1f5b64eb5206adf943dd5d2d111bd42cad896833936ce66e9b95e70986876d7b | Triage

Analysis

max time kernel
114s
max time network
133s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 04:21

Sharing

Report Analysis Logs

General

Target

1f5b64eb5206adf943dd5d2d111bd42cad896833936ce66e9b95e70986876d7b.exe
Size

273KB
MD5

472e104416c1357450c41fc5e7f7a50d
SHA1

f1678174f7c9fa768e16c235ffdd4ef0383da84b
SHA256

1f5b64eb5206adf943dd5d2d111bd42cad896833936ce66e9b95e70986876d7b
SHA512

c262f0fb0b1ae4fe7df9831ef04398990497670b792188a84c0ebfc13cbd536f1510dc3f02c7dbd554b68210c500b43e6562763b03a65476f5092d08f6687256

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2532	1f5b64eb5206adf943dd5d2d111bd42cad896833936ce66e9b95e70986876d7b.exe
2532	1f5b64eb5206adf943dd5d2d111bd42cad896833936ce66e9b95e70986876d7b.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2532	1f5b64eb5206adf943dd5d2d111bd42cad896833936ce66e9b95e70986876d7b.exe
2532	1f5b64eb5206adf943dd5d2d111bd42cad896833936ce66e9b95e70986876d7b.exe
2532	1f5b64eb5206adf943dd5d2d111bd42cad896833936ce66e9b95e70986876d7b.exe
2532	1f5b64eb5206adf943dd5d2d111bd42cad896833936ce66e9b95e70986876d7b.exe

C:\Users\Admin\AppData\Local\Temp\1f5b64eb5206adf943dd5d2d111bd42cad896833936ce66e9b95e70986876d7b.exe
"C:\Users\Admin\AppData\Local\Temp\1f5b64eb5206adf943dd5d2d111bd42cad896833936ce66e9b95e70986876d7b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:2532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2532-0-0x00000000021D0000-0x00000000021DC000-memory.dmp

Filesize
48KB

Download