e493fe5599a7356c84ccd7ab0e03dd99cb5026777f553adfa6662c91f7f4332c | Triage

Analysis

max time kernel
61s
max time network
125s
platform
windows10_x64
resource
win10
submitted
18-07-2020 21:30

Sharing

Report Analysis Logs

General

Target

e493fe5599a7356c84ccd7ab0e03dd99cb5026777f553adfa6662c91f7f4332c.exe
Size

100KB
MD5

a1c443c7c1763fab1a28be7f10c53690
SHA1

6bdbf6825d5468e8c088df4a545eedc4ead626e4
SHA256

e493fe5599a7356c84ccd7ab0e03dd99cb5026777f553adfa6662c91f7f4332c
SHA512

17670639db2572a1c913f6b0f428dbbf5782e1fca4ddceb109a2ff9ed576d4c2b1e1748f6cdaf57af9bfa9c0842004b1a6f759b1569f07233d9fcd55050113b4

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4016	e493fe5599a7356c84ccd7ab0e03dd99cb5026777f553adfa6662c91f7f4332c.exe
4016	e493fe5599a7356c84ccd7ab0e03dd99cb5026777f553adfa6662c91f7f4332c.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4016	e493fe5599a7356c84ccd7ab0e03dd99cb5026777f553adfa6662c91f7f4332c.exe
4016	e493fe5599a7356c84ccd7ab0e03dd99cb5026777f553adfa6662c91f7f4332c.exe
4016	e493fe5599a7356c84ccd7ab0e03dd99cb5026777f553adfa6662c91f7f4332c.exe
4016	e493fe5599a7356c84ccd7ab0e03dd99cb5026777f553adfa6662c91f7f4332c.exe

C:\Users\Admin\AppData\Local\Temp\e493fe5599a7356c84ccd7ab0e03dd99cb5026777f553adfa6662c91f7f4332c.exe
"C:\Users\Admin\AppData\Local\Temp\e493fe5599a7356c84ccd7ab0e03dd99cb5026777f553adfa6662c91f7f4332c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:4016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4016-0-0x00000000023F0000-0x00000000023FC000-memory.dmp

Filesize
48KB

Download