6dc5dc5060bb64132cf4c64bf441c738ca5a01edfe7ec452fba704d8da2374fc | Triage

Analysis

max time kernel
142s
max time network
126s
platform
windows10_x64
resource
win10v200430
submitted
19-07-2020 00:04

Sharing

Report Analysis Logs

General

Target

6dc5dc5060bb64132cf4c64bf441c738ca5a01edfe7ec452fba704d8da2374fc.exe
Size

100KB
MD5

d54deead9972c1796bf1f6fa9dede2f4
SHA1

1a09b842e0ce4eb39d2503f46162813641a28bef
SHA256

6dc5dc5060bb64132cf4c64bf441c738ca5a01edfe7ec452fba704d8da2374fc
SHA512

ba0b3c7cb8a92f5d821c0097bcd458b03ffa432bfcd830920a3cdc19d45f4da6b0e05477460316df37c7a0f0998aab3c9cdf6aa90319b5eeb7738d3e58e8193d

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
968	6dc5dc5060bb64132cf4c64bf441c738ca5a01edfe7ec452fba704d8da2374fc.exe
968	6dc5dc5060bb64132cf4c64bf441c738ca5a01edfe7ec452fba704d8da2374fc.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
968	6dc5dc5060bb64132cf4c64bf441c738ca5a01edfe7ec452fba704d8da2374fc.exe
968	6dc5dc5060bb64132cf4c64bf441c738ca5a01edfe7ec452fba704d8da2374fc.exe
968	6dc5dc5060bb64132cf4c64bf441c738ca5a01edfe7ec452fba704d8da2374fc.exe
968	6dc5dc5060bb64132cf4c64bf441c738ca5a01edfe7ec452fba704d8da2374fc.exe

C:\Users\Admin\AppData\Local\Temp\6dc5dc5060bb64132cf4c64bf441c738ca5a01edfe7ec452fba704d8da2374fc.exe
"C:\Users\Admin\AppData\Local\Temp\6dc5dc5060bb64132cf4c64bf441c738ca5a01edfe7ec452fba704d8da2374fc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/968-0-0x00000000022E0000-0x00000000022EC000-memory.dmp

Filesize
48KB

Download