5c79085d1fe26fe4c8d11a8fa232bd6904ef4c1ed42e2d8895869df6a3d68fef | Triage

Analysis

max time kernel
120s
max time network
145s
platform
windows10_x64
resource
win10
submitted
17-07-2020 19:55

Sharing

Report Analysis Logs

General

Target

5c79085d1fe26fe4c8d11a8fa232bd6904ef4c1ed42e2d8895869df6a3d68fef.exe
Size

276KB
MD5

2a00cbd14f73c9c9b80035fdf1318ffb
SHA1

1353e966ec46606e49f0f5d18df11ba6de1513a8
SHA256

5c79085d1fe26fe4c8d11a8fa232bd6904ef4c1ed42e2d8895869df6a3d68fef
SHA512

d8bee4c4f997880ac991527eb6a0fe8d48889d95fff87fa81c5abcfb9fc19ecfc05a7ab151d55631c8c0a4004d92e49cf96cce22e49a564705dceb28d6cbf399

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3372	5c79085d1fe26fe4c8d11a8fa232bd6904ef4c1ed42e2d8895869df6a3d68fef.exe
3372	5c79085d1fe26fe4c8d11a8fa232bd6904ef4c1ed42e2d8895869df6a3d68fef.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3372	5c79085d1fe26fe4c8d11a8fa232bd6904ef4c1ed42e2d8895869df6a3d68fef.exe
3372	5c79085d1fe26fe4c8d11a8fa232bd6904ef4c1ed42e2d8895869df6a3d68fef.exe
3372	5c79085d1fe26fe4c8d11a8fa232bd6904ef4c1ed42e2d8895869df6a3d68fef.exe
3372	5c79085d1fe26fe4c8d11a8fa232bd6904ef4c1ed42e2d8895869df6a3d68fef.exe
3372	5c79085d1fe26fe4c8d11a8fa232bd6904ef4c1ed42e2d8895869df6a3d68fef.exe
3372	5c79085d1fe26fe4c8d11a8fa232bd6904ef4c1ed42e2d8895869df6a3d68fef.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3372	5c79085d1fe26fe4c8d11a8fa232bd6904ef4c1ed42e2d8895869df6a3d68fef.exe

C:\Users\Admin\AppData\Local\Temp\5c79085d1fe26fe4c8d11a8fa232bd6904ef4c1ed42e2d8895869df6a3d68fef.exe
"C:\Users\Admin\AppData\Local\Temp\5c79085d1fe26fe4c8d11a8fa232bd6904ef4c1ed42e2d8895869df6a3d68fef.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3372-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download
memory/3372-1-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download