Analysis
-
max time kernel
66s -
max time network
128s -
platform
windows10_x64 -
resource
win10 -
submitted
19-07-2020 08:41
Static task
static1
Behavioral task
behavioral1
Sample
2df34f1928b28b6bc05568fa071e5cefc21066e5cec21c6be6a4b2c95d0ad866.exe
Resource
win7v200430
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
2df34f1928b28b6bc05568fa071e5cefc21066e5cec21c6be6a4b2c95d0ad866.exe
Resource
win10
windows10_x64
0 signatures
0 seconds
General
-
Target
2df34f1928b28b6bc05568fa071e5cefc21066e5cec21c6be6a4b2c95d0ad866.exe
-
Size
100KB
-
MD5
b200c08e09fee6fb972ad8e3d8e134b2
-
SHA1
b338408354652d44b03b06a5e3063fdd505ae4f3
-
SHA256
2df34f1928b28b6bc05568fa071e5cefc21066e5cec21c6be6a4b2c95d0ad866
-
SHA512
8fd6e930947642bb6c77c73e27c47c68500b29b7befa2951e940050d378872c0bb9d15b547de5649d2dcdeb1893c8166fa01fb6a54cfffb8d9efeac54de9dff0
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2728 2df34f1928b28b6bc05568fa071e5cefc21066e5cec21c6be6a4b2c95d0ad866.exe 2728 2df34f1928b28b6bc05568fa071e5cefc21066e5cec21c6be6a4b2c95d0ad866.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2728 2df34f1928b28b6bc05568fa071e5cefc21066e5cec21c6be6a4b2c95d0ad866.exe 2728 2df34f1928b28b6bc05568fa071e5cefc21066e5cec21c6be6a4b2c95d0ad866.exe 2728 2df34f1928b28b6bc05568fa071e5cefc21066e5cec21c6be6a4b2c95d0ad866.exe 2728 2df34f1928b28b6bc05568fa071e5cefc21066e5cec21c6be6a4b2c95d0ad866.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2df34f1928b28b6bc05568fa071e5cefc21066e5cec21c6be6a4b2c95d0ad866.exe"C:\Users\Admin\AppData\Local\Temp\2df34f1928b28b6bc05568fa071e5cefc21066e5cec21c6be6a4b2c95d0ad866.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:2728