6a3131b719f6687d8d51316dc8fd7ec2eb5bda66eca9220f66d0c1b0853d470c | Triage™

Analysis

max time kernel
125s
max time network
128s
platform
windows10_x64
resource
win10
submitted
06/10/2020, 05:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
RFQ documents for 250 KTA VCM PLANT and 250 KTA PVC EXPANSION.exe
Size 64KB
Sample201006-sgernrrfj6
SHA256 6a3131b719f6687d8d51316dc8fd7ec2eb5bda66eca9220f66d0c1b0853d470c
MD5 437e9f115bd3c2badcea029764c761fc
SHA1 fa95455197021e97d00a91d7b95c4e810300623d
SHA512 c88450628bee5ec1c29d5283e03edeaf7ba5b432d4180c57995220f0da7c2d2996419f89501149dec205a49b6eede06878b715423c80bc0ea707ab3ae140f78f
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1756	RFQ documents for 250 KTA VCM PLANT and 250 KTA PVC EXPANSION.exe

C:\Users\Admin\AppData\Local\Temp\RFQ documents for 250 KTA VCM PLANT and 250 KTA PVC EXPANSION.exe
"C:\Users\Admin\AppData\Local\Temp\RFQ documents for 250 KTA VCM PLANT and 250 KTA PVC EXPANSION.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads