Analysis
-
max time kernel
128s -
max time network
128s -
platform
windows10_x64 -
resource
win10v200430 -
submitted
18/07/2020, 01:47
Static task
static1
Behavioral task
behavioral1
Sample
f9016aa86914fd7bdcb0d96b8ddf36bf76877a7825bfda43594070c9811387bf.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
f9016aa86914fd7bdcb0d96b8ddf36bf76877a7825bfda43594070c9811387bf.exe
Resource
win10v200430
0 signatures
0 seconds
General
-
Target
f9016aa86914fd7bdcb0d96b8ddf36bf76877a7825bfda43594070c9811387bf.exe
-
Size
273KB
-
MD5
a21656d3c9d7ebc81f027e745f58f8e5
-
SHA1
8de9696e70536ab9c774d15d7ee4d27c8ba72b0a
-
SHA256
f9016aa86914fd7bdcb0d96b8ddf36bf76877a7825bfda43594070c9811387bf
-
SHA512
647b15abd6f86b672e216a72394eb3d2b26dc00f60173f5c974221d2775f7d675dd02bf9322e5eedb191b51f9dcdcd91f3015bca2673ee9d32a073a7350535f1
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3264 f9016aa86914fd7bdcb0d96b8ddf36bf76877a7825bfda43594070c9811387bf.exe 3264 f9016aa86914fd7bdcb0d96b8ddf36bf76877a7825bfda43594070c9811387bf.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3264 f9016aa86914fd7bdcb0d96b8ddf36bf76877a7825bfda43594070c9811387bf.exe 3264 f9016aa86914fd7bdcb0d96b8ddf36bf76877a7825bfda43594070c9811387bf.exe 3264 f9016aa86914fd7bdcb0d96b8ddf36bf76877a7825bfda43594070c9811387bf.exe 3264 f9016aa86914fd7bdcb0d96b8ddf36bf76877a7825bfda43594070c9811387bf.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f9016aa86914fd7bdcb0d96b8ddf36bf76877a7825bfda43594070c9811387bf.exe"C:\Users\Admin\AppData\Local\Temp\f9016aa86914fd7bdcb0d96b8ddf36bf76877a7825bfda43594070c9811387bf.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3264