f408fc8551cd7c491377b53011188771319df90bb96fb2163ba933b346690c51 | Triage

Analysis

max time kernel
136s
max time network
149s
platform
windows10_x64
resource
win10v200430
submitted
17-07-2020 21:33

Sharing

Report Analysis Logs

General

Target

f408fc8551cd7c491377b53011188771319df90bb96fb2163ba933b346690c51.exe
Size

276KB
MD5

7fb20d3b937b6dba97ed1b6fae51ce98
SHA1

6aacbb1f9eacc14d09a8096856e922f518c558b5
SHA256

f408fc8551cd7c491377b53011188771319df90bb96fb2163ba933b346690c51
SHA512

f578abc0d670691e1a55eb50e8a31bcc2bc6501113c739476af3588550734cd3680ff89e1e88f3d2d2baa0591d07b0f6c50d59020cd1f8c60f2a78fd2ebeb5d0

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1616	f408fc8551cd7c491377b53011188771319df90bb96fb2163ba933b346690c51.exe
1616	f408fc8551cd7c491377b53011188771319df90bb96fb2163ba933b346690c51.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1616	f408fc8551cd7c491377b53011188771319df90bb96fb2163ba933b346690c51.exe
1616	f408fc8551cd7c491377b53011188771319df90bb96fb2163ba933b346690c51.exe
1616	f408fc8551cd7c491377b53011188771319df90bb96fb2163ba933b346690c51.exe
1616	f408fc8551cd7c491377b53011188771319df90bb96fb2163ba933b346690c51.exe
1616	f408fc8551cd7c491377b53011188771319df90bb96fb2163ba933b346690c51.exe
1616	f408fc8551cd7c491377b53011188771319df90bb96fb2163ba933b346690c51.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
1616	f408fc8551cd7c491377b53011188771319df90bb96fb2163ba933b346690c51.exe

C:\Users\Admin\AppData\Local\Temp\f408fc8551cd7c491377b53011188771319df90bb96fb2163ba933b346690c51.exe
"C:\Users\Admin\AppData\Local\Temp\f408fc8551cd7c491377b53011188771319df90bb96fb2163ba933b346690c51.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:1616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1616-0-0x0000000002320000-0x000000000232C000-memory.dmp

Filesize
48KB

Download
memory/1616-1-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download