4601a31c3967f95b69efe5876c9491dc5bf3c0ab3bcc93814bb32dbcb9ae90c7 | Triage

Analysis

max time kernel
146s
max time network
126s
platform
windows10_x64
resource
win10v200430
submitted
19-07-2020 03:31

Sharing

Report Analysis Logs

General

Target

4601a31c3967f95b69efe5876c9491dc5bf3c0ab3bcc93814bb32dbcb9ae90c7.exe
Size

100KB
MD5

02440e5f9aae3ca67827107f31074886
SHA1

4730ec3f09a15fc34a42bf766e284f6a69eeea49
SHA256

4601a31c3967f95b69efe5876c9491dc5bf3c0ab3bcc93814bb32dbcb9ae90c7
SHA512

b92d1e8c5be7d6fe0635e966490d54134661f394520de8046d03e73c9d93adf1e0d9325ae1a7aa75f741dce051d7b6873cc9b950418a23338ea75c053a8989ca

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3008	4601a31c3967f95b69efe5876c9491dc5bf3c0ab3bcc93814bb32dbcb9ae90c7.exe
3008	4601a31c3967f95b69efe5876c9491dc5bf3c0ab3bcc93814bb32dbcb9ae90c7.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3008	4601a31c3967f95b69efe5876c9491dc5bf3c0ab3bcc93814bb32dbcb9ae90c7.exe
3008	4601a31c3967f95b69efe5876c9491dc5bf3c0ab3bcc93814bb32dbcb9ae90c7.exe
3008	4601a31c3967f95b69efe5876c9491dc5bf3c0ab3bcc93814bb32dbcb9ae90c7.exe
3008	4601a31c3967f95b69efe5876c9491dc5bf3c0ab3bcc93814bb32dbcb9ae90c7.exe

C:\Users\Admin\AppData\Local\Temp\4601a31c3967f95b69efe5876c9491dc5bf3c0ab3bcc93814bb32dbcb9ae90c7.exe
"C:\Users\Admin\AppData\Local\Temp\4601a31c3967f95b69efe5876c9491dc5bf3c0ab3bcc93814bb32dbcb9ae90c7.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3008-0-0x0000000002210000-0x000000000221C000-memory.dmp

Filesize
48KB

Download