dbb13d5ba9035eae079381836a890ceb57962093a3104ba086bfe5d9b9afd3be | Triage

Analysis

max time kernel
120s
max time network
141s
platform
windows10_x64
resource
win10
submitted
17-07-2020 23:46

Sharing

Report Analysis Logs

General

Target

dbb13d5ba9035eae079381836a890ceb57962093a3104ba086bfe5d9b9afd3be.exe
Size

273KB
MD5

e99e919af4ec6a891b69de3300aba54a
SHA1

8babdca2db658fcd98851c63bc847d88bcd1d276
SHA256

dbb13d5ba9035eae079381836a890ceb57962093a3104ba086bfe5d9b9afd3be
SHA512

1afaf1babda62ab58aea4a80460980e70b5385bc4be622d2370374e28b3343bf7ca9af6e145b42a545118539ef4be17a3275f922fd598e17e9509891d088a9d2

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3932	dbb13d5ba9035eae079381836a890ceb57962093a3104ba086bfe5d9b9afd3be.exe
3932	dbb13d5ba9035eae079381836a890ceb57962093a3104ba086bfe5d9b9afd3be.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3932	dbb13d5ba9035eae079381836a890ceb57962093a3104ba086bfe5d9b9afd3be.exe
3932	dbb13d5ba9035eae079381836a890ceb57962093a3104ba086bfe5d9b9afd3be.exe
3932	dbb13d5ba9035eae079381836a890ceb57962093a3104ba086bfe5d9b9afd3be.exe
3932	dbb13d5ba9035eae079381836a890ceb57962093a3104ba086bfe5d9b9afd3be.exe
3932	dbb13d5ba9035eae079381836a890ceb57962093a3104ba086bfe5d9b9afd3be.exe
3932	dbb13d5ba9035eae079381836a890ceb57962093a3104ba086bfe5d9b9afd3be.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3932	dbb13d5ba9035eae079381836a890ceb57962093a3104ba086bfe5d9b9afd3be.exe

C:\Users\Admin\AppData\Local\Temp\dbb13d5ba9035eae079381836a890ceb57962093a3104ba086bfe5d9b9afd3be.exe
"C:\Users\Admin\AppData\Local\Temp\dbb13d5ba9035eae079381836a890ceb57962093a3104ba086bfe5d9b9afd3be.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3932-0-0x0000000002260000-0x000000000226C000-memory.dmp

Filesize
48KB

Download
memory/3932-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download