44cd6d0c989e8a0960aa04a60c207d24300ba55de5ca49ceb0c8f9212a3403f8 | Triage

Analysis

max time kernel
130s
max time network
130s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 23:31

Sharing

Report Analysis Logs

General

Target

44cd6d0c989e8a0960aa04a60c207d24300ba55de5ca49ceb0c8f9212a3403f8.exe
Size

100KB
MD5

89a28c81bf58fee09aa746b51a4a8a25
SHA1

32eb86676db34089568ca4655d50391f113d989b
SHA256

44cd6d0c989e8a0960aa04a60c207d24300ba55de5ca49ceb0c8f9212a3403f8
SHA512

74d0bae86f8695fca9033afea6e436ee5c8ae774642896058785ff9246f3ee15a74c2a65bd14c8c2e75e560fae7b0c802daf2e5ca6eedb57b5358bf604848d74

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1616	44cd6d0c989e8a0960aa04a60c207d24300ba55de5ca49ceb0c8f9212a3403f8.exe
1616	44cd6d0c989e8a0960aa04a60c207d24300ba55de5ca49ceb0c8f9212a3403f8.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1616	44cd6d0c989e8a0960aa04a60c207d24300ba55de5ca49ceb0c8f9212a3403f8.exe
1616	44cd6d0c989e8a0960aa04a60c207d24300ba55de5ca49ceb0c8f9212a3403f8.exe
1616	44cd6d0c989e8a0960aa04a60c207d24300ba55de5ca49ceb0c8f9212a3403f8.exe
1616	44cd6d0c989e8a0960aa04a60c207d24300ba55de5ca49ceb0c8f9212a3403f8.exe

C:\Users\Admin\AppData\Local\Temp\44cd6d0c989e8a0960aa04a60c207d24300ba55de5ca49ceb0c8f9212a3403f8.exe
"C:\Users\Admin\AppData\Local\Temp\44cd6d0c989e8a0960aa04a60c207d24300ba55de5ca49ceb0c8f9212a3403f8.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:1616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1616-0-0x0000000002210000-0x000000000221C000-memory.dmp

Filesize
48KB

Download