a8017019674e46eed06e12e55aa42e9c8d776cb780e2991752a22275d300d8a1 | Triage

Analysis

max time kernel
119s
max time network
143s
platform
windows10_x64
resource
win10v200430
submitted
17-07-2020 18:07

Sharing

Report Analysis Logs

General

Target

a8017019674e46eed06e12e55aa42e9c8d776cb780e2991752a22275d300d8a1.exe
Size

276KB
MD5

bf2262b8632a5f208be9a86f2b7726bc
SHA1

14a07c45d389cfa7d6a2f4c77550e8269dd639c0
SHA256

a8017019674e46eed06e12e55aa42e9c8d776cb780e2991752a22275d300d8a1
SHA512

882bf8cf4a064f19b3377b98764bdaea679944e3efe0f23334d1d8b616c04f90004bd4e9e45506cdfc79e693dd644cdafd4826627af91fd367bc2a779d125f71

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1520	a8017019674e46eed06e12e55aa42e9c8d776cb780e2991752a22275d300d8a1.exe
1520	a8017019674e46eed06e12e55aa42e9c8d776cb780e2991752a22275d300d8a1.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1520	a8017019674e46eed06e12e55aa42e9c8d776cb780e2991752a22275d300d8a1.exe
1520	a8017019674e46eed06e12e55aa42e9c8d776cb780e2991752a22275d300d8a1.exe
1520	a8017019674e46eed06e12e55aa42e9c8d776cb780e2991752a22275d300d8a1.exe
1520	a8017019674e46eed06e12e55aa42e9c8d776cb780e2991752a22275d300d8a1.exe
1520	a8017019674e46eed06e12e55aa42e9c8d776cb780e2991752a22275d300d8a1.exe
1520	a8017019674e46eed06e12e55aa42e9c8d776cb780e2991752a22275d300d8a1.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
1520	a8017019674e46eed06e12e55aa42e9c8d776cb780e2991752a22275d300d8a1.exe

C:\Users\Admin\AppData\Local\Temp\a8017019674e46eed06e12e55aa42e9c8d776cb780e2991752a22275d300d8a1.exe
"C:\Users\Admin\AppData\Local\Temp\a8017019674e46eed06e12e55aa42e9c8d776cb780e2991752a22275d300d8a1.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:1520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1520-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download
memory/1520-1-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download