378301ebec6f58123d9806cc78879f1b7597e09092d0c2a0b19002447068a3dc | Triage

Analysis

max time kernel
118s
max time network
147s
platform
windows10_x64
resource
win10
submitted
17-07-2020 19:52

Sharing

Report Analysis Logs

General

Target

378301ebec6f58123d9806cc78879f1b7597e09092d0c2a0b19002447068a3dc.exe
Size

276KB
MD5

b5f0d0f141e51789161ea27f6dc0c9ec
SHA1

60a851bac317b0454413bf556e6ed29c38034be8
SHA256

378301ebec6f58123d9806cc78879f1b7597e09092d0c2a0b19002447068a3dc
SHA512

700a3552f6e1c2749d05c1cff971d65c5371ebe41455daf2351225b9ad9e50f1eaefb4dcddbb7965b59d7e3cc8bbf76baa1a9a8aceefdeec3edbd23d3b1147d8

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3908	378301ebec6f58123d9806cc78879f1b7597e09092d0c2a0b19002447068a3dc.exe
3908	378301ebec6f58123d9806cc78879f1b7597e09092d0c2a0b19002447068a3dc.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3908	378301ebec6f58123d9806cc78879f1b7597e09092d0c2a0b19002447068a3dc.exe
3908	378301ebec6f58123d9806cc78879f1b7597e09092d0c2a0b19002447068a3dc.exe
3908	378301ebec6f58123d9806cc78879f1b7597e09092d0c2a0b19002447068a3dc.exe
3908	378301ebec6f58123d9806cc78879f1b7597e09092d0c2a0b19002447068a3dc.exe
3908	378301ebec6f58123d9806cc78879f1b7597e09092d0c2a0b19002447068a3dc.exe
3908	378301ebec6f58123d9806cc78879f1b7597e09092d0c2a0b19002447068a3dc.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3908	378301ebec6f58123d9806cc78879f1b7597e09092d0c2a0b19002447068a3dc.exe

C:\Users\Admin\AppData\Local\Temp\378301ebec6f58123d9806cc78879f1b7597e09092d0c2a0b19002447068a3dc.exe
"C:\Users\Admin\AppData\Local\Temp\378301ebec6f58123d9806cc78879f1b7597e09092d0c2a0b19002447068a3dc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3908-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download
memory/3908-1-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download