b86ca6e4b44c7f8868d7636da60a05d8ad718006a0a5c7a3d217e85e235ed825 | Triage

Analysis

max time kernel
131s
max time network
135s
platform
windows10_x64
resource
win10
submitted
18-07-2020 15:30

Sharing

Report Analysis Logs

General

Target

b86ca6e4b44c7f8868d7636da60a05d8ad718006a0a5c7a3d217e85e235ed825.exe
Size

100KB
MD5

ab95ebf33ed411f7f5d50e28c16bf9e2
SHA1

a00227ddbd52e742056697193a61182344533815
SHA256

b86ca6e4b44c7f8868d7636da60a05d8ad718006a0a5c7a3d217e85e235ed825
SHA512

6025fe97e4c9971aa56c34d04dce0791b22ba8e18f3d5f94f3cf5e31bfea94b1b868587506eb5744d2174e638552665f18064973015cca1cdff5d24e7a0e8a0e

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2920	b86ca6e4b44c7f8868d7636da60a05d8ad718006a0a5c7a3d217e85e235ed825.exe
2920	b86ca6e4b44c7f8868d7636da60a05d8ad718006a0a5c7a3d217e85e235ed825.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2920	b86ca6e4b44c7f8868d7636da60a05d8ad718006a0a5c7a3d217e85e235ed825.exe
2920	b86ca6e4b44c7f8868d7636da60a05d8ad718006a0a5c7a3d217e85e235ed825.exe
2920	b86ca6e4b44c7f8868d7636da60a05d8ad718006a0a5c7a3d217e85e235ed825.exe
2920	b86ca6e4b44c7f8868d7636da60a05d8ad718006a0a5c7a3d217e85e235ed825.exe
2920	b86ca6e4b44c7f8868d7636da60a05d8ad718006a0a5c7a3d217e85e235ed825.exe
2920	b86ca6e4b44c7f8868d7636da60a05d8ad718006a0a5c7a3d217e85e235ed825.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
2920	b86ca6e4b44c7f8868d7636da60a05d8ad718006a0a5c7a3d217e85e235ed825.exe

C:\Users\Admin\AppData\Local\Temp\b86ca6e4b44c7f8868d7636da60a05d8ad718006a0a5c7a3d217e85e235ed825.exe
"C:\Users\Admin\AppData\Local\Temp\b86ca6e4b44c7f8868d7636da60a05d8ad718006a0a5c7a3d217e85e235ed825.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:2920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2920-0-0x00000000020D0000-0x00000000020DC000-memory.dmp

Filesize
48KB

Download
memory/2920-1-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download