0d6f2041afc26bbadde2e2b5f413e9ee4fe39d552e45ab39c2a859affa5b09dc | Triage

Analysis

max time kernel
129s
max time network
128s
platform
windows10_x64
resource
win10v200430
submitted
19-07-2020 07:31

Sharing

Report Analysis Logs

General

Target

0d6f2041afc26bbadde2e2b5f413e9ee4fe39d552e45ab39c2a859affa5b09dc.exe
Size

100KB
MD5

09732c71cb1e487930fa4a5110d3db2c
SHA1

e131dd902e36ecd322aeec0b8c1728a792dafc2c
SHA256

0d6f2041afc26bbadde2e2b5f413e9ee4fe39d552e45ab39c2a859affa5b09dc
SHA512

fded1052fb8196857406571b123e38c46fc500392afe6b1f8052d3da6359280858f94072864bd80e6c0e2fc47c9e7920012d59260a67fde3e8c3e944cfaf4ebf

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1600	0d6f2041afc26bbadde2e2b5f413e9ee4fe39d552e45ab39c2a859affa5b09dc.exe
1600	0d6f2041afc26bbadde2e2b5f413e9ee4fe39d552e45ab39c2a859affa5b09dc.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1600	0d6f2041afc26bbadde2e2b5f413e9ee4fe39d552e45ab39c2a859affa5b09dc.exe
1600	0d6f2041afc26bbadde2e2b5f413e9ee4fe39d552e45ab39c2a859affa5b09dc.exe
1600	0d6f2041afc26bbadde2e2b5f413e9ee4fe39d552e45ab39c2a859affa5b09dc.exe
1600	0d6f2041afc26bbadde2e2b5f413e9ee4fe39d552e45ab39c2a859affa5b09dc.exe

C:\Users\Admin\AppData\Local\Temp\0d6f2041afc26bbadde2e2b5f413e9ee4fe39d552e45ab39c2a859affa5b09dc.exe
"C:\Users\Admin\AppData\Local\Temp\0d6f2041afc26bbadde2e2b5f413e9ee4fe39d552e45ab39c2a859affa5b09dc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:1600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1600-0-0x0000000002210000-0x000000000221C000-memory.dmp

Filesize
48KB

Download