a4d65302444576faf00053dcb5d6a9e0b58e4a90812440c42b7035bca68fbc8f | Triage

Analysis

max time kernel
119s
max time network
143s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 06:02

Sharing

Report Analysis Logs

General

Target

a4d65302444576faf00053dcb5d6a9e0b58e4a90812440c42b7035bca68fbc8f.exe
Size

273KB
MD5

6adfa98420c278bbf1defdd6d73a7c0e
SHA1

03b43fb071b31496caf320a0f826efee5ad0526a
SHA256

a4d65302444576faf00053dcb5d6a9e0b58e4a90812440c42b7035bca68fbc8f
SHA512

77412ba438b09dc89e22bfba431b68f6f3c95b56876ac80bb72b4989e692d3e173e9232a04ec4a1e456e912ad915b088e47c74a0b7c2097e3a2c7ffe8b11adb8

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1520	a4d65302444576faf00053dcb5d6a9e0b58e4a90812440c42b7035bca68fbc8f.exe
1520	a4d65302444576faf00053dcb5d6a9e0b58e4a90812440c42b7035bca68fbc8f.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1520	a4d65302444576faf00053dcb5d6a9e0b58e4a90812440c42b7035bca68fbc8f.exe
1520	a4d65302444576faf00053dcb5d6a9e0b58e4a90812440c42b7035bca68fbc8f.exe
1520	a4d65302444576faf00053dcb5d6a9e0b58e4a90812440c42b7035bca68fbc8f.exe
1520	a4d65302444576faf00053dcb5d6a9e0b58e4a90812440c42b7035bca68fbc8f.exe

C:\Users\Admin\AppData\Local\Temp\a4d65302444576faf00053dcb5d6a9e0b58e4a90812440c42b7035bca68fbc8f.exe
"C:\Users\Admin\AppData\Local\Temp\a4d65302444576faf00053dcb5d6a9e0b58e4a90812440c42b7035bca68fbc8f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:1520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1520-0-0x0000000002120000-0x000000000212C000-memory.dmp

Filesize
48KB

Download