0b426cc215a318a274358e31aa08ae7b4ba0a533e020702d07d8973e1abc6f2b | Triage

Analysis

max time kernel
147s
max time network
126s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 00:29

Sharing

Report Analysis Logs

General

Target

0b426cc215a318a274358e31aa08ae7b4ba0a533e020702d07d8973e1abc6f2b.exe
Size

273KB
MD5

6bd43d8929046f9ff4e7be0b197a1a66
SHA1

c9caf27ef7e4efa9bef4cbaa3e3d265a85e3358b
SHA256

0b426cc215a318a274358e31aa08ae7b4ba0a533e020702d07d8973e1abc6f2b
SHA512

90df344540a79a0bd7e2e235f537d218c30974e3927f5225b7599afc3c33ac56778a0a6e321aafe58d97b48ef7f1de70f12d38d40c520105b639042c3b70c313

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3768	0b426cc215a318a274358e31aa08ae7b4ba0a533e020702d07d8973e1abc6f2b.exe
3768	0b426cc215a318a274358e31aa08ae7b4ba0a533e020702d07d8973e1abc6f2b.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3768	0b426cc215a318a274358e31aa08ae7b4ba0a533e020702d07d8973e1abc6f2b.exe
3768	0b426cc215a318a274358e31aa08ae7b4ba0a533e020702d07d8973e1abc6f2b.exe
3768	0b426cc215a318a274358e31aa08ae7b4ba0a533e020702d07d8973e1abc6f2b.exe
3768	0b426cc215a318a274358e31aa08ae7b4ba0a533e020702d07d8973e1abc6f2b.exe

C:\Users\Admin\AppData\Local\Temp\0b426cc215a318a274358e31aa08ae7b4ba0a533e020702d07d8973e1abc6f2b.exe
"C:\Users\Admin\AppData\Local\Temp\0b426cc215a318a274358e31aa08ae7b4ba0a533e020702d07d8973e1abc6f2b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3768-0-0x00000000021E0000-0x00000000021EC000-memory.dmp

Filesize
48KB

Download