44fef4ab0dfefd0b58fcd3b2b79d80719bcf0d9bd08ae232db5269d517072bf7 | Triage

Analysis

max time kernel
61s
max time network
122s
platform
windows10_x64
resource
win10
submitted
19-07-2020 03:09

Sharing

Report Analysis Logs

General

Target

44fef4ab0dfefd0b58fcd3b2b79d80719bcf0d9bd08ae232db5269d517072bf7.exe
Size

100KB
MD5

8f274fadcead6514f3fec398b20577d3
SHA1

2c9a9b9ae0b1481998b2a31e1c6167bc46d3ff43
SHA256

44fef4ab0dfefd0b58fcd3b2b79d80719bcf0d9bd08ae232db5269d517072bf7
SHA512

aed7d147ee15e204fecaa7b1145b8c2bc42890a155530768e44f56b6608ebfc3b0a536ef267de53233803261676a9805292c902554f6e520ec24d6be1dbc02c2

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4016	44fef4ab0dfefd0b58fcd3b2b79d80719bcf0d9bd08ae232db5269d517072bf7.exe
4016	44fef4ab0dfefd0b58fcd3b2b79d80719bcf0d9bd08ae232db5269d517072bf7.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4016	44fef4ab0dfefd0b58fcd3b2b79d80719bcf0d9bd08ae232db5269d517072bf7.exe
4016	44fef4ab0dfefd0b58fcd3b2b79d80719bcf0d9bd08ae232db5269d517072bf7.exe
4016	44fef4ab0dfefd0b58fcd3b2b79d80719bcf0d9bd08ae232db5269d517072bf7.exe
4016	44fef4ab0dfefd0b58fcd3b2b79d80719bcf0d9bd08ae232db5269d517072bf7.exe

C:\Users\Admin\AppData\Local\Temp\44fef4ab0dfefd0b58fcd3b2b79d80719bcf0d9bd08ae232db5269d517072bf7.exe
"C:\Users\Admin\AppData\Local\Temp\44fef4ab0dfefd0b58fcd3b2b79d80719bcf0d9bd08ae232db5269d517072bf7.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:4016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4016-0-0x0000000002210000-0x000000000221C000-memory.dmp

Filesize
48KB

Download