0472ed65ca30fd0c95dfad67bc2d2dbf54ce2bdc4b287df5ca5383f6fdda83e1 | Triage

Analysis

max time kernel
147s
max time network
150s
platform
windows10_x64
resource
win10
submitted
18-07-2020 10:42

Sharing

Report Analysis Logs

General

Target

0472ed65ca30fd0c95dfad67bc2d2dbf54ce2bdc4b287df5ca5383f6fdda83e1.exe
Size

273KB
MD5

40527ebe1fb77c46872a8c870469cb43
SHA1

a454dcec7fc858131a004778749bffd00e59310c
SHA256

0472ed65ca30fd0c95dfad67bc2d2dbf54ce2bdc4b287df5ca5383f6fdda83e1
SHA512

654b2429bf935a0b65a20f1fb417c54dcdebda3082e0c1808aaf70d51af1f1bbbec73af5bc04c954f5828ed29b0c762c028042c6d7cebcd259578d205920907a

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
980	0472ed65ca30fd0c95dfad67bc2d2dbf54ce2bdc4b287df5ca5383f6fdda83e1.exe
980	0472ed65ca30fd0c95dfad67bc2d2dbf54ce2bdc4b287df5ca5383f6fdda83e1.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
980	0472ed65ca30fd0c95dfad67bc2d2dbf54ce2bdc4b287df5ca5383f6fdda83e1.exe
980	0472ed65ca30fd0c95dfad67bc2d2dbf54ce2bdc4b287df5ca5383f6fdda83e1.exe
980	0472ed65ca30fd0c95dfad67bc2d2dbf54ce2bdc4b287df5ca5383f6fdda83e1.exe
980	0472ed65ca30fd0c95dfad67bc2d2dbf54ce2bdc4b287df5ca5383f6fdda83e1.exe

C:\Users\Admin\AppData\Local\Temp\0472ed65ca30fd0c95dfad67bc2d2dbf54ce2bdc4b287df5ca5383f6fdda83e1.exe
"C:\Users\Admin\AppData\Local\Temp\0472ed65ca30fd0c95dfad67bc2d2dbf54ce2bdc4b287df5ca5383f6fdda83e1.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/980-0-0x00000000021D0000-0x00000000021DC000-memory.dmp

Filesize
48KB

Download