Overview

overview

10

Static

static

cd5ab4f688...c7.exe

windows7_x64

10

cd5ab4f688...c7.exe

windows10_x64

1

Analysis

  • max time kernel
    127s
  • max time network
    150s
  • platform
    windows10_x64
  • resource
    win10v200430
  • submitted
    17-07-2020 19:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cd5ab4f6885cb941595f5415f464ee0d586ac51f825b35bf74cc68e56465fdc7.exe

  • Size

    276KB

  • MD5

    31d8159d592087c51c8a9b5f42317bd6

  • SHA1

    8d3e428684924c7c93cf9c3a0cefeca7d6b56d51

  • SHA256

    cd5ab4f6885cb941595f5415f464ee0d586ac51f825b35bf74cc68e56465fdc7

  • SHA512

    f4cdf6bd9b3d4a824be68091f36b97cfe780326e96f0f6fbdeab4e38d39f8a5e4a87cd327c891056b7e89f9b64cb81a51ed18b30a94bf2cec774a38473d06b04

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 28 IoCs
  • Suspicious behavior: EmotetMutantsSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cd5ab4f6885cb941595f5415f464ee0d586ac51f825b35bf74cc68e56465fdc7.exe
    "C:\Users\Admin\AppData\Local\Temp\cd5ab4f6885cb941595f5415f464ee0d586ac51f825b35bf74cc68e56465fdc7.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: EmotetMutantsSpam
    PID:1564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1564-0-0x0000000002260000-0x000000000226C000-memory.dmp

    Filesize

    48KB

    Download

  • memory/1564-1-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

    Download