babe6c171d07d7ab6d90a17b700ca249c7310825adea591a1d1ccaf206123044 | Triage

Analysis

max time kernel
116s
max time network
143s
platform
windows10_x64
resource
win10
submitted
17-07-2020 19:34

Sharing

Report Analysis Logs

General

Target

babe6c171d07d7ab6d90a17b700ca249c7310825adea591a1d1ccaf206123044.exe
Size

276KB
MD5

7860d49308761e13d88eac8c620fdc46
SHA1

7f615911c9b23c8c3045a7b61eabb69e8693496e
SHA256

babe6c171d07d7ab6d90a17b700ca249c7310825adea591a1d1ccaf206123044
SHA512

b5c2d480cdac22a35fbdffa8a6a0ce77203e861df29c2146aed5cbdebcf59cb0a5bf0ee2ab3aff88320efe5d6dc25d1dbeadc61b221a5669667ad32dcdf8d9f8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3612	babe6c171d07d7ab6d90a17b700ca249c7310825adea591a1d1ccaf206123044.exe
3612	babe6c171d07d7ab6d90a17b700ca249c7310825adea591a1d1ccaf206123044.exe
3612	babe6c171d07d7ab6d90a17b700ca249c7310825adea591a1d1ccaf206123044.exe
3612	babe6c171d07d7ab6d90a17b700ca249c7310825adea591a1d1ccaf206123044.exe
3612	babe6c171d07d7ab6d90a17b700ca249c7310825adea591a1d1ccaf206123044.exe
3612	babe6c171d07d7ab6d90a17b700ca249c7310825adea591a1d1ccaf206123044.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3612	babe6c171d07d7ab6d90a17b700ca249c7310825adea591a1d1ccaf206123044.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3612	babe6c171d07d7ab6d90a17b700ca249c7310825adea591a1d1ccaf206123044.exe
3612	babe6c171d07d7ab6d90a17b700ca249c7310825adea591a1d1ccaf206123044.exe

C:\Users\Admin\AppData\Local\Temp\babe6c171d07d7ab6d90a17b700ca249c7310825adea591a1d1ccaf206123044.exe
"C:\Users\Admin\AppData\Local\Temp\babe6c171d07d7ab6d90a17b700ca249c7310825adea591a1d1ccaf206123044.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
- Suspicious use of SetWindowsHookEx
PID:3612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3612-0-0x00000000021E0000-0x00000000021EC000-memory.dmp

Filesize
48KB

Download
memory/3612-1-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download