1b21738226602633ca29cf36aa0b28378cfec4a15481fe29768adaf585d80abb | Triage

Analysis

max time kernel
138s
max time network
126s
platform
windows10_x64
resource
win10v200430
submitted
19-07-2020 03:12

Sharing

Report Analysis Logs

General

Target

1b21738226602633ca29cf36aa0b28378cfec4a15481fe29768adaf585d80abb.exe
Size

100KB
MD5

5250054238c3cba838a2a1c8ff30f49a
SHA1

01248e643ca759d5c499ec12e8090741cf23d66d
SHA256

1b21738226602633ca29cf36aa0b28378cfec4a15481fe29768adaf585d80abb
SHA512

d066346b2e687c2e6ed02e290b7c7e3f1726a8874264365e491c0c409df44a04e61b015e5e1237569bade8d68681d44ba2914c48cd998f360bce6eb6b1bbdb82

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3656	1b21738226602633ca29cf36aa0b28378cfec4a15481fe29768adaf585d80abb.exe
3656	1b21738226602633ca29cf36aa0b28378cfec4a15481fe29768adaf585d80abb.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3656	1b21738226602633ca29cf36aa0b28378cfec4a15481fe29768adaf585d80abb.exe
3656	1b21738226602633ca29cf36aa0b28378cfec4a15481fe29768adaf585d80abb.exe
3656	1b21738226602633ca29cf36aa0b28378cfec4a15481fe29768adaf585d80abb.exe
3656	1b21738226602633ca29cf36aa0b28378cfec4a15481fe29768adaf585d80abb.exe

C:\Users\Admin\AppData\Local\Temp\1b21738226602633ca29cf36aa0b28378cfec4a15481fe29768adaf585d80abb.exe
"C:\Users\Admin\AppData\Local\Temp\1b21738226602633ca29cf36aa0b28378cfec4a15481fe29768adaf585d80abb.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3656-0-0x0000000002210000-0x000000000221C000-memory.dmp

Filesize
48KB

Download