af7fa50cd8128444cc671ad7ca571a041ba00159221f5c1fa97d95027bee8d91 | Triage

Analysis

max time kernel
133s
max time network
131s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 20:47

Sharing

Report Analysis Logs

General

Target

af7fa50cd8128444cc671ad7ca571a041ba00159221f5c1fa97d95027bee8d91.exe
Size

100KB
MD5

a6750fb3aa2af5b0335c6e079bd6b278
SHA1

ddc46b83e02d0bb5cfa85c42bfe1fde5c7b169b3
SHA256

af7fa50cd8128444cc671ad7ca571a041ba00159221f5c1fa97d95027bee8d91
SHA512

bd4f3e81c802b6d4eca80cf50e6fbfea60ef7b6f2a6a547bc1f1faffa6665990a444b47f01d3e567cd797d47760ad56508e680818c2371adbc8af68735d22d29

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1300	af7fa50cd8128444cc671ad7ca571a041ba00159221f5c1fa97d95027bee8d91.exe
1300	af7fa50cd8128444cc671ad7ca571a041ba00159221f5c1fa97d95027bee8d91.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1300	af7fa50cd8128444cc671ad7ca571a041ba00159221f5c1fa97d95027bee8d91.exe
1300	af7fa50cd8128444cc671ad7ca571a041ba00159221f5c1fa97d95027bee8d91.exe
1300	af7fa50cd8128444cc671ad7ca571a041ba00159221f5c1fa97d95027bee8d91.exe
1300	af7fa50cd8128444cc671ad7ca571a041ba00159221f5c1fa97d95027bee8d91.exe

C:\Users\Admin\AppData\Local\Temp\af7fa50cd8128444cc671ad7ca571a041ba00159221f5c1fa97d95027bee8d91.exe
"C:\Users\Admin\AppData\Local\Temp\af7fa50cd8128444cc671ad7ca571a041ba00159221f5c1fa97d95027bee8d91.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:1300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1300-0-0x00000000022E0000-0x00000000022EC000-memory.dmp

Filesize
48KB

Download