3458115ace8d64562e875d02f40f95545222e639b86.exe 3680 3a44168093a51fd500aba3458115ace8d64562e875d02f40f95545222e639b86.exe 3680 3a44168093a51fd500aba3458115ace8d64562e875d02f40f95545222e639b86.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3a44168093a51fd500aba3458115ace8d64562e875d02f40f95545222e639b86.exe"C:\Users\Admin\AppData\Local\Temp\3a44168093a51fd500aba3458115ace8d64562e875d02f40f95545222e639b86.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3680