bc0d92cd20722721b741988953b56fe408f23a64ba6b99da3e3d8f7ca6455dce | Triage

Analysis

max time kernel
131s
max time network
131s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 03:07

Sharing

Report Analysis Logs

General

Target

bc0d92cd20722721b741988953b56fe408f23a64ba6b99da3e3d8f7ca6455dce.exe
Size

273KB
MD5

11a366465956524b6c029e20b31d3de3
SHA1

7b62b43a3b7721dfab8fac7e2375279faa6342c7
SHA256

bc0d92cd20722721b741988953b56fe408f23a64ba6b99da3e3d8f7ca6455dce
SHA512

44d1c1ff91a8504ca6a64d56851b11afaee3b157b9df6a427f680a9c534ad7c4fed4517a21b3d4e08212dba6915e6038e92304c4f6d0deb918f61acb1046d940

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1068	bc0d92cd20722721b741988953b56fe408f23a64ba6b99da3e3d8f7ca6455dce.exe
1068	bc0d92cd20722721b741988953b56fe408f23a64ba6b99da3e3d8f7ca6455dce.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1068	bc0d92cd20722721b741988953b56fe408f23a64ba6b99da3e3d8f7ca6455dce.exe
1068	bc0d92cd20722721b741988953b56fe408f23a64ba6b99da3e3d8f7ca6455dce.exe
1068	bc0d92cd20722721b741988953b56fe408f23a64ba6b99da3e3d8f7ca6455dce.exe
1068	bc0d92cd20722721b741988953b56fe408f23a64ba6b99da3e3d8f7ca6455dce.exe

C:\Users\Admin\AppData\Local\Temp\bc0d92cd20722721b741988953b56fe408f23a64ba6b99da3e3d8f7ca6455dce.exe
"C:\Users\Admin\AppData\Local\Temp\bc0d92cd20722721b741988953b56fe408f23a64ba6b99da3e3d8f7ca6455dce.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:1068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1068-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download