9968e36893930e68224f0afc1d7accafad9f6988db3f2da793a1264a756ba33d | Triage

Analysis

max time kernel
64s
max time network
127s
platform
windows10_x64
resource
win10v200430
submitted
19-07-2020 09:35

Sharing

Report Analysis Logs

General

Target

9968e36893930e68224f0afc1d7accafad9f6988db3f2da793a1264a756ba33d.exe
Size

100KB
MD5

886f0ff414e275ba9937af6bc6a9e9a0
SHA1

4e6f0d26e4c596550bc76eb510b4ac96a6f87d62
SHA256

9968e36893930e68224f0afc1d7accafad9f6988db3f2da793a1264a756ba33d
SHA512

92ace23d79c7b7e65ededf3fa12fcfa7d79884f07cef77e50a0e416362d5daf3e693d5190462366e13042adb7543c048edb50654f7972e171d6a9b2f742a8406

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1008	9968e36893930e68224f0afc1d7accafad9f6988db3f2da793a1264a756ba33d.exe
1008	9968e36893930e68224f0afc1d7accafad9f6988db3f2da793a1264a756ba33d.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1008	9968e36893930e68224f0afc1d7accafad9f6988db3f2da793a1264a756ba33d.exe
1008	9968e36893930e68224f0afc1d7accafad9f6988db3f2da793a1264a756ba33d.exe
1008	9968e36893930e68224f0afc1d7accafad9f6988db3f2da793a1264a756ba33d.exe
1008	9968e36893930e68224f0afc1d7accafad9f6988db3f2da793a1264a756ba33d.exe

C:\Users\Admin\AppData\Local\Temp\9968e36893930e68224f0afc1d7accafad9f6988db3f2da793a1264a756ba33d.exe
"C:\Users\Admin\AppData\Local\Temp\9968e36893930e68224f0afc1d7accafad9f6988db3f2da793a1264a756ba33d.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:1008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1008-0-0x0000000002210000-0x000000000221C000-memory.dmp

Filesize
48KB

Download