797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04 | Triage

Analysis

max time kernel
122s
max time network
142s
platform
windows10_x64
resource
win10
submitted
17-07-2020 20:36

Sharing

Report Analysis Logs

General

Target

797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
Size

276KB
MD5

bb4963e6aecbcd37b4e1b1dd5b9eec09
SHA1

724207ae89dba8d54a9197c70f19aa817213b78c
SHA256

797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04
SHA512

4ca90022983041d935870519b628042100be21afb8ce367948084a89cf88e6806c884d22e5108ba86bd6cb147ab37f019b2a1f6b727dc7de207020a473d06fd4

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe

Suspicious behavior: EnumeratesProcesses 18 IoCs

pid	Process
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
976	797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe

C:\Users\Admin\AppData\Local\Temp\797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe
"C:\Users\Admin\AppData\Local\Temp\797301366c2d54ee64e2e5f77f31873cfe4e74bfd6e5650eb6b8232632db0b04.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/976-0-0x00000000021D0000-0x00000000021DC000-memory.dmp

Filesize
48KB

Download
memory/976-1-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download