fea7339c7634c54c1d2b3d8aa7ff390efa0a8b421edfef6916eea84b4c4fa2f4 | Triage

Analysis

max time kernel
69s
max time network
125s
platform
windows10_x64
resource
win10
submitted
18-07-2020 08:36

Sharing

Report Analysis Logs

General

Target

fea7339c7634c54c1d2b3d8aa7ff390efa0a8b421edfef6916eea84b4c4fa2f4.exe
Size

273KB
MD5

71a5920c3d3d1d9e416764497c09233a
SHA1

4c1089de4727bda707776481050c6b26795a1fb6
SHA256

fea7339c7634c54c1d2b3d8aa7ff390efa0a8b421edfef6916eea84b4c4fa2f4
SHA512

4ee29ff7a29d161da11deb462da8be2d0d754ca2c01c5708dc2f71e52050c5b5a414dfc28851c7df2eef9184c582adf403da084bf2da2e0cafe33081a52dfbc5

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3100	fea7339c7634c54c1d2b3d8aa7ff390efa0a8b421edfef6916eea84b4c4fa2f4.exe
3100	fea7339c7634c54c1d2b3d8aa7ff390efa0a8b421edfef6916eea84b4c4fa2f4.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3100	fea7339c7634c54c1d2b3d8aa7ff390efa0a8b421edfef6916eea84b4c4fa2f4.exe
3100	fea7339c7634c54c1d2b3d8aa7ff390efa0a8b421edfef6916eea84b4c4fa2f4.exe
3100	fea7339c7634c54c1d2b3d8aa7ff390efa0a8b421edfef6916eea84b4c4fa2f4.exe
3100	fea7339c7634c54c1d2b3d8aa7ff390efa0a8b421edfef6916eea84b4c4fa2f4.exe

C:\Users\Admin\AppData\Local\Temp\fea7339c7634c54c1d2b3d8aa7ff390efa0a8b421edfef6916eea84b4c4fa2f4.exe
"C:\Users\Admin\AppData\Local\Temp\fea7339c7634c54c1d2b3d8aa7ff390efa0a8b421edfef6916eea84b4c4fa2f4.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3100-0-0x0000000002330000-0x000000000233C000-memory.dmp

Filesize
48KB

Download