5abab658af69bbfb6e4b60f5d5f81b34982e93ad77389e103d14da0ac6e5b26e | Triage

Analysis

max time kernel
131s
max time network
122s
platform
windows10_x64
resource
win10
submitted
19-07-2020 12:30

Sharing

Report Analysis Logs

General

Target

5abab658af69bbfb6e4b60f5d5f81b34982e93ad77389e103d14da0ac6e5b26e.exe
Size

100KB
MD5

1394ceceda817a2a1238b0de6b7e5476
SHA1

246970669e1aa378fc0cbe654f1f30d4a08c084c
SHA256

5abab658af69bbfb6e4b60f5d5f81b34982e93ad77389e103d14da0ac6e5b26e
SHA512

30d6412c9187832a5321785318ed45e53f6d016c2d44f94eddef8ab977374e9c49070bf8e84f38de8d6af3aa70b74bf9cbec6b52c176cde94fca007747ee6d1c

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2920	5abab658af69bbfb6e4b60f5d5f81b34982e93ad77389e103d14da0ac6e5b26e.exe
2920	5abab658af69bbfb6e4b60f5d5f81b34982e93ad77389e103d14da0ac6e5b26e.exe
2920	5abab658af69bbfb6e4b60f5d5f81b34982e93ad77389e103d14da0ac6e5b26e.exe
2920	5abab658af69bbfb6e4b60f5d5f81b34982e93ad77389e103d14da0ac6e5b26e.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2920	5abab658af69bbfb6e4b60f5d5f81b34982e93ad77389e103d14da0ac6e5b26e.exe
2920	5abab658af69bbfb6e4b60f5d5f81b34982e93ad77389e103d14da0ac6e5b26e.exe

C:\Users\Admin\AppData\Local\Temp\5abab658af69bbfb6e4b60f5d5f81b34982e93ad77389e103d14da0ac6e5b26e.exe
"C:\Users\Admin\AppData\Local\Temp\5abab658af69bbfb6e4b60f5d5f81b34982e93ad77389e103d14da0ac6e5b26e.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2920-0-0x00000000022D0000-0x00000000022DC000-memory.dmp

Filesize
48KB

Download