157960811e35a445473e5371cff043964210a6344504f5a3c3b0271871988bc3 | Triage

Analysis

max time kernel
136s
max time network
149s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 04:30

Sharing

Report Analysis Logs

General

Target

157960811e35a445473e5371cff043964210a6344504f5a3c3b0271871988bc3.exe
Size

273KB
MD5

cc51009bb9039c40d302a84c63ee3feb
SHA1

5d67d56fc5ff45408831f473cd284529c8b7eba3
SHA256

157960811e35a445473e5371cff043964210a6344504f5a3c3b0271871988bc3
SHA512

17ff7e6b63c49570bb5cb1eef709539aa5fb270b3011a51cafe860ccd3d49b3d7e6b28c59e522b6da977a8935acd395de67e727a3d8534bd0d8ff3e27a3592ec

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1628	157960811e35a445473e5371cff043964210a6344504f5a3c3b0271871988bc3.exe
1628	157960811e35a445473e5371cff043964210a6344504f5a3c3b0271871988bc3.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1628	157960811e35a445473e5371cff043964210a6344504f5a3c3b0271871988bc3.exe
1628	157960811e35a445473e5371cff043964210a6344504f5a3c3b0271871988bc3.exe
1628	157960811e35a445473e5371cff043964210a6344504f5a3c3b0271871988bc3.exe
1628	157960811e35a445473e5371cff043964210a6344504f5a3c3b0271871988bc3.exe

C:\Users\Admin\AppData\Local\Temp\157960811e35a445473e5371cff043964210a6344504f5a3c3b0271871988bc3.exe
"C:\Users\Admin\AppData\Local\Temp\157960811e35a445473e5371cff043964210a6344504f5a3c3b0271871988bc3.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:1628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1628-0-0x00000000021D0000-0x00000000021DC000-memory.dmp

Filesize
48KB

Download