Overview

overview

10

Static

static

b1ae68a167...91.exe

windows7_x64

10

b1ae68a167...91.exe

windows10_x64

1

Analysis

  • max time kernel
    122s
  • max time network
    139s
  • platform
    windows10_x64
  • resource
    win10
  • submitted
    17-07-2020 23:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b1ae68a1677d114637a09255a9e3cffc7e4167dcb861a58fae96bd8bb1438191.exe

  • Size

    273KB

  • MD5

    ad91245771f05052ec9981b681ea28eb

  • SHA1

    332b1ce7adb2c4efab57dcbcbb4c1d43683468bf

  • SHA256

    b1ae68a1677d114637a09255a9e3cffc7e4167dcb861a58fae96bd8bb1438191

  • SHA512

    7727eb73f82e63039fa82fe295cc763e0b06f7afc2e4fc5ce5a5fcb67147783741072eddbb4376ec073532baeb0e3630bb779fc3a408cf81f8578e07a37f70de

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: EmotetMutantsSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b1ae68a1677d114637a09255a9e3cffc7e4167dcb861a58fae96bd8bb1438191.exe
    "C:\Users\Admin\AppData\Local\Temp\b1ae68a1677d114637a09255a9e3cffc7e4167dcb861a58fae96bd8bb1438191.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: EmotetMutantsSpam
    PID:3828

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3828-0-0x0000000002280000-0x000000000228C000-memory.dmp

    Filesize

    48KB

    Download

  • memory/3828-1-0x0000000000400000-0x0000000000449000-memory.dmp

    Filesize

    292KB

    Download