521703ac5994b014dba9b525419fa1d8437b1d4ecb6a4a8252720e6e2945b2fe | Triage

Analysis

max time kernel
138s
max time network
141s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 02:54

Sharing

Report Analysis Logs

General

Target

521703ac5994b014dba9b525419fa1d8437b1d4ecb6a4a8252720e6e2945b2fe.exe
Size

273KB
MD5

c69b5d1946a0be4e9d07b49084e17447
SHA1

b9e8b5577f32166b004bd6a4775c256809146ff9
SHA256

521703ac5994b014dba9b525419fa1d8437b1d4ecb6a4a8252720e6e2945b2fe
SHA512

55f0db1484c5e9685be4de9646af5a5a063684cfb00b2115f03d03c441fe7c63688ec8bb7858ee6641ec5888bf6889b672d37474bcfe02e52524bc34a54686c9

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3656	521703ac5994b014dba9b525419fa1d8437b1d4ecb6a4a8252720e6e2945b2fe.exe
3656	521703ac5994b014dba9b525419fa1d8437b1d4ecb6a4a8252720e6e2945b2fe.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3656	521703ac5994b014dba9b525419fa1d8437b1d4ecb6a4a8252720e6e2945b2fe.exe
3656	521703ac5994b014dba9b525419fa1d8437b1d4ecb6a4a8252720e6e2945b2fe.exe
3656	521703ac5994b014dba9b525419fa1d8437b1d4ecb6a4a8252720e6e2945b2fe.exe
3656	521703ac5994b014dba9b525419fa1d8437b1d4ecb6a4a8252720e6e2945b2fe.exe
3656	521703ac5994b014dba9b525419fa1d8437b1d4ecb6a4a8252720e6e2945b2fe.exe
3656	521703ac5994b014dba9b525419fa1d8437b1d4ecb6a4a8252720e6e2945b2fe.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3656	521703ac5994b014dba9b525419fa1d8437b1d4ecb6a4a8252720e6e2945b2fe.exe

C:\Users\Admin\AppData\Local\Temp\521703ac5994b014dba9b525419fa1d8437b1d4ecb6a4a8252720e6e2945b2fe.exe
"C:\Users\Admin\AppData\Local\Temp\521703ac5994b014dba9b525419fa1d8437b1d4ecb6a4a8252720e6e2945b2fe.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3656-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download
memory/3656-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download