b0c35b2ae53dbb20457adae0f627ceff945d819c4bdd26d17b33da9ca6d41809 | Triage

Analysis

max time kernel
123s
max time network
143s
platform
windows10_x64
resource
win10
submitted
18-07-2020 05:30

Sharing

Report Analysis Logs

General

Target

b0c35b2ae53dbb20457adae0f627ceff945d819c4bdd26d17b33da9ca6d41809.exe
Size

273KB
MD5

6b373b62f795a834058477eeaa5bff2d
SHA1

f8110901626290046598616d15d237cc5ca565e7
SHA256

b0c35b2ae53dbb20457adae0f627ceff945d819c4bdd26d17b33da9ca6d41809
SHA512

cf141b35b2cafefba7a9eaa524370c65c6391e7eb9359e066e6501cccc3a0d8cc9ee77066938d94b1f93132b6641b3b71680a3d3a2ed470933164c3768c4265e

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
720	b0c35b2ae53dbb20457adae0f627ceff945d819c4bdd26d17b33da9ca6d41809.exe
720	b0c35b2ae53dbb20457adae0f627ceff945d819c4bdd26d17b33da9ca6d41809.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
720	b0c35b2ae53dbb20457adae0f627ceff945d819c4bdd26d17b33da9ca6d41809.exe
720	b0c35b2ae53dbb20457adae0f627ceff945d819c4bdd26d17b33da9ca6d41809.exe
720	b0c35b2ae53dbb20457adae0f627ceff945d819c4bdd26d17b33da9ca6d41809.exe
720	b0c35b2ae53dbb20457adae0f627ceff945d819c4bdd26d17b33da9ca6d41809.exe
720	b0c35b2ae53dbb20457adae0f627ceff945d819c4bdd26d17b33da9ca6d41809.exe
720	b0c35b2ae53dbb20457adae0f627ceff945d819c4bdd26d17b33da9ca6d41809.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
720	b0c35b2ae53dbb20457adae0f627ceff945d819c4bdd26d17b33da9ca6d41809.exe

C:\Users\Admin\AppData\Local\Temp\b0c35b2ae53dbb20457adae0f627ceff945d819c4bdd26d17b33da9ca6d41809.exe
"C:\Users\Admin\AppData\Local\Temp\b0c35b2ae53dbb20457adae0f627ceff945d819c4bdd26d17b33da9ca6d41809.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/720-0-0x0000000002260000-0x000000000226C000-memory.dmp

Filesize
48KB

Download
memory/720-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download