e9edb9c5f3814bc6ee98d5d1daa0434180e708d19b863b4b6d9a51d377d1dc05 | Triage

Analysis

max time kernel
134s
max time network
127s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 12:27

Sharing

Report Analysis Logs

General

Target

e9edb9c5f3814bc6ee98d5d1daa0434180e708d19b863b4b6d9a51d377d1dc05.exe
Size

100KB
MD5

d50514e2574b9dcef63a0c5b62ef35c2
SHA1

068ecf92daf30f5951f76a9569b4d833615c4bd7
SHA256

e9edb9c5f3814bc6ee98d5d1daa0434180e708d19b863b4b6d9a51d377d1dc05
SHA512

f1e26117fbaf3e3bcefde43cccf83b05abc9931637171c767c268429845d14fbd02c3434caf4a5714b7baa270537328910ecbb12f680ce76dbb2db1df792be01

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
808	e9edb9c5f3814bc6ee98d5d1daa0434180e708d19b863b4b6d9a51d377d1dc05.exe
808	e9edb9c5f3814bc6ee98d5d1daa0434180e708d19b863b4b6d9a51d377d1dc05.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
808	e9edb9c5f3814bc6ee98d5d1daa0434180e708d19b863b4b6d9a51d377d1dc05.exe
808	e9edb9c5f3814bc6ee98d5d1daa0434180e708d19b863b4b6d9a51d377d1dc05.exe
808	e9edb9c5f3814bc6ee98d5d1daa0434180e708d19b863b4b6d9a51d377d1dc05.exe
808	e9edb9c5f3814bc6ee98d5d1daa0434180e708d19b863b4b6d9a51d377d1dc05.exe

C:\Users\Admin\AppData\Local\Temp\e9edb9c5f3814bc6ee98d5d1daa0434180e708d19b863b4b6d9a51d377d1dc05.exe
"C:\Users\Admin\AppData\Local\Temp\e9edb9c5f3814bc6ee98d5d1daa0434180e708d19b863b4b6d9a51d377d1dc05.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/808-0-0x00000000022D0000-0x00000000022DC000-memory.dmp

Filesize
48KB

Download