c2d8100a1de4123edb2eec516ba7247fff98c7307c18078af8311ae1406ee63f | Triage

Analysis

max time kernel
119s
max time network
129s
platform
windows10_x64
resource
win10
submitted
18-07-2020 10:57

Sharing

Report Analysis Logs

General

Target

c2d8100a1de4123edb2eec516ba7247fff98c7307c18078af8311ae1406ee63f.exe
Size

273KB
MD5

fdd9609a85a200f434c715787f3dfa59
SHA1

d3c927fa037cb4eab946741cb10861bea3ca6725
SHA256

c2d8100a1de4123edb2eec516ba7247fff98c7307c18078af8311ae1406ee63f
SHA512

feda43e7d84b3e9c521b3069e50b7b3a9a65e0f46274177f204e2df47df663d9281e7221ef6314d8e8aee1810a97f746737cc8bdb0bfaee13159100ac6c0e431

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
792	c2d8100a1de4123edb2eec516ba7247fff98c7307c18078af8311ae1406ee63f.exe
792	c2d8100a1de4123edb2eec516ba7247fff98c7307c18078af8311ae1406ee63f.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
792	c2d8100a1de4123edb2eec516ba7247fff98c7307c18078af8311ae1406ee63f.exe
792	c2d8100a1de4123edb2eec516ba7247fff98c7307c18078af8311ae1406ee63f.exe
792	c2d8100a1de4123edb2eec516ba7247fff98c7307c18078af8311ae1406ee63f.exe
792	c2d8100a1de4123edb2eec516ba7247fff98c7307c18078af8311ae1406ee63f.exe

C:\Users\Admin\AppData\Local\Temp\c2d8100a1de4123edb2eec516ba7247fff98c7307c18078af8311ae1406ee63f.exe
"C:\Users\Admin\AppData\Local\Temp\c2d8100a1de4123edb2eec516ba7247fff98c7307c18078af8311ae1406ee63f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/792-0-0x0000000002270000-0x000000000227C000-memory.dmp

Filesize
48KB

Download