aab919214ebecd4a81f2d890e17d4fca47ac7cf237da5e5a8f6f3da42b2e753a | Triage

Analysis

max time kernel
128s
max time network
146s
platform
windows10_x64
resource
win10
submitted
17-07-2020 23:31

Sharing

Report Analysis Logs

General

Target

aab919214ebecd4a81f2d890e17d4fca47ac7cf237da5e5a8f6f3da42b2e753a.exe
Size

273KB
MD5

d74f671b63a79461a4068c31410200ef
SHA1

41a97ac494548d3c3e716906f65383dae86cfd4a
SHA256

aab919214ebecd4a81f2d890e17d4fca47ac7cf237da5e5a8f6f3da42b2e753a
SHA512

763d7e599b8cfeedb80d816ab7a22e3ace722b85e1a8d4d4f8c0d38de31c17b20a966b33f2d265a7fd69b94ae3d2e670ca7cbc94fa3d51cc2cab4cf6e7887b56

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3780	aab919214ebecd4a81f2d890e17d4fca47ac7cf237da5e5a8f6f3da42b2e753a.exe
3780	aab919214ebecd4a81f2d890e17d4fca47ac7cf237da5e5a8f6f3da42b2e753a.exe
3780	aab919214ebecd4a81f2d890e17d4fca47ac7cf237da5e5a8f6f3da42b2e753a.exe
3780	aab919214ebecd4a81f2d890e17d4fca47ac7cf237da5e5a8f6f3da42b2e753a.exe
3780	aab919214ebecd4a81f2d890e17d4fca47ac7cf237da5e5a8f6f3da42b2e753a.exe
3780	aab919214ebecd4a81f2d890e17d4fca47ac7cf237da5e5a8f6f3da42b2e753a.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3780	aab919214ebecd4a81f2d890e17d4fca47ac7cf237da5e5a8f6f3da42b2e753a.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3780	aab919214ebecd4a81f2d890e17d4fca47ac7cf237da5e5a8f6f3da42b2e753a.exe
3780	aab919214ebecd4a81f2d890e17d4fca47ac7cf237da5e5a8f6f3da42b2e753a.exe

C:\Users\Admin\AppData\Local\Temp\aab919214ebecd4a81f2d890e17d4fca47ac7cf237da5e5a8f6f3da42b2e753a.exe
"C:\Users\Admin\AppData\Local\Temp\aab919214ebecd4a81f2d890e17d4fca47ac7cf237da5e5a8f6f3da42b2e753a.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
- Suspicious use of SetWindowsHookEx
PID:3780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3780-0-0x0000000002460000-0x000000000246C000-memory.dmp

Filesize
48KB

Download
memory/3780-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download