f5fc7edbb1c3d5b6d8f4c21e84cc7a16e9188275d35f70ed78f7ce06bd94db09 | Triage

Analysis

max time kernel
127s
max time network
150s
platform
windows10_x64
resource
win10v200430
submitted
17-07-2020 17:09

Sharing

Report Analysis Logs

General

Target

f5fc7edbb1c3d5b6d8f4c21e84cc7a16e9188275d35f70ed78f7ce06bd94db09.exe
Size

276KB
MD5

b09e734be7dbd5e65c1d7aed0140c642
SHA1

0a9f4b68c619c63e4f18cebefc10042ab1d35d0e
SHA256

f5fc7edbb1c3d5b6d8f4c21e84cc7a16e9188275d35f70ed78f7ce06bd94db09
SHA512

bfa031151cfdfde6da16ba6250a50072cf3bee9bbc7af3ba1230bad74c5666f808f7f1a8a7cdf92a638cbef0d67d06169779a38b2d23349a54514352ea28ccb2

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1624	f5fc7edbb1c3d5b6d8f4c21e84cc7a16e9188275d35f70ed78f7ce06bd94db09.exe
1624	f5fc7edbb1c3d5b6d8f4c21e84cc7a16e9188275d35f70ed78f7ce06bd94db09.exe
1624	f5fc7edbb1c3d5b6d8f4c21e84cc7a16e9188275d35f70ed78f7ce06bd94db09.exe
1624	f5fc7edbb1c3d5b6d8f4c21e84cc7a16e9188275d35f70ed78f7ce06bd94db09.exe
1624	f5fc7edbb1c3d5b6d8f4c21e84cc7a16e9188275d35f70ed78f7ce06bd94db09.exe
1624	f5fc7edbb1c3d5b6d8f4c21e84cc7a16e9188275d35f70ed78f7ce06bd94db09.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
1624	f5fc7edbb1c3d5b6d8f4c21e84cc7a16e9188275d35f70ed78f7ce06bd94db09.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1624	f5fc7edbb1c3d5b6d8f4c21e84cc7a16e9188275d35f70ed78f7ce06bd94db09.exe
1624	f5fc7edbb1c3d5b6d8f4c21e84cc7a16e9188275d35f70ed78f7ce06bd94db09.exe

C:\Users\Admin\AppData\Local\Temp\f5fc7edbb1c3d5b6d8f4c21e84cc7a16e9188275d35f70ed78f7ce06bd94db09.exe
"C:\Users\Admin\AppData\Local\Temp\f5fc7edbb1c3d5b6d8f4c21e84cc7a16e9188275d35f70ed78f7ce06bd94db09.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
- Suspicious use of SetWindowsHookEx
PID:1624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1624-0-0x00000000021D0000-0x00000000021DC000-memory.dmp

Filesize
48KB

Download
memory/1624-1-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download