af31fda9f981783de62e8ae1fc91f703903d22804b81c11f9c110b41fb79b35d | Triage

Analysis

max time kernel
149s
max time network
151s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 06:58

Sharing

Report Analysis Logs

General

Target

af31fda9f981783de62e8ae1fc91f703903d22804b81c11f9c110b41fb79b35d.exe
Size

273KB
MD5

e44d34782aa890d30acfae8c55cdb15f
SHA1

71971de0035914e02207461ac19b6f3bb511c583
SHA256

af31fda9f981783de62e8ae1fc91f703903d22804b81c11f9c110b41fb79b35d
SHA512

0a29b8a37de38c5ab9fe443c34188476e42ed0ec49cd85b6457a0642c9248400948f0f039cfdc09bdcbf58c4851ca88bd1c04761c1d9ac7d5e8ba5c7cd6aa7f9

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
736	af31fda9f981783de62e8ae1fc91f703903d22804b81c11f9c110b41fb79b35d.exe
736	af31fda9f981783de62e8ae1fc91f703903d22804b81c11f9c110b41fb79b35d.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
736	af31fda9f981783de62e8ae1fc91f703903d22804b81c11f9c110b41fb79b35d.exe
736	af31fda9f981783de62e8ae1fc91f703903d22804b81c11f9c110b41fb79b35d.exe
736	af31fda9f981783de62e8ae1fc91f703903d22804b81c11f9c110b41fb79b35d.exe
736	af31fda9f981783de62e8ae1fc91f703903d22804b81c11f9c110b41fb79b35d.exe
736	af31fda9f981783de62e8ae1fc91f703903d22804b81c11f9c110b41fb79b35d.exe
736	af31fda9f981783de62e8ae1fc91f703903d22804b81c11f9c110b41fb79b35d.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
736	af31fda9f981783de62e8ae1fc91f703903d22804b81c11f9c110b41fb79b35d.exe

C:\Users\Admin\AppData\Local\Temp\af31fda9f981783de62e8ae1fc91f703903d22804b81c11f9c110b41fb79b35d.exe
"C:\Users\Admin\AppData\Local\Temp\af31fda9f981783de62e8ae1fc91f703903d22804b81c11f9c110b41fb79b35d.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/736-0-0x00000000021E0000-0x00000000021EC000-memory.dmp

Filesize
48KB

Download
memory/736-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download