a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd | Triage

Analysis

max time kernel
133s
max time network
133s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 00:34

Sharing

Report Analysis Logs

General

Target

a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
Size

273KB
MD5

c2c0f91f3447eb68443e4eddedee6531
SHA1

a4643ac253be3d8f023f192b6b6666da45b513e8
SHA256

a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd
SHA512

59fd33e56ed905394130330f5647ba887bf843c946585b75b4abb86c9c2ed934fa007babf7b3cfff52c5c643c90ba82d8c69cbcc4f576a06630a814a416f8b5b

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
1484	a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe

C:\Users\Admin\AppData\Local\Temp\a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe
"C:\Users\Admin\AppData\Local\Temp\a4f3d88d8c41f9f537cace13ee56237bd2bb3630f83ab8f9244b6d12592a89dd.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:1484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1484-0-0x0000000002460000-0x000000000246C000-memory.dmp

Filesize
48KB

Download
memory/1484-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download