Overview

overview

10

Static

static

418d48e099...24.exe

windows7_x64

10

418d48e099...24.exe

windows10_x64

1

Analysis

  • max time kernel
    138s
  • max time network
    150s
  • platform
    windows10_x64
  • resource
    win10v200430
  • submitted
    17/07/2020, 20:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    418d48e099eb5ef68b9724786d8b2eebec25026284cb129cc0a31f50ef3d9924.exe

  • Size

    276KB

  • MD5

    b341c013bee9933a19d91489fb174e6c

  • SHA1

    a3c6f8928af912bf108805966a0b67a767afac5c

  • SHA256

    418d48e099eb5ef68b9724786d8b2eebec25026284cb129cc0a31f50ef3d9924

  • SHA512

    9ba1f90faf0759dbc7a2212a4a1304e2c6bacf38fb7d085a2720567157b218cfa574fa9e498522b790adeff86afdf990610e82da404f79c1c1147d6c74f727f2

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: EmotetMutantsSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\418d48e099eb5ef68b9724786d8b2eebec25026284cb129cc0a31f50ef3d9924.exe
    "C:\Users\Admin\AppData\Local\Temp\418d48e099eb5ef68b9724786d8b2eebec25026284cb129cc0a31f50ef3d9924.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: EmotetMutantsSpam
    PID:2904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2904-0-0x00000000021D0000-0x00000000021DC000-memory.dmp

    Filesize

    48KB

    Download

  • memory/2904-1-0x0000000000400000-0x0000000000448000-memory.dmp

    Filesize

    288KB

    Download