4acf67cd908ac3468c677370060120ee02d142faac5390f7e96fee5901df518e | Triage

Analysis

max time kernel
138s
max time network
144s
platform
windows10_x64
resource
win10
submitted
18-07-2020 10:16

Sharing

Report Analysis Logs

General

Target

4acf67cd908ac3468c677370060120ee02d142faac5390f7e96fee5901df518e.exe
Size

273KB
MD5

e02d06c853469a6eb26120d9d4fcfb91
SHA1

a70f51b1a0b8327a13f53db2554a2f7da3b192bb
SHA256

4acf67cd908ac3468c677370060120ee02d142faac5390f7e96fee5901df518e
SHA512

529da2ac5c475ba36d24e8fbd2f06dd1da456b5812dfef842689e1f95b5374bc93f382471093a72d93689d3409e4037e0de2c703688c57617dc00c35397757f1

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3060	4acf67cd908ac3468c677370060120ee02d142faac5390f7e96fee5901df518e.exe
3060	4acf67cd908ac3468c677370060120ee02d142faac5390f7e96fee5901df518e.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3060	4acf67cd908ac3468c677370060120ee02d142faac5390f7e96fee5901df518e.exe
3060	4acf67cd908ac3468c677370060120ee02d142faac5390f7e96fee5901df518e.exe
3060	4acf67cd908ac3468c677370060120ee02d142faac5390f7e96fee5901df518e.exe
3060	4acf67cd908ac3468c677370060120ee02d142faac5390f7e96fee5901df518e.exe
3060	4acf67cd908ac3468c677370060120ee02d142faac5390f7e96fee5901df518e.exe
3060	4acf67cd908ac3468c677370060120ee02d142faac5390f7e96fee5901df518e.exe

C:\Users\Admin\AppData\Local\Temp\4acf67cd908ac3468c677370060120ee02d142faac5390f7e96fee5901df518e.exe
"C:\Users\Admin\AppData\Local\Temp\4acf67cd908ac3468c677370060120ee02d142faac5390f7e96fee5901df518e.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3060-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download