efa7b33d81c854abe714763392f41d9b964713909241a355b2d67bfc28ca8443 | Triage

Analysis

max time kernel
61s
max time network
122s
platform
windows10_x64
resource
win10
submitted
18-07-2020 12:19

Sharing

Report Analysis Logs

General

Target

efa7b33d81c854abe714763392f41d9b964713909241a355b2d67bfc28ca8443.exe
Size

100KB
MD5

851f747de42cd8c5a8db037807aa3914
SHA1

400a0b7312fce49f552d3c281af8dc8c981cacaa
SHA256

efa7b33d81c854abe714763392f41d9b964713909241a355b2d67bfc28ca8443
SHA512

72e75215747b8b7b0a95752cd5b2cfd9a39271728f1aaf3a39332ccde13b1d3d48c3d7bf3fc28f1875162e2e855b30b1d540dd4c9b206d31c4a8f3001da2cb1b

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
364	efa7b33d81c854abe714763392f41d9b964713909241a355b2d67bfc28ca8443.exe
364	efa7b33d81c854abe714763392f41d9b964713909241a355b2d67bfc28ca8443.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
364	efa7b33d81c854abe714763392f41d9b964713909241a355b2d67bfc28ca8443.exe
364	efa7b33d81c854abe714763392f41d9b964713909241a355b2d67bfc28ca8443.exe
364	efa7b33d81c854abe714763392f41d9b964713909241a355b2d67bfc28ca8443.exe
364	efa7b33d81c854abe714763392f41d9b964713909241a355b2d67bfc28ca8443.exe

C:\Users\Admin\AppData\Local\Temp\efa7b33d81c854abe714763392f41d9b964713909241a355b2d67bfc28ca8443.exe
"C:\Users\Admin\AppData\Local\Temp\efa7b33d81c854abe714763392f41d9b964713909241a355b2d67bfc28ca8443.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/364-0-0x00000000022E0000-0x00000000022EC000-memory.dmp

Filesize
48KB

Download