ef38ca451d87a8e435a3314cbe8122ddafaf1f98cfeab2a29534627cba62e803 | Triage

Analysis

max time kernel
119s
max time network
145s
platform
windows10_x64
resource
win10
submitted
17-07-2020 21:27

Sharing

Report Analysis Logs

General

Target

ef38ca451d87a8e435a3314cbe8122ddafaf1f98cfeab2a29534627cba62e803.exe
Size

276KB
MD5

baac9035652af406e8643a3d4e0f40bd
SHA1

36c2a37635088a030429d8bc1c746c8e1686afd5
SHA256

ef38ca451d87a8e435a3314cbe8122ddafaf1f98cfeab2a29534627cba62e803
SHA512

8177481ac1a5714f3e53eca70cfbc78846dee964d33fdd49fb79f603483e8396b490a1f8718a3636bf95a02406fa5dbb38b61fd994fd8bde155c92ec2064a0b2

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3612	ef38ca451d87a8e435a3314cbe8122ddafaf1f98cfeab2a29534627cba62e803.exe
3612	ef38ca451d87a8e435a3314cbe8122ddafaf1f98cfeab2a29534627cba62e803.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3612	ef38ca451d87a8e435a3314cbe8122ddafaf1f98cfeab2a29534627cba62e803.exe
3612	ef38ca451d87a8e435a3314cbe8122ddafaf1f98cfeab2a29534627cba62e803.exe
3612	ef38ca451d87a8e435a3314cbe8122ddafaf1f98cfeab2a29534627cba62e803.exe
3612	ef38ca451d87a8e435a3314cbe8122ddafaf1f98cfeab2a29534627cba62e803.exe
3612	ef38ca451d87a8e435a3314cbe8122ddafaf1f98cfeab2a29534627cba62e803.exe
3612	ef38ca451d87a8e435a3314cbe8122ddafaf1f98cfeab2a29534627cba62e803.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3612	ef38ca451d87a8e435a3314cbe8122ddafaf1f98cfeab2a29534627cba62e803.exe

C:\Users\Admin\AppData\Local\Temp\ef38ca451d87a8e435a3314cbe8122ddafaf1f98cfeab2a29534627cba62e803.exe
"C:\Users\Admin\AppData\Local\Temp\ef38ca451d87a8e435a3314cbe8122ddafaf1f98cfeab2a29534627cba62e803.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3612-0-0x00000000021D0000-0x00000000021DC000-memory.dmp

Filesize
48KB

Download
memory/3612-1-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download