90a4cf6fc51376d1a412e7377b3528e47356a67a89a8d5590a3795dda5d0e141 | Triage

Analysis

max time kernel
119s
max time network
148s
platform
windows10_x64
resource
win10
submitted
18-07-2020 01:15

Sharing

Report Analysis Logs

General

Target

90a4cf6fc51376d1a412e7377b3528e47356a67a89a8d5590a3795dda5d0e141.exe
Size

273KB
MD5

5e5c89de7ce04c01f481268adb4bfff6
SHA1

1ad98f803907cb260f409cb28c74795b1975bda3
SHA256

90a4cf6fc51376d1a412e7377b3528e47356a67a89a8d5590a3795dda5d0e141
SHA512

8171a62151403a19be133943c3c53f65c054d24b0430539984a739e6a08d432d5d25903ba1f0cf85a2f47d6c36dda7699ba42311516d414e22fc0fb41bb44fd2

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3908	90a4cf6fc51376d1a412e7377b3528e47356a67a89a8d5590a3795dda5d0e141.exe
3908	90a4cf6fc51376d1a412e7377b3528e47356a67a89a8d5590a3795dda5d0e141.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3908	90a4cf6fc51376d1a412e7377b3528e47356a67a89a8d5590a3795dda5d0e141.exe
3908	90a4cf6fc51376d1a412e7377b3528e47356a67a89a8d5590a3795dda5d0e141.exe
3908	90a4cf6fc51376d1a412e7377b3528e47356a67a89a8d5590a3795dda5d0e141.exe
3908	90a4cf6fc51376d1a412e7377b3528e47356a67a89a8d5590a3795dda5d0e141.exe
3908	90a4cf6fc51376d1a412e7377b3528e47356a67a89a8d5590a3795dda5d0e141.exe
3908	90a4cf6fc51376d1a412e7377b3528e47356a67a89a8d5590a3795dda5d0e141.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3908	90a4cf6fc51376d1a412e7377b3528e47356a67a89a8d5590a3795dda5d0e141.exe

C:\Users\Admin\AppData\Local\Temp\90a4cf6fc51376d1a412e7377b3528e47356a67a89a8d5590a3795dda5d0e141.exe
"C:\Users\Admin\AppData\Local\Temp\90a4cf6fc51376d1a412e7377b3528e47356a67a89a8d5590a3795dda5d0e141.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3908-0-0x0000000002090000-0x000000000209C000-memory.dmp

Filesize
48KB

Download
memory/3908-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download