5ddcdfa95ca2a4c145f5d5570cb9497eaf089e8e51afcc66a5dfd9ec7a11675a | Triage

Analysis

max time kernel
138s
max time network
145s
platform
windows10_x64
resource
win10v200430
submitted
17-07-2020 22:45

Sharing

Report Analysis Logs

General

Target

5ddcdfa95ca2a4c145f5d5570cb9497eaf089e8e51afcc66a5dfd9ec7a11675a.exe
Size

273KB
MD5

e4ef084c89511823e67eb64b7a5a36ce
SHA1

0d56fe2b0549a4db1d89e1b577118ca89d7585d9
SHA256

5ddcdfa95ca2a4c145f5d5570cb9497eaf089e8e51afcc66a5dfd9ec7a11675a
SHA512

f58470b5c086ffa0c50e559fa9f5bec050f45975dd4f1436cd82f4ad35bdbbf7605f8bd742b294ad3ff98acc24f0b903916116587378a884360bf48171df1272

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
988	5ddcdfa95ca2a4c145f5d5570cb9497eaf089e8e51afcc66a5dfd9ec7a11675a.exe
988	5ddcdfa95ca2a4c145f5d5570cb9497eaf089e8e51afcc66a5dfd9ec7a11675a.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
988	5ddcdfa95ca2a4c145f5d5570cb9497eaf089e8e51afcc66a5dfd9ec7a11675a.exe
988	5ddcdfa95ca2a4c145f5d5570cb9497eaf089e8e51afcc66a5dfd9ec7a11675a.exe
988	5ddcdfa95ca2a4c145f5d5570cb9497eaf089e8e51afcc66a5dfd9ec7a11675a.exe
988	5ddcdfa95ca2a4c145f5d5570cb9497eaf089e8e51afcc66a5dfd9ec7a11675a.exe
988	5ddcdfa95ca2a4c145f5d5570cb9497eaf089e8e51afcc66a5dfd9ec7a11675a.exe
988	5ddcdfa95ca2a4c145f5d5570cb9497eaf089e8e51afcc66a5dfd9ec7a11675a.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
988	5ddcdfa95ca2a4c145f5d5570cb9497eaf089e8e51afcc66a5dfd9ec7a11675a.exe

C:\Users\Admin\AppData\Local\Temp\5ddcdfa95ca2a4c145f5d5570cb9497eaf089e8e51afcc66a5dfd9ec7a11675a.exe
"C:\Users\Admin\AppData\Local\Temp\5ddcdfa95ca2a4c145f5d5570cb9497eaf089e8e51afcc66a5dfd9ec7a11675a.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/988-0-0x0000000002320000-0x000000000232C000-memory.dmp

Filesize
48KB

Download
memory/988-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download