da46504827108df36397a9602092844e22e18f3b930da832a93bc941a39f1a9f | Triage

Analysis

max time kernel
138s
max time network
128s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 05:41

Sharing

Report Analysis Logs

General

Target

da46504827108df36397a9602092844e22e18f3b930da832a93bc941a39f1a9f.exe
Size

273KB
MD5

f4ac7924c778dbc6fc6a3ff70feb542c
SHA1

c2fb4e5ccb1b95fdd2fc8db11e4c4a490f16a6d6
SHA256

da46504827108df36397a9602092844e22e18f3b930da832a93bc941a39f1a9f
SHA512

aa12899feccb4ffa8774ccf85bc540b239fb5c081c794ab5e5cbb2e456c3e4266b48710bd0b93322ef2416e38d42db3059ca274bb643860318d351e81b5289b6

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
992	da46504827108df36397a9602092844e22e18f3b930da832a93bc941a39f1a9f.exe
992	da46504827108df36397a9602092844e22e18f3b930da832a93bc941a39f1a9f.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
992	da46504827108df36397a9602092844e22e18f3b930da832a93bc941a39f1a9f.exe
992	da46504827108df36397a9602092844e22e18f3b930da832a93bc941a39f1a9f.exe
992	da46504827108df36397a9602092844e22e18f3b930da832a93bc941a39f1a9f.exe
992	da46504827108df36397a9602092844e22e18f3b930da832a93bc941a39f1a9f.exe

C:\Users\Admin\AppData\Local\Temp\da46504827108df36397a9602092844e22e18f3b930da832a93bc941a39f1a9f.exe
"C:\Users\Admin\AppData\Local\Temp\da46504827108df36397a9602092844e22e18f3b930da832a93bc941a39f1a9f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/992-0-0x00000000021D0000-0x00000000021DC000-memory.dmp

Filesize
48KB

Download