Analysis

  • max time kernel
    143s
  • max time network
    147s
  • platform
    windows10_x64
  • resource
    win10v200430
  • submitted
    17-07-2020 20:32

General

  • Target

    6de2cc02e3ae7bb195dbef03b437a141b1db66c25631289cc79b4b5715715fc5.exe

  • Size

    276KB

  • MD5

    2de633046116babc2bc4c53e4e71ebcc

  • SHA1

    be0d1fdfe4d948f6cc0c64279b13e1f5ef979990

  • SHA256

    6de2cc02e3ae7bb195dbef03b437a141b1db66c25631289cc79b4b5715715fc5

  • SHA512

    895672a051c0fb3b604223b68e82832d616ed5fc6b5bdb69de4ad9789e9643e2006b216e27f0383bdb08dd2f8db26f0107535ad38dad169b78d91d20cc1a8e60

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: EmotetMutantsSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6de2cc02e3ae7bb195dbef03b437a141b1db66c25631289cc79b4b5715715fc5.exe
    "C:\Users\Admin\AppData\Local\Temp\6de2cc02e3ae7bb195dbef03b437a141b1db66c25631289cc79b4b5715715fc5.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: EmotetMutantsSpam
    PID:3824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3824-0-0x00000000021D0000-0x00000000021DC000-memory.dmp
    Filesize

    48KB

  • memory/3824-1-0x0000000000400000-0x0000000000448000-memory.dmp
    Filesize

    288KB