50cbb098be2507f6d9830ab2f11be1c23b114b818f8a7c2bf3dc99469d88f80f | Triage

Analysis

max time kernel
64s
max time network
118s
platform
windows10_x64
resource
win10
submitted
18-07-2020 08:13

Sharing

Report Analysis Logs

General

Target

50cbb098be2507f6d9830ab2f11be1c23b114b818f8a7c2bf3dc99469d88f80f.exe
Size

273KB
MD5

561546eca6889fb869d96e2d2474f127
SHA1

a28d3a2d2ec41e9fdb985ff939228956fde9aa94
SHA256

50cbb098be2507f6d9830ab2f11be1c23b114b818f8a7c2bf3dc99469d88f80f
SHA512

f8cf69b701778f70d14886fc548390edbf5af826335109c067c42e8f06980828aaf5b9fbace881614e1c37def05796ca6d5cbee9d0890001d4418d715af8dd98

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3888	50cbb098be2507f6d9830ab2f11be1c23b114b818f8a7c2bf3dc99469d88f80f.exe
3888	50cbb098be2507f6d9830ab2f11be1c23b114b818f8a7c2bf3dc99469d88f80f.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3888	50cbb098be2507f6d9830ab2f11be1c23b114b818f8a7c2bf3dc99469d88f80f.exe
3888	50cbb098be2507f6d9830ab2f11be1c23b114b818f8a7c2bf3dc99469d88f80f.exe
3888	50cbb098be2507f6d9830ab2f11be1c23b114b818f8a7c2bf3dc99469d88f80f.exe
3888	50cbb098be2507f6d9830ab2f11be1c23b114b818f8a7c2bf3dc99469d88f80f.exe

C:\Users\Admin\AppData\Local\Temp\50cbb098be2507f6d9830ab2f11be1c23b114b818f8a7c2bf3dc99469d88f80f.exe
"C:\Users\Admin\AppData\Local\Temp\50cbb098be2507f6d9830ab2f11be1c23b114b818f8a7c2bf3dc99469d88f80f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3888-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download