f5276d026037b4daa5cf7c2f279fa78ea1e558aaa6f8d55cbf2c9b5135f3455a | Triage

Analysis

max time kernel
138s
max time network
141s
platform
windows10_x64
resource
win10
submitted
17-07-2020 20:14

Sharing

Report Analysis Logs

General

Target

f5276d026037b4daa5cf7c2f279fa78ea1e558aaa6f8d55cbf2c9b5135f3455a.exe
Size

276KB
MD5

8fe301f421d204d5045ac0a319bbed1b
SHA1

9ef396b8ad82a8a238ee3d5178116caa0c8edc7a
SHA256

f5276d026037b4daa5cf7c2f279fa78ea1e558aaa6f8d55cbf2c9b5135f3455a
SHA512

4b06fa7d295e859809d733a3f99153e66aac48a0ae86740391a0cf626957b4773c8481662e5b03d9650ac43e1ff1b64284b8fd7d1a9fa43b0ea2b5853336ade3

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3676	f5276d026037b4daa5cf7c2f279fa78ea1e558aaa6f8d55cbf2c9b5135f3455a.exe
3676	f5276d026037b4daa5cf7c2f279fa78ea1e558aaa6f8d55cbf2c9b5135f3455a.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3676	f5276d026037b4daa5cf7c2f279fa78ea1e558aaa6f8d55cbf2c9b5135f3455a.exe
3676	f5276d026037b4daa5cf7c2f279fa78ea1e558aaa6f8d55cbf2c9b5135f3455a.exe
3676	f5276d026037b4daa5cf7c2f279fa78ea1e558aaa6f8d55cbf2c9b5135f3455a.exe
3676	f5276d026037b4daa5cf7c2f279fa78ea1e558aaa6f8d55cbf2c9b5135f3455a.exe
3676	f5276d026037b4daa5cf7c2f279fa78ea1e558aaa6f8d55cbf2c9b5135f3455a.exe
3676	f5276d026037b4daa5cf7c2f279fa78ea1e558aaa6f8d55cbf2c9b5135f3455a.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3676	f5276d026037b4daa5cf7c2f279fa78ea1e558aaa6f8d55cbf2c9b5135f3455a.exe

C:\Users\Admin\AppData\Local\Temp\f5276d026037b4daa5cf7c2f279fa78ea1e558aaa6f8d55cbf2c9b5135f3455a.exe
"C:\Users\Admin\AppData\Local\Temp\f5276d026037b4daa5cf7c2f279fa78ea1e558aaa6f8d55cbf2c9b5135f3455a.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3676-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download
memory/3676-1-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download