4ab7b2aab06926026cd3cbb9a355e3ab48cc0ca3669f74c9d50deba91a441a11 | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows10_x64
resource
win10
submitted
18/07/2020, 00:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

4ab7b2aab06926026cd3cbb9a355e3ab48cc0ca3669f74c9d50deba91a441a11.exe
Size

273KB
MD5

59dc0c385b7d20ee2ce29cf6907bd28f
SHA1

9809c6c0541200694e00167ab0eebfbf2235b756
SHA256

4ab7b2aab06926026cd3cbb9a355e3ab48cc0ca3669f74c9d50deba91a441a11
SHA512

8c188a1dd0d9b6bd12d638c27a749d00cba932d6de4c70c292c8875ce13d72a4f13a0cf4c7990a08026821f2039b586f672f88809b3e787857f526e8c6b600bf

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1632	4ab7b2aab06926026cd3cbb9a355e3ab48cc0ca3669f74c9d50deba91a441a11.exe
1632	4ab7b2aab06926026cd3cbb9a355e3ab48cc0ca3669f74c9d50deba91a441a11.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1632	4ab7b2aab06926026cd3cbb9a355e3ab48cc0ca3669f74c9d50deba91a441a11.exe
1632	4ab7b2aab06926026cd3cbb9a355e3ab48cc0ca3669f74c9d50deba91a441a11.exe
1632	4ab7b2aab06926026cd3cbb9a355e3ab48cc0ca3669f74c9d50deba91a441a11.exe
1632	4ab7b2aab06926026cd3cbb9a355e3ab48cc0ca3669f74c9d50deba91a441a11.exe

C:\Users\Admin\AppData\Local\Temp\4ab7b2aab06926026cd3cbb9a355e3ab48cc0ca3669f74c9d50deba91a441a11.exe
"C:\Users\Admin\AppData\Local\Temp\4ab7b2aab06926026cd3cbb9a355e3ab48cc0ca3669f74c9d50deba91a441a11.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:1632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1632-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download