a55265b3cd864163701ee0150d59e601dcd196f42e623c6d8c58a16327701127 | Triage

Analysis

max time kernel
139s
max time network
140s
platform
windows10_x64
resource
win10
submitted
19-07-2020 11:39

Sharing

Report Analysis Logs

General

Target

a55265b3cd864163701ee0150d59e601dcd196f42e623c6d8c58a16327701127.exe
Size

100KB
MD5

30c9d2bf0f6a334d5e95d5470ac13442
SHA1

582b20bb613352e7db76c854ff1d97b53b0d7c0e
SHA256

a55265b3cd864163701ee0150d59e601dcd196f42e623c6d8c58a16327701127
SHA512

523966e7501cb0c337a93cc044eb9b162d890ba69ed53539f72f1a02408b3da3336e0e1705faa43b4e877b2761f5e69e7a71ad48443b097b3596664554b57e82

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3372	a55265b3cd864163701ee0150d59e601dcd196f42e623c6d8c58a16327701127.exe
3372	a55265b3cd864163701ee0150d59e601dcd196f42e623c6d8c58a16327701127.exe
3372	a55265b3cd864163701ee0150d59e601dcd196f42e623c6d8c58a16327701127.exe
3372	a55265b3cd864163701ee0150d59e601dcd196f42e623c6d8c58a16327701127.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3372	a55265b3cd864163701ee0150d59e601dcd196f42e623c6d8c58a16327701127.exe
3372	a55265b3cd864163701ee0150d59e601dcd196f42e623c6d8c58a16327701127.exe

C:\Users\Admin\AppData\Local\Temp\a55265b3cd864163701ee0150d59e601dcd196f42e623c6d8c58a16327701127.exe
"C:\Users\Admin\AppData\Local\Temp\a55265b3cd864163701ee0150d59e601dcd196f42e623c6d8c58a16327701127.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3372-0-0x00000000038E0000-0x00000000038EC000-memory.dmp

Filesize
48KB

Download