208ede72cd01e36f14fdcec77bfdee987a37b356455cbc41dd61ecf4353a0e64 | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows10_x64
resource
win10
submitted
18-07-2020 03:03

Sharing

Report Analysis Logs

General

Target

208ede72cd01e36f14fdcec77bfdee987a37b356455cbc41dd61ecf4353a0e64.exe
Size

273KB
MD5

a368e3a768da53b00515f373731938ea
SHA1

a69190dd93eb9c08c8bdb66af080f805999312ce
SHA256

208ede72cd01e36f14fdcec77bfdee987a37b356455cbc41dd61ecf4353a0e64
SHA512

15eedfdbee5f0e1ed5b2cc6b62df25d736bc54b3722913872df5ac70f21b54579d2c9cb17ce139d7439928f203fc8ef6f5d7945dee24d2a00b7763c277b1ad67

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3044	208ede72cd01e36f14fdcec77bfdee987a37b356455cbc41dd61ecf4353a0e64.exe
3044	208ede72cd01e36f14fdcec77bfdee987a37b356455cbc41dd61ecf4353a0e64.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3044	208ede72cd01e36f14fdcec77bfdee987a37b356455cbc41dd61ecf4353a0e64.exe
3044	208ede72cd01e36f14fdcec77bfdee987a37b356455cbc41dd61ecf4353a0e64.exe
3044	208ede72cd01e36f14fdcec77bfdee987a37b356455cbc41dd61ecf4353a0e64.exe
3044	208ede72cd01e36f14fdcec77bfdee987a37b356455cbc41dd61ecf4353a0e64.exe

C:\Users\Admin\AppData\Local\Temp\208ede72cd01e36f14fdcec77bfdee987a37b356455cbc41dd61ecf4353a0e64.exe
"C:\Users\Admin\AppData\Local\Temp\208ede72cd01e36f14fdcec77bfdee987a37b356455cbc41dd61ecf4353a0e64.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3044-0-0x0000000002260000-0x000000000226C000-memory.dmp

Filesize
48KB

Download