9ccb4ed133be5c9c554027347ad8b722f0b4c3f14bfd947edfe75a015bf085e5 | Triage™

Analysis

max time kernel
23s
max time network
145s
platform
windows10_x64
resource
win10v200722
submitted
14/10/2020, 14:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9ccb4ed133be5c9c554027347ad8b722f0b4c3f14bfd947edfe75a015bf085e5.exe
Size 899KB
Sample201014-vam3l6wsl2
SHA256 9ccb4ed133be5c9c554027347ad8b722f0b4c3f14bfd947edfe75a015bf085e5
MD5 95504605bf08d6ffa7c58350cce56478
SHA1 588f6b5a18943f19f6ac334c2b27b829321e1c1a
SHA512 8f621c5f56186c41197f65b91d42c6289dc8254531a39e30a88fcc5c29d7129fb1865745c63c8dec3192f630d9c162c3b8cbce7d046cdc23e6b4433811e96d73
MD5 SHA1 SHA512

Score

8^/10

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
2620	flash.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2620	flash.exe
2620	flash.exe
2620	flash.exe
2620	flash.exe

C:\Users\Admin\AppData\Local\Temp\9ccb4ed133be5c9c554027347ad8b722f0b4c3f14bfd947edfe75a015bf085e5.exe
"C:\Users\Admin\AppData\Local\Temp\9ccb4ed133be5c9c554027347ad8b722f0b4c3f14bfd947edfe75a015bf085e5.exe"
1⤵
PID:532

C:\Users\Admin\AppData\Local\Temp\flash.exe
"C:\Users\Admin\AppData\Local\Temp\flash.exe"
1⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:2620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/532-0-0x00000279933A0000-0x00000279934A1000-memory.dmp

Download