dc7ab9dc53d0981388cce0c7bc104068642295e4a6e76bf2792f9ca7a44abbe5 | Triage

Analysis

max time kernel
74s
max time network
148s
platform
windows10_x64
resource
win10
submitted
17-07-2020 20:08

Sharing

Report Analysis Logs

General

Target

dc7ab9dc53d0981388cce0c7bc104068642295e4a6e76bf2792f9ca7a44abbe5.exe
Size

276KB
MD5

2afd2bde2de7c3863049f29d9ab9824c
SHA1

89c764a2c049e5728635db8d78b6fa0d59c3a8c3
SHA256

dc7ab9dc53d0981388cce0c7bc104068642295e4a6e76bf2792f9ca7a44abbe5
SHA512

5a15e9fd37485ee8523c942ba9bf42f5b65bc62a88a571e06981e19bd45412e0b1150c06b90f3c2323ce5738f51cbc084003966d8963a80c762bdc23b348a099

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3036	dc7ab9dc53d0981388cce0c7bc104068642295e4a6e76bf2792f9ca7a44abbe5.exe
3036	dc7ab9dc53d0981388cce0c7bc104068642295e4a6e76bf2792f9ca7a44abbe5.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3036	dc7ab9dc53d0981388cce0c7bc104068642295e4a6e76bf2792f9ca7a44abbe5.exe
3036	dc7ab9dc53d0981388cce0c7bc104068642295e4a6e76bf2792f9ca7a44abbe5.exe
3036	dc7ab9dc53d0981388cce0c7bc104068642295e4a6e76bf2792f9ca7a44abbe5.exe
3036	dc7ab9dc53d0981388cce0c7bc104068642295e4a6e76bf2792f9ca7a44abbe5.exe
3036	dc7ab9dc53d0981388cce0c7bc104068642295e4a6e76bf2792f9ca7a44abbe5.exe
3036	dc7ab9dc53d0981388cce0c7bc104068642295e4a6e76bf2792f9ca7a44abbe5.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3036	dc7ab9dc53d0981388cce0c7bc104068642295e4a6e76bf2792f9ca7a44abbe5.exe

C:\Users\Admin\AppData\Local\Temp\dc7ab9dc53d0981388cce0c7bc104068642295e4a6e76bf2792f9ca7a44abbe5.exe
"C:\Users\Admin\AppData\Local\Temp\dc7ab9dc53d0981388cce0c7bc104068642295e4a6e76bf2792f9ca7a44abbe5.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3036-0-0x0000000002260000-0x000000000226C000-memory.dmp

Filesize
48KB

Download
memory/3036-1-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download