f6b6ef4ac85958f9703dc520fcbab60014c30b8038c2524eed2f861b94c95658 | Triage

Analysis

max time kernel
136s
max time network
126s
platform
windows10_x64
resource
win10v200430
submitted
19-07-2020 00:47

Sharing

Report Analysis Logs

General

Target

f6b6ef4ac85958f9703dc520fcbab60014c30b8038c2524eed2f861b94c95658.exe
Size

100KB
MD5

8be0651002b81a10cca5a1744f7758ba
SHA1

d961f6be25ee751f328b6807e761a9722a610654
SHA256

f6b6ef4ac85958f9703dc520fcbab60014c30b8038c2524eed2f861b94c95658
SHA512

acbe884ddb9a19841e9ae0871241207281cfc6fc57af9a8cb26ed15c953cef11938001582d8c05aee8bbc767ecf7a905b61b3bde45476b7946c6c88785dda003

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1768	f6b6ef4ac85958f9703dc520fcbab60014c30b8038c2524eed2f861b94c95658.exe
1768	f6b6ef4ac85958f9703dc520fcbab60014c30b8038c2524eed2f861b94c95658.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1768	f6b6ef4ac85958f9703dc520fcbab60014c30b8038c2524eed2f861b94c95658.exe
1768	f6b6ef4ac85958f9703dc520fcbab60014c30b8038c2524eed2f861b94c95658.exe
1768	f6b6ef4ac85958f9703dc520fcbab60014c30b8038c2524eed2f861b94c95658.exe
1768	f6b6ef4ac85958f9703dc520fcbab60014c30b8038c2524eed2f861b94c95658.exe

C:\Users\Admin\AppData\Local\Temp\f6b6ef4ac85958f9703dc520fcbab60014c30b8038c2524eed2f861b94c95658.exe
"C:\Users\Admin\AppData\Local\Temp\f6b6ef4ac85958f9703dc520fcbab60014c30b8038c2524eed2f861b94c95658.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:1768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1768-0-0x00000000022D0000-0x00000000022DC000-memory.dmp

Filesize
48KB

Download