6fb11fc16a3643792c2fcdfa874e232f383b8c65f02184e57b6d11b77405c696 | Triage

Analysis

max time kernel
134s
max time network
124s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 20:18

Sharing

Report Analysis Logs

General

Target

6fb11fc16a3643792c2fcdfa874e232f383b8c65f02184e57b6d11b77405c696.exe
Size

100KB
MD5

8b5d6735cd71bdaa9d044a50056014f4
SHA1

d5d984971f7279b3153bd23ff7dbfcc17abe8edf
SHA256

6fb11fc16a3643792c2fcdfa874e232f383b8c65f02184e57b6d11b77405c696
SHA512

1910844b12ed4318b62791b4130a58abd30b50faf740b83ac0c71bb0a46acd802ec9c9f700f71404dbdaf33faffb13d048757868e87d5f610b12627acc80f165

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
896	6fb11fc16a3643792c2fcdfa874e232f383b8c65f02184e57b6d11b77405c696.exe
896	6fb11fc16a3643792c2fcdfa874e232f383b8c65f02184e57b6d11b77405c696.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
896	6fb11fc16a3643792c2fcdfa874e232f383b8c65f02184e57b6d11b77405c696.exe
896	6fb11fc16a3643792c2fcdfa874e232f383b8c65f02184e57b6d11b77405c696.exe
896	6fb11fc16a3643792c2fcdfa874e232f383b8c65f02184e57b6d11b77405c696.exe
896	6fb11fc16a3643792c2fcdfa874e232f383b8c65f02184e57b6d11b77405c696.exe

C:\Users\Admin\AppData\Local\Temp\6fb11fc16a3643792c2fcdfa874e232f383b8c65f02184e57b6d11b77405c696.exe
"C:\Users\Admin\AppData\Local\Temp\6fb11fc16a3643792c2fcdfa874e232f383b8c65f02184e57b6d11b77405c696.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/896-0-0x0000000002210000-0x000000000221C000-memory.dmp

Filesize
48KB

Download