36711038580fe2f4eddf34eca263e2997b57be9472d390a2ba7b43e196f753ca | Triage

Analysis

max time kernel
148s
max time network
128s
platform
windows10_x64
resource
win10v200430
submitted
18/07/2020, 03:26

Sharing

Report Analysis Logs

General

Target

36711038580fe2f4eddf34eca263e2997b57be9472d390a2ba7b43e196f753ca.exe
Size

273KB
MD5

4aaf5c3faab52c05f43d0c305b726a60
SHA1

88d1d283b2546e4637a2ce7a555eb289788cfdf6
SHA256

36711038580fe2f4eddf34eca263e2997b57be9472d390a2ba7b43e196f753ca
SHA512

44c8b745b97347730636fe51019752134bce792708642d00b6c9ed6c807480c6ac22085386a495c5f951c1162d3cb9c0b8f34941a70a57398200ab0604ce69e1

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3932	36711038580fe2f4eddf34eca263e2997b57be9472d390a2ba7b43e196f753ca.exe
3932	36711038580fe2f4eddf34eca263e2997b57be9472d390a2ba7b43e196f753ca.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3932	36711038580fe2f4eddf34eca263e2997b57be9472d390a2ba7b43e196f753ca.exe
3932	36711038580fe2f4eddf34eca263e2997b57be9472d390a2ba7b43e196f753ca.exe
3932	36711038580fe2f4eddf34eca263e2997b57be9472d390a2ba7b43e196f753ca.exe
3932	36711038580fe2f4eddf34eca263e2997b57be9472d390a2ba7b43e196f753ca.exe

C:\Users\Admin\AppData\Local\Temp\36711038580fe2f4eddf34eca263e2997b57be9472d390a2ba7b43e196f753ca.exe
"C:\Users\Admin\AppData\Local\Temp\36711038580fe2f4eddf34eca263e2997b57be9472d390a2ba7b43e196f753ca.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3932-0-0x0000000002320000-0x000000000232C000-memory.dmp

Filesize
48KB

Download