ea2dc3c5f293d818cc889f85265eaacac109d79d3633dae1f356147f5cbc8dd7 | Triage

Analysis

max time kernel
135s
max time network
127s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 22:04

Sharing

Report Analysis Logs

General

Target

ea2dc3c5f293d818cc889f85265eaacac109d79d3633dae1f356147f5cbc8dd7.exe
Size

100KB
MD5

20d56d46feb2866704a419f04af19c78
SHA1

397691d9e04b9eab2e093e783c2ee0bac09690db
SHA256

ea2dc3c5f293d818cc889f85265eaacac109d79d3633dae1f356147f5cbc8dd7
SHA512

b0e3ba0434b50378f0bfd02b9a617c7abb56f50598dda49be173360684d65d9b5d0d5da390c41139242defb11fe7625116372e6cf5a3e840460dd052549327f5

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
664	ea2dc3c5f293d818cc889f85265eaacac109d79d3633dae1f356147f5cbc8dd7.exe
664	ea2dc3c5f293d818cc889f85265eaacac109d79d3633dae1f356147f5cbc8dd7.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
664	ea2dc3c5f293d818cc889f85265eaacac109d79d3633dae1f356147f5cbc8dd7.exe
664	ea2dc3c5f293d818cc889f85265eaacac109d79d3633dae1f356147f5cbc8dd7.exe
664	ea2dc3c5f293d818cc889f85265eaacac109d79d3633dae1f356147f5cbc8dd7.exe
664	ea2dc3c5f293d818cc889f85265eaacac109d79d3633dae1f356147f5cbc8dd7.exe

C:\Users\Admin\AppData\Local\Temp\ea2dc3c5f293d818cc889f85265eaacac109d79d3633dae1f356147f5cbc8dd7.exe
"C:\Users\Admin\AppData\Local\Temp\ea2dc3c5f293d818cc889f85265eaacac109d79d3633dae1f356147f5cbc8dd7.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:664

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/664-0-0x00000000022E0000-0x00000000022EC000-memory.dmp

Filesize
48KB

Download