732e4ebc40a47c27856c8b9456d35d44e4bf19e3d1cba1fc545a0d4e49cbe58b | Triage

Analysis

max time kernel
118s
max time network
129s
platform
windows10_x64
resource
win10
submitted
19-07-2020 10:57

Sharing

Report Analysis Logs

General

Target

732e4ebc40a47c27856c8b9456d35d44e4bf19e3d1cba1fc545a0d4e49cbe58b.exe
Size

100KB
MD5

d9db359498fff0c4a201807747d224a0
SHA1

3f7f976fa625437567fddd4ac18a024103f6ee0f
SHA256

732e4ebc40a47c27856c8b9456d35d44e4bf19e3d1cba1fc545a0d4e49cbe58b
SHA512

668d0cc72e7c63e1176ab1e0daf92c972a6dd8c7bd2b52d81aff4c6dbf3a1d0ce20d68d65a030a4db7490aca0a2107b7d8ce26be3d7707af023bc99b53099f16

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
748	732e4ebc40a47c27856c8b9456d35d44e4bf19e3d1cba1fc545a0d4e49cbe58b.exe
748	732e4ebc40a47c27856c8b9456d35d44e4bf19e3d1cba1fc545a0d4e49cbe58b.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
748	732e4ebc40a47c27856c8b9456d35d44e4bf19e3d1cba1fc545a0d4e49cbe58b.exe
748	732e4ebc40a47c27856c8b9456d35d44e4bf19e3d1cba1fc545a0d4e49cbe58b.exe
748	732e4ebc40a47c27856c8b9456d35d44e4bf19e3d1cba1fc545a0d4e49cbe58b.exe
748	732e4ebc40a47c27856c8b9456d35d44e4bf19e3d1cba1fc545a0d4e49cbe58b.exe

C:\Users\Admin\AppData\Local\Temp\732e4ebc40a47c27856c8b9456d35d44e4bf19e3d1cba1fc545a0d4e49cbe58b.exe
"C:\Users\Admin\AppData\Local\Temp\732e4ebc40a47c27856c8b9456d35d44e4bf19e3d1cba1fc545a0d4e49cbe58b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/748-0-0x0000000002400000-0x000000000240C000-memory.dmp

Filesize
48KB

Download