761455f2ddde8dbba2aef8c9ee085395078fb61c2026a41b1232fa701b59f1b9 | Triage

Analysis

max time kernel
117s
max time network
123s
platform
windows10_x64
resource
win10
submitted
18-07-2020 02:12

Sharing

Report Analysis Logs

General

Target

761455f2ddde8dbba2aef8c9ee085395078fb61c2026a41b1232fa701b59f1b9.exe
Size

273KB
MD5

7098e08864aea901b15694129e8dc14f
SHA1

dead7bd2bd012b88f06be40e8299c21f6756afd0
SHA256

761455f2ddde8dbba2aef8c9ee085395078fb61c2026a41b1232fa701b59f1b9
SHA512

1c66267b01f53fff8df52908e71021cda720dfa9f65bc8a6cecaf73bee66756f782378ec2d6d22f75b2bad87f8e3cb52782117a4da52f224d859c236e4292785

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3104	761455f2ddde8dbba2aef8c9ee085395078fb61c2026a41b1232fa701b59f1b9.exe
3104	761455f2ddde8dbba2aef8c9ee085395078fb61c2026a41b1232fa701b59f1b9.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3104	761455f2ddde8dbba2aef8c9ee085395078fb61c2026a41b1232fa701b59f1b9.exe
3104	761455f2ddde8dbba2aef8c9ee085395078fb61c2026a41b1232fa701b59f1b9.exe
3104	761455f2ddde8dbba2aef8c9ee085395078fb61c2026a41b1232fa701b59f1b9.exe
3104	761455f2ddde8dbba2aef8c9ee085395078fb61c2026a41b1232fa701b59f1b9.exe

C:\Users\Admin\AppData\Local\Temp\761455f2ddde8dbba2aef8c9ee085395078fb61c2026a41b1232fa701b59f1b9.exe
"C:\Users\Admin\AppData\Local\Temp\761455f2ddde8dbba2aef8c9ee085395078fb61c2026a41b1232fa701b59f1b9.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3104-0-0x0000000002260000-0x000000000226C000-memory.dmp

Filesize
48KB

Download