4f7f0e6c0ecddf439939b921dca203cc442d2950f3df3308c4dfe69d20c69466 | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows10_x64
resource
win10
submitted
18-07-2020 02:16

Sharing

Report Analysis Logs

General

Target

4f7f0e6c0ecddf439939b921dca203cc442d2950f3df3308c4dfe69d20c69466.exe
Size

273KB
MD5

a4ecc157db130814eb9d7bd33523c003
SHA1

9ac478afb3e7d472c15cdef2da57660a2fc989e3
SHA256

4f7f0e6c0ecddf439939b921dca203cc442d2950f3df3308c4dfe69d20c69466
SHA512

ee151bdea28b84bb12a02cf0ec61db7ee86f2bf8b6bc538eb55149965b018f7ee6dcd6383b86cf56e8aef6ba570db3fcb4166de668af9570901aeb8087a6842b

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3044	4f7f0e6c0ecddf439939b921dca203cc442d2950f3df3308c4dfe69d20c69466.exe
3044	4f7f0e6c0ecddf439939b921dca203cc442d2950f3df3308c4dfe69d20c69466.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3044	4f7f0e6c0ecddf439939b921dca203cc442d2950f3df3308c4dfe69d20c69466.exe
3044	4f7f0e6c0ecddf439939b921dca203cc442d2950f3df3308c4dfe69d20c69466.exe
3044	4f7f0e6c0ecddf439939b921dca203cc442d2950f3df3308c4dfe69d20c69466.exe
3044	4f7f0e6c0ecddf439939b921dca203cc442d2950f3df3308c4dfe69d20c69466.exe

C:\Users\Admin\AppData\Local\Temp\4f7f0e6c0ecddf439939b921dca203cc442d2950f3df3308c4dfe69d20c69466.exe
"C:\Users\Admin\AppData\Local\Temp\4f7f0e6c0ecddf439939b921dca203cc442d2950f3df3308c4dfe69d20c69466.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3044-0-0x0000000002320000-0x000000000232C000-memory.dmp

Filesize
48KB

Download