c5a090f7b7df0de8955cf7648a6054d5d2b0861f302fd213d744a712d93fbe57 | Triage

Analysis

max time kernel
120s
max time network
138s
platform
windows10_x64
resource
win10
submitted
18-07-2020 19:50

Sharing

Report Analysis Logs

General

Target

c5a090f7b7df0de8955cf7648a6054d5d2b0861f302fd213d744a712d93fbe57.exe
Size

100KB
MD5

b8fb4c381b9a80f5978789b7f0d08f30
SHA1

b65b42e5c6283fbb064ae9df0b18eabd5b1ad152
SHA256

c5a090f7b7df0de8955cf7648a6054d5d2b0861f302fd213d744a712d93fbe57
SHA512

4ea142bc45d944e8861220c613763c84e7dae36d8e6bcbf9b6b3126bdb709b0d16ae650cb71b29bca2d0ca6cf3053e0d4a1bc2ec264adb2453ab8549b3d64c85

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2600	c5a090f7b7df0de8955cf7648a6054d5d2b0861f302fd213d744a712d93fbe57.exe
2600	c5a090f7b7df0de8955cf7648a6054d5d2b0861f302fd213d744a712d93fbe57.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2600	c5a090f7b7df0de8955cf7648a6054d5d2b0861f302fd213d744a712d93fbe57.exe
2600	c5a090f7b7df0de8955cf7648a6054d5d2b0861f302fd213d744a712d93fbe57.exe
2600	c5a090f7b7df0de8955cf7648a6054d5d2b0861f302fd213d744a712d93fbe57.exe
2600	c5a090f7b7df0de8955cf7648a6054d5d2b0861f302fd213d744a712d93fbe57.exe
2600	c5a090f7b7df0de8955cf7648a6054d5d2b0861f302fd213d744a712d93fbe57.exe
2600	c5a090f7b7df0de8955cf7648a6054d5d2b0861f302fd213d744a712d93fbe57.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
2600	c5a090f7b7df0de8955cf7648a6054d5d2b0861f302fd213d744a712d93fbe57.exe

C:\Users\Admin\AppData\Local\Temp\c5a090f7b7df0de8955cf7648a6054d5d2b0861f302fd213d744a712d93fbe57.exe
"C:\Users\Admin\AppData\Local\Temp\c5a090f7b7df0de8955cf7648a6054d5d2b0861f302fd213d744a712d93fbe57.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:2600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2600-0-0x00000000022E0000-0x00000000022EC000-memory.dmp

Filesize
48KB

Download
memory/2600-1-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download