3989e7386ec501d37cac9681605bd72bb2f3cfd668a0942de390bcf9b98f31a0 | Triage

Analysis

max time kernel
65s
max time network
128s
platform
windows10_x64
resource
win10
submitted
18-07-2020 13:11

Sharing

Report Analysis Logs

General

Target

3989e7386ec501d37cac9681605bd72bb2f3cfd668a0942de390bcf9b98f31a0.exe
Size

100KB
MD5

273607bb5444d25549b606d15f992896
SHA1

82c8fd9544e10fae06ea52932b33ec7fb5e523b8
SHA256

3989e7386ec501d37cac9681605bd72bb2f3cfd668a0942de390bcf9b98f31a0
SHA512

fba90b0695c1f2fc9108f25ddc1ff52ad1e268a773f52b28313988366deb5ec135a51f6011eb92ea60383cb108ed33125891994284ce6c20b6945a619fa1d86f

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3588	3989e7386ec501d37cac9681605bd72bb2f3cfd668a0942de390bcf9b98f31a0.exe
3588	3989e7386ec501d37cac9681605bd72bb2f3cfd668a0942de390bcf9b98f31a0.exe
3588	3989e7386ec501d37cac9681605bd72bb2f3cfd668a0942de390bcf9b98f31a0.exe
3588	3989e7386ec501d37cac9681605bd72bb2f3cfd668a0942de390bcf9b98f31a0.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3588	3989e7386ec501d37cac9681605bd72bb2f3cfd668a0942de390bcf9b98f31a0.exe
3588	3989e7386ec501d37cac9681605bd72bb2f3cfd668a0942de390bcf9b98f31a0.exe

C:\Users\Admin\AppData\Local\Temp\3989e7386ec501d37cac9681605bd72bb2f3cfd668a0942de390bcf9b98f31a0.exe
"C:\Users\Admin\AppData\Local\Temp\3989e7386ec501d37cac9681605bd72bb2f3cfd668a0942de390bcf9b98f31a0.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3588

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3588-0-0x00000000023F0000-0x00000000023FC000-memory.dmp

Filesize
48KB

Download