5957b79fee61901e07b66928f783b25a2c58ff724319bd595978e9dbefa1e623 | Triage

Analysis

max time kernel
134s
max time network
125s
platform
windows10_x64
resource
win10v200430
submitted
19-07-2020 05:11

Sharing

Report Analysis Logs

General

Target

5957b79fee61901e07b66928f783b25a2c58ff724319bd595978e9dbefa1e623.exe
Size

100KB
MD5

daf944771717d86d4358b393663be16f
SHA1

4ffe7b945261c0dd7b691ef8e5104816556d6be7
SHA256

5957b79fee61901e07b66928f783b25a2c58ff724319bd595978e9dbefa1e623
SHA512

bf604d82fcc0ea1ff370627844d44e0673f29dae6d735c1f318913dbbf071c30531380cce702a55b9f5957a4eee723ec9ef6f414a4765df316f979dc3f51c7e4

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
896	5957b79fee61901e07b66928f783b25a2c58ff724319bd595978e9dbefa1e623.exe
896	5957b79fee61901e07b66928f783b25a2c58ff724319bd595978e9dbefa1e623.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
896	5957b79fee61901e07b66928f783b25a2c58ff724319bd595978e9dbefa1e623.exe
896	5957b79fee61901e07b66928f783b25a2c58ff724319bd595978e9dbefa1e623.exe
896	5957b79fee61901e07b66928f783b25a2c58ff724319bd595978e9dbefa1e623.exe
896	5957b79fee61901e07b66928f783b25a2c58ff724319bd595978e9dbefa1e623.exe

C:\Users\Admin\AppData\Local\Temp\5957b79fee61901e07b66928f783b25a2c58ff724319bd595978e9dbefa1e623.exe
"C:\Users\Admin\AppData\Local\Temp\5957b79fee61901e07b66928f783b25a2c58ff724319bd595978e9dbefa1e623.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/896-0-0x00000000022D0000-0x00000000022DC000-memory.dmp

Filesize
48KB

Download