06e406c9046ce63b765a2c2cd272dcf6ccda4ed7e4488504ff4271182fc00832 | Triage

Analysis

max time kernel
142s
max time network
142s
platform
windows10_x64
resource
win10
submitted
18-07-2020 05:51

Sharing

Report Analysis Logs

General

Target

06e406c9046ce63b765a2c2cd272dcf6ccda4ed7e4488504ff4271182fc00832.exe
Size

273KB
MD5

21598c28e63e42622c96d40adf29b7ed
SHA1

56e01e310f4f97e5048a92b796a757f833a5b8b6
SHA256

06e406c9046ce63b765a2c2cd272dcf6ccda4ed7e4488504ff4271182fc00832
SHA512

c828b471e0d1fba8a3a9aaa0a86f49fea4646e69cae6e0a86615a9747872c60eb641f5c26a99cbca734ced1efe997c32f47ce92b9105fd681f08e3367080f509

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3900	06e406c9046ce63b765a2c2cd272dcf6ccda4ed7e4488504ff4271182fc00832.exe
3900	06e406c9046ce63b765a2c2cd272dcf6ccda4ed7e4488504ff4271182fc00832.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3900	06e406c9046ce63b765a2c2cd272dcf6ccda4ed7e4488504ff4271182fc00832.exe
3900	06e406c9046ce63b765a2c2cd272dcf6ccda4ed7e4488504ff4271182fc00832.exe
3900	06e406c9046ce63b765a2c2cd272dcf6ccda4ed7e4488504ff4271182fc00832.exe
3900	06e406c9046ce63b765a2c2cd272dcf6ccda4ed7e4488504ff4271182fc00832.exe

C:\Users\Admin\AppData\Local\Temp\06e406c9046ce63b765a2c2cd272dcf6ccda4ed7e4488504ff4271182fc00832.exe
"C:\Users\Admin\AppData\Local\Temp\06e406c9046ce63b765a2c2cd272dcf6ccda4ed7e4488504ff4271182fc00832.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3900-0-0x0000000002460000-0x000000000246C000-memory.dmp

Filesize
48KB

Download