584aca5f619dacbc8dfa0f969b42a7ee3a04c6627730b25e92294fe4d6256fe3 | Triage

Analysis

max time kernel
69s
max time network
122s
platform
windows10_x64
resource
win10
submitted
19-07-2020 05:55

Sharing

Report Analysis Logs

General

Target

584aca5f619dacbc8dfa0f969b42a7ee3a04c6627730b25e92294fe4d6256fe3.exe
Size

100KB
MD5

bf9ff615906ace269a79ab8de199b29d
SHA1

269dbf7c2a8d966530b65684390a7c7daeb569b7
SHA256

584aca5f619dacbc8dfa0f969b42a7ee3a04c6627730b25e92294fe4d6256fe3
SHA512

41eccc5e21e2cadca861ccf82f0d2632d9bdc65ef1d27e73b47f50b57ca6c61ad53b3321a7ebffc6b22bd52c699935cee84a57b2e7bd82fffd7319483b562243

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3100	584aca5f619dacbc8dfa0f969b42a7ee3a04c6627730b25e92294fe4d6256fe3.exe
3100	584aca5f619dacbc8dfa0f969b42a7ee3a04c6627730b25e92294fe4d6256fe3.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3100	584aca5f619dacbc8dfa0f969b42a7ee3a04c6627730b25e92294fe4d6256fe3.exe
3100	584aca5f619dacbc8dfa0f969b42a7ee3a04c6627730b25e92294fe4d6256fe3.exe
3100	584aca5f619dacbc8dfa0f969b42a7ee3a04c6627730b25e92294fe4d6256fe3.exe
3100	584aca5f619dacbc8dfa0f969b42a7ee3a04c6627730b25e92294fe4d6256fe3.exe

C:\Users\Admin\AppData\Local\Temp\584aca5f619dacbc8dfa0f969b42a7ee3a04c6627730b25e92294fe4d6256fe3.exe
"C:\Users\Admin\AppData\Local\Temp\584aca5f619dacbc8dfa0f969b42a7ee3a04c6627730b25e92294fe4d6256fe3.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:3100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3100-0-0x00000000022D0000-0x00000000022DC000-memory.dmp

Filesize
48KB

Download