Analysis

  • max time kernel
    119s
  • max time network
    149s
  • platform
    windows10_x64
  • resource
    win10v200430
  • submitted
    18-07-2020 05:29

General

  • Target

    ad0352323d3a23ee5482500921a2bda8cbf39b247de375e216bc98e7d1a00932.exe

  • Size

    273KB

  • MD5

    edcef31c9edee2e3d58b594269f46e30

  • SHA1

    11704368000382aec6f619d4c019f99082f34d7f

  • SHA256

    ad0352323d3a23ee5482500921a2bda8cbf39b247de375e216bc98e7d1a00932

  • SHA512

    b9afa00a4b8c6aed4564d45ad5b27e91250b02da96883bfa89c0ecfe313fb9955446d3f7f7fc18ef2458a15229d43d58568e23316e8a628e46de606f2c310f50

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: EmotetMutantsSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ad0352323d3a23ee5482500921a2bda8cbf39b247de375e216bc98e7d1a00932.exe
    "C:\Users\Admin\AppData\Local\Temp\ad0352323d3a23ee5482500921a2bda8cbf39b247de375e216bc98e7d1a00932.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: EmotetMutantsSpam
    PID:1652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1652-0-0x0000000002130000-0x000000000213C000-memory.dmp

    Filesize

    48KB

  • memory/1652-1-0x0000000000400000-0x0000000000449000-memory.dmp

    Filesize

    292KB