004082bee2b538cceba4107f4d1a66ab3cc300c8d45b05d783b981126c11dbf0 | Triage

Analysis

max time kernel
111s
max time network
116s
platform
windows7_x64
resource
win7
submitted
30-07-2020 10:00

Sharing

Report Analysis Logs

General

Target

________-SIGN.bin.exe
Size

916KB
MD5

bb7b63e7de3a38b40a5fd7bed0d1780d
SHA1

381489b17ecb002405ae773d39c839ae07554d7d
SHA256

6f11438f64f4be0f8adf896dabafdfc2d9739347706a4d38ab2de0adb34a02c1
SHA512

9752f152706e091d2cccae183cf9f0c2dd9d6e27af1044af2eb9a795d2f7dd8f9fbf6e207fcf944ac9f2664f395400c4432264fc7e74c5621f8dfc4df6f8dda4

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

________-SIGN.bin.exe

pid process

896 ________-SIGN.bin.exe
896 ________-SIGN.bin.exe
Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

________-SIGN.bin.exe

description pid process

Token: SeDebugPrivilege 896 ________-SIGN.bin.exe
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

________-SIGN.bin.exe

pid process

896 ________-SIGN.bin.exe

C:\Users\Admin\AppData\Local\Temp\________-SIGN.bin.exe
"C:\Users\Admin\AppData\Local\Temp\________-SIGN.bin.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of AdjustPrivilegeToken
- Suspicious behavior: GetForegroundWindowSpam
PID:896

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...