5bff49a781e58641ccc45a82ad283658e34ac56755c95f11206a455ba3fee18b | Triage

Analysis

max time kernel
150s
max time network
147s
platform
windows10_x64
resource
win10v200430
submitted
17-07-2020 20:53

Sharing

Report Analysis Logs

General

Target

5bff49a781e58641ccc45a82ad283658e34ac56755c95f11206a455ba3fee18b.exe
Size

276KB
MD5

b95de92040a5e1fefabbe20b0ae017d0
SHA1

e816856778370b99f004458caddec23b8cd434fb
SHA256

5bff49a781e58641ccc45a82ad283658e34ac56755c95f11206a455ba3fee18b
SHA512

962c5d61bc92da085f9b587b92039204e1ffe1c45c69f88eda4604660d245e1447e2c7ceda4ae9d6129a7ff8b256e1d63a74e46ed72b5b7172a5ba076247715d

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2804	5bff49a781e58641ccc45a82ad283658e34ac56755c95f11206a455ba3fee18b.exe
2804	5bff49a781e58641ccc45a82ad283658e34ac56755c95f11206a455ba3fee18b.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2804	5bff49a781e58641ccc45a82ad283658e34ac56755c95f11206a455ba3fee18b.exe
2804	5bff49a781e58641ccc45a82ad283658e34ac56755c95f11206a455ba3fee18b.exe
2804	5bff49a781e58641ccc45a82ad283658e34ac56755c95f11206a455ba3fee18b.exe
2804	5bff49a781e58641ccc45a82ad283658e34ac56755c95f11206a455ba3fee18b.exe
2804	5bff49a781e58641ccc45a82ad283658e34ac56755c95f11206a455ba3fee18b.exe
2804	5bff49a781e58641ccc45a82ad283658e34ac56755c95f11206a455ba3fee18b.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
2804	5bff49a781e58641ccc45a82ad283658e34ac56755c95f11206a455ba3fee18b.exe

C:\Users\Admin\AppData\Local\Temp\5bff49a781e58641ccc45a82ad283658e34ac56755c95f11206a455ba3fee18b.exe
"C:\Users\Admin\AppData\Local\Temp\5bff49a781e58641ccc45a82ad283658e34ac56755c95f11206a455ba3fee18b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:2804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2804-0-0x0000000002270000-0x000000000227C000-memory.dmp

Filesize
48KB

Download
memory/2804-1-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download