00a645da9a311683d7d888177e04ab05c704f5e706b69389aef4473dff8239af | Triage

Analysis

max time kernel
137s
max time network
128s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 04:04

Sharing

Report Analysis Logs

General

Target

00a645da9a311683d7d888177e04ab05c704f5e706b69389aef4473dff8239af.exe
Size

273KB
MD5

275eab8a5ede1e4af2f6ed51a1d1b79d
SHA1

3d0518a938ecd5f8bbaf466f9cdee184550385ec
SHA256

00a645da9a311683d7d888177e04ab05c704f5e706b69389aef4473dff8239af
SHA512

f1354e6deb4375f57acb165603c5cbd4a6f35d834a60c17b7975bd17f8bd9c90bd92daf3351b21c3745a0ae32e90da75c4a8734fe0f3c77fd0d01aee0eb8fe4e

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
640	00a645da9a311683d7d888177e04ab05c704f5e706b69389aef4473dff8239af.exe
640	00a645da9a311683d7d888177e04ab05c704f5e706b69389aef4473dff8239af.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
640	00a645da9a311683d7d888177e04ab05c704f5e706b69389aef4473dff8239af.exe
640	00a645da9a311683d7d888177e04ab05c704f5e706b69389aef4473dff8239af.exe
640	00a645da9a311683d7d888177e04ab05c704f5e706b69389aef4473dff8239af.exe
640	00a645da9a311683d7d888177e04ab05c704f5e706b69389aef4473dff8239af.exe

C:\Users\Admin\AppData\Local\Temp\00a645da9a311683d7d888177e04ab05c704f5e706b69389aef4473dff8239af.exe
"C:\Users\Admin\AppData\Local\Temp\00a645da9a311683d7d888177e04ab05c704f5e706b69389aef4473dff8239af.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/640-0-0x0000000002320000-0x000000000232C000-memory.dmp

Filesize
48KB

Download