Overview

overview

10

Static

static

5d0b792480...b7.exe

windows7_x64

10

5d0b792480...b7.exe

windows10_x64

1

Analysis

  • max time kernel
    119s
  • max time network
    148s
  • platform
    windows10_x64
  • resource
    win10
  • submitted
    17/07/2020, 17:04

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    5d0b792480d652dee7b3e12df82c49d79575def8734e315e8fbb737bba4f9bb7.exe

  • Size

    276KB

  • MD5

    9bd1ea3f1334a612b30310d2c124aa06

  • SHA1

    f2feaa903f9f03b61399ffe60c895887a080f5bf

  • SHA256

    5d0b792480d652dee7b3e12df82c49d79575def8734e315e8fbb737bba4f9bb7

  • SHA512

    33954412980f25ba116ce2632096026d4a64eac959bffb716fd4b6d13f8927846e5f228ff941149f4266edf77e21b181de523e0c4fb8142abccbfb427a17a55a

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: EmotetMutantsSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5d0b792480d652dee7b3e12df82c49d79575def8734e315e8fbb737bba4f9bb7.exe
    "C:\Users\Admin\AppData\Local\Temp\5d0b792480d652dee7b3e12df82c49d79575def8734e315e8fbb737bba4f9bb7.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: EmotetMutantsSpam
    PID:792

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/792-0-0x0000000002250000-0x000000000225C000-memory.dmp

          Filesize

          48KB

          Download

        • memory/792-1-0x0000000000400000-0x0000000000448000-memory.dmp

          Filesize

          288KB

          Download