0122260d362cb2c6c8700da3deadd07335f469970b45be554f47f7f80b46a26c | Triage

Analysis

max time kernel
66s
max time network
128s
platform
windows10_x64
resource
win10
submitted
18-07-2020 00:38

Sharing

Report Analysis Logs

General

Target

0122260d362cb2c6c8700da3deadd07335f469970b45be554f47f7f80b46a26c.exe
Size

273KB
MD5

f8a74ccaf32abc84f624a94d87bdb413
SHA1

48ab2d434ec533de465c181ea4e0ff14f094530d
SHA256

0122260d362cb2c6c8700da3deadd07335f469970b45be554f47f7f80b46a26c
SHA512

9423b89ebcc3013f51b7494ef95d3acb3b0041f74928ce7b09aa85faf1dc147028adad1f00d2d4f44707352a6d1e97a4e0f22e77035ae7219b9ddd8d355b7c2b

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3028	0122260d362cb2c6c8700da3deadd07335f469970b45be554f47f7f80b46a26c.exe
3028	0122260d362cb2c6c8700da3deadd07335f469970b45be554f47f7f80b46a26c.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3028	0122260d362cb2c6c8700da3deadd07335f469970b45be554f47f7f80b46a26c.exe
3028	0122260d362cb2c6c8700da3deadd07335f469970b45be554f47f7f80b46a26c.exe
3028	0122260d362cb2c6c8700da3deadd07335f469970b45be554f47f7f80b46a26c.exe
3028	0122260d362cb2c6c8700da3deadd07335f469970b45be554f47f7f80b46a26c.exe
3028	0122260d362cb2c6c8700da3deadd07335f469970b45be554f47f7f80b46a26c.exe
3028	0122260d362cb2c6c8700da3deadd07335f469970b45be554f47f7f80b46a26c.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3028	0122260d362cb2c6c8700da3deadd07335f469970b45be554f47f7f80b46a26c.exe

C:\Users\Admin\AppData\Local\Temp\0122260d362cb2c6c8700da3deadd07335f469970b45be554f47f7f80b46a26c.exe
"C:\Users\Admin\AppData\Local\Temp\0122260d362cb2c6c8700da3deadd07335f469970b45be554f47f7f80b46a26c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3028-0-0x00000000021D0000-0x00000000021DC000-memory.dmp

Filesize
48KB

Download
memory/3028-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download