034f1b397bd0ad94582af1ab4cbfd5ade283518bd19d1c0f5c9af06d12e6e6a4 | Triage

Analysis

max time kernel
64s
max time network
140s
platform
windows10_x64
resource
win10v200430
submitted
18/07/2020, 01:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

034f1b397bd0ad94582af1ab4cbfd5ade283518bd19d1c0f5c9af06d12e6e6a4.exe
Size

273KB
MD5

d2d933a9080fd520478f689d529002c2
SHA1

5311abdcf78de28280ce9bd888ee01282484c53b
SHA256

034f1b397bd0ad94582af1ab4cbfd5ade283518bd19d1c0f5c9af06d12e6e6a4
SHA512

86fe1f409efd22a6a3ab7a329d369912025cc72f1684f13ac3195de98912b44c584538a6b364fb392bdc94f8bbf530b18197388f59a7ce299946b9272dd09303

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2564	034f1b397bd0ad94582af1ab4cbfd5ade283518bd19d1c0f5c9af06d12e6e6a4.exe
2564	034f1b397bd0ad94582af1ab4cbfd5ade283518bd19d1c0f5c9af06d12e6e6a4.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2564	034f1b397bd0ad94582af1ab4cbfd5ade283518bd19d1c0f5c9af06d12e6e6a4.exe
2564	034f1b397bd0ad94582af1ab4cbfd5ade283518bd19d1c0f5c9af06d12e6e6a4.exe
2564	034f1b397bd0ad94582af1ab4cbfd5ade283518bd19d1c0f5c9af06d12e6e6a4.exe
2564	034f1b397bd0ad94582af1ab4cbfd5ade283518bd19d1c0f5c9af06d12e6e6a4.exe
2564	034f1b397bd0ad94582af1ab4cbfd5ade283518bd19d1c0f5c9af06d12e6e6a4.exe
2564	034f1b397bd0ad94582af1ab4cbfd5ade283518bd19d1c0f5c9af06d12e6e6a4.exe

C:\Users\Admin\AppData\Local\Temp\034f1b397bd0ad94582af1ab4cbfd5ade283518bd19d1c0f5c9af06d12e6e6a4.exe
"C:\Users\Admin\AppData\Local\Temp\034f1b397bd0ad94582af1ab4cbfd5ade283518bd19d1c0f5c9af06d12e6e6a4.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:2564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2564-0-0x0000000002340000-0x000000000234C000-memory.dmp

Filesize
48KB

Download