9c4af5aeacdc12f86736672fb4b6d82d89ab15c06fd47b0c82aec0d571d52fa9 | Triage

Analysis

max time kernel
120s
max time network
127s
platform
windows10_x64
resource
win10
submitted
18-07-2020 03:19

Sharing

Report Analysis Logs

General

Target

9c4af5aeacdc12f86736672fb4b6d82d89ab15c06fd47b0c82aec0d571d52fa9.exe
Size

273KB
MD5

4f0dea0f5c88f49d836b8a056bc37758
SHA1

83c1ea713cbf6d2929bedb7b2c996f0c2ae248d4
SHA256

9c4af5aeacdc12f86736672fb4b6d82d89ab15c06fd47b0c82aec0d571d52fa9
SHA512

6b91fd110c043a4a80094d39e507ab7055c787ea65b088c712c83c151129dcc50fccb411eff896b67621698c03655859b0c0632842b4aef7293cb21a25c575b1

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3900	9c4af5aeacdc12f86736672fb4b6d82d89ab15c06fd47b0c82aec0d571d52fa9.exe
3900	9c4af5aeacdc12f86736672fb4b6d82d89ab15c06fd47b0c82aec0d571d52fa9.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3900	9c4af5aeacdc12f86736672fb4b6d82d89ab15c06fd47b0c82aec0d571d52fa9.exe
3900	9c4af5aeacdc12f86736672fb4b6d82d89ab15c06fd47b0c82aec0d571d52fa9.exe
3900	9c4af5aeacdc12f86736672fb4b6d82d89ab15c06fd47b0c82aec0d571d52fa9.exe
3900	9c4af5aeacdc12f86736672fb4b6d82d89ab15c06fd47b0c82aec0d571d52fa9.exe

C:\Users\Admin\AppData\Local\Temp\9c4af5aeacdc12f86736672fb4b6d82d89ab15c06fd47b0c82aec0d571d52fa9.exe
"C:\Users\Admin\AppData\Local\Temp\9c4af5aeacdc12f86736672fb4b6d82d89ab15c06fd47b0c82aec0d571d52fa9.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3900-0-0x00000000021F0000-0x00000000021FC000-memory.dmp

Filesize
48KB

Download