41873e8bd8dd029217d11e5bf1e36242f919a28c74c31c934c736716370296f0 | Triage

Analysis

max time kernel
65s
max time network
150s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 09:54

Sharing

Report Analysis Logs

General

Target

41873e8bd8dd029217d11e5bf1e36242f919a28c74c31c934c736716370296f0.exe
Size

273KB
MD5

70b39e12021b68b4e42c0e090e2c6f4c
SHA1

ec3690bf697bf13e7b55cb83d977e524deee6841
SHA256

41873e8bd8dd029217d11e5bf1e36242f919a28c74c31c934c736716370296f0
SHA512

49226fedc52623cf56a6b75a4508ae19cc8356c5f5f8fa7debdec26954890a16659cae5a608a8e773e7ae6aa865055e9b583be82ebc1756bff17297871e9c242

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2916	41873e8bd8dd029217d11e5bf1e36242f919a28c74c31c934c736716370296f0.exe
2916	41873e8bd8dd029217d11e5bf1e36242f919a28c74c31c934c736716370296f0.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2916	41873e8bd8dd029217d11e5bf1e36242f919a28c74c31c934c736716370296f0.exe
2916	41873e8bd8dd029217d11e5bf1e36242f919a28c74c31c934c736716370296f0.exe
2916	41873e8bd8dd029217d11e5bf1e36242f919a28c74c31c934c736716370296f0.exe
2916	41873e8bd8dd029217d11e5bf1e36242f919a28c74c31c934c736716370296f0.exe
2916	41873e8bd8dd029217d11e5bf1e36242f919a28c74c31c934c736716370296f0.exe
2916	41873e8bd8dd029217d11e5bf1e36242f919a28c74c31c934c736716370296f0.exe

C:\Users\Admin\AppData\Local\Temp\41873e8bd8dd029217d11e5bf1e36242f919a28c74c31c934c736716370296f0.exe
"C:\Users\Admin\AppData\Local\Temp\41873e8bd8dd029217d11e5bf1e36242f919a28c74c31c934c736716370296f0.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:2916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2916-0-0x0000000002330000-0x000000000233C000-memory.dmp

Filesize
48KB

Download