def1a4c9e1226b08750058737430c4665f1cc7c53dd141b765f5cc718b12b30a | Triage

Analysis

max time kernel
69s
max time network
143s
platform
windows10_x64
resource
win10
submitted
17-07-2020 21:57

Sharing

Report Analysis Logs

General

Target

def1a4c9e1226b08750058737430c4665f1cc7c53dd141b765f5cc718b12b30a.exe
Size

276KB
MD5

6172648e569ecf4b80fcab4eb31ccab5
SHA1

659b87d16f85d02b1a1b1ce1707b54432cdccc9a
SHA256

def1a4c9e1226b08750058737430c4665f1cc7c53dd141b765f5cc718b12b30a
SHA512

6bf6bf6d177ecf8a9cedc184358065afaa5a0b2e2b9f6978f5fc9225c75ee719c05d6e293082379d688516bc2864c8f7f9f221d151ef6a01f673965b27b1dc35

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3100	def1a4c9e1226b08750058737430c4665f1cc7c53dd141b765f5cc718b12b30a.exe
3100	def1a4c9e1226b08750058737430c4665f1cc7c53dd141b765f5cc718b12b30a.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3100	def1a4c9e1226b08750058737430c4665f1cc7c53dd141b765f5cc718b12b30a.exe
3100	def1a4c9e1226b08750058737430c4665f1cc7c53dd141b765f5cc718b12b30a.exe
3100	def1a4c9e1226b08750058737430c4665f1cc7c53dd141b765f5cc718b12b30a.exe
3100	def1a4c9e1226b08750058737430c4665f1cc7c53dd141b765f5cc718b12b30a.exe
3100	def1a4c9e1226b08750058737430c4665f1cc7c53dd141b765f5cc718b12b30a.exe
3100	def1a4c9e1226b08750058737430c4665f1cc7c53dd141b765f5cc718b12b30a.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3100	def1a4c9e1226b08750058737430c4665f1cc7c53dd141b765f5cc718b12b30a.exe

C:\Users\Admin\AppData\Local\Temp\def1a4c9e1226b08750058737430c4665f1cc7c53dd141b765f5cc718b12b30a.exe
"C:\Users\Admin\AppData\Local\Temp\def1a4c9e1226b08750058737430c4665f1cc7c53dd141b765f5cc718b12b30a.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3100-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download
memory/3100-1-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download