69b997cb3a908b0e8930c5911ca2c7ee162509ad0be7d6041984408917401874 | Triage

Analysis

max time kernel
65s
max time network
124s
platform
windows10_x64
resource
win10
submitted
18-07-2020 06:32

Sharing

Report Analysis Logs

General

Target

69b997cb3a908b0e8930c5911ca2c7ee162509ad0be7d6041984408917401874.exe
Size

273KB
MD5

f56010a2e5453a3dfc5b79d91644d12c
SHA1

dad7192aa5f33ac58856829e476bdd404a094637
SHA256

69b997cb3a908b0e8930c5911ca2c7ee162509ad0be7d6041984408917401874
SHA512

1a8f0493ef67cd50c98e4f41fd92c81e3d5eb6bd5f83047ff7c6b3edd176f3112b7df411c08aa98364fbc1e684bd189b90304ed981fd756f639d0b84672097c2

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3920	69b997cb3a908b0e8930c5911ca2c7ee162509ad0be7d6041984408917401874.exe
3920	69b997cb3a908b0e8930c5911ca2c7ee162509ad0be7d6041984408917401874.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3920	69b997cb3a908b0e8930c5911ca2c7ee162509ad0be7d6041984408917401874.exe
3920	69b997cb3a908b0e8930c5911ca2c7ee162509ad0be7d6041984408917401874.exe
3920	69b997cb3a908b0e8930c5911ca2c7ee162509ad0be7d6041984408917401874.exe
3920	69b997cb3a908b0e8930c5911ca2c7ee162509ad0be7d6041984408917401874.exe

C:\Users\Admin\AppData\Local\Temp\69b997cb3a908b0e8930c5911ca2c7ee162509ad0be7d6041984408917401874.exe
"C:\Users\Admin\AppData\Local\Temp\69b997cb3a908b0e8930c5911ca2c7ee162509ad0be7d6041984408917401874.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3920-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download