b9b7f72fba59b48fda222ea0f612a1afaaa3868d753faff7f3ad7cbaaedfe983 | Triage

Analysis

max time kernel
129s
max time network
131s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 04:28

Sharing

Report Analysis Logs

General

Target

b9b7f72fba59b48fda222ea0f612a1afaaa3868d753faff7f3ad7cbaaedfe983.exe
Size

273KB
MD5

068c108b6338ec5521aad737d0039b3e
SHA1

57c1a37dfc6d8900d2a6696985bf3176d77ed701
SHA256

b9b7f72fba59b48fda222ea0f612a1afaaa3868d753faff7f3ad7cbaaedfe983
SHA512

7ccde946bbadff0ec7c8f6cb3bf3ce96c4ad5dae7231b22ae2227580fea282288efadcc8e7451287ef59f24b970c00aa155359a735b5c7f9232e1e4083f33342

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1616	b9b7f72fba59b48fda222ea0f612a1afaaa3868d753faff7f3ad7cbaaedfe983.exe
1616	b9b7f72fba59b48fda222ea0f612a1afaaa3868d753faff7f3ad7cbaaedfe983.exe
1616	b9b7f72fba59b48fda222ea0f612a1afaaa3868d753faff7f3ad7cbaaedfe983.exe
1616	b9b7f72fba59b48fda222ea0f612a1afaaa3868d753faff7f3ad7cbaaedfe983.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1616	b9b7f72fba59b48fda222ea0f612a1afaaa3868d753faff7f3ad7cbaaedfe983.exe
1616	b9b7f72fba59b48fda222ea0f612a1afaaa3868d753faff7f3ad7cbaaedfe983.exe

C:\Users\Admin\AppData\Local\Temp\b9b7f72fba59b48fda222ea0f612a1afaaa3868d753faff7f3ad7cbaaedfe983.exe
"C:\Users\Admin\AppData\Local\Temp\b9b7f72fba59b48fda222ea0f612a1afaaa3868d753faff7f3ad7cbaaedfe983.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1616-0-0x0000000002260000-0x000000000226C000-memory.dmp

Filesize
48KB

Download