3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274 | Triage

Analysis

max time kernel
138s
max time network
140s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 14:54

Sharing

Report Analysis Logs

General

Target

3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274.exe
Size

100KB
MD5

aaa550fefda59effecbbeb13cd3e3502
SHA1

b88498246e4b795e7a96f2096fd69483221b6e4f
SHA256

3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274
SHA512

a28e39a1628f8c85e13f9cf8c9eb797ab7998fdfd101f9a381943822e204e255c0d91cfadbad5c412a889d7161689a2a38bb881476ed984ab90390d19df2ccd4

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3656	3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274.exe
3656	3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3656	3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274.exe
3656	3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274.exe
3656	3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274.exe
3656	3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274.exe
3656	3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274.exe
3656	3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3656	3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274.exe

C:\Users\Admin\AppData\Local\Temp\3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274.exe
"C:\Users\Admin\AppData\Local\Temp\3d20084f9bc987565ed6906950ff66897d2d3bf0dec8641f8e01ccbe3a1b3274.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3656-0-0x0000000002210000-0x000000000221C000-memory.dmp

Filesize
48KB

Download
memory/3656-1-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download