eb9bd69cbc402648971347ee8599bb751522127119a4746b06678d8905f197b4 | Triage

Analysis

max time kernel
141s
max time network
139s
platform
windows10_x64
resource
win10v200430
submitted
18/07/2020, 03:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

eb9bd69cbc402648971347ee8599bb751522127119a4746b06678d8905f197b4.exe
Size

273KB
MD5

dd41dc4e23089cf821fd8985bfc689ba
SHA1

a81453ba63a90756383b45bdf13c956284d767c6
SHA256

eb9bd69cbc402648971347ee8599bb751522127119a4746b06678d8905f197b4
SHA512

a5ebe00aacd484a925d5362a382960da878d49d7131fe044d34cca1e7a202ebef96d2c9679cf205225ef74ad1dc1f8d32df4c3e93281b8696e211602a9e40424

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3656	eb9bd69cbc402648971347ee8599bb751522127119a4746b06678d8905f197b4.exe
3656	eb9bd69cbc402648971347ee8599bb751522127119a4746b06678d8905f197b4.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3656	eb9bd69cbc402648971347ee8599bb751522127119a4746b06678d8905f197b4.exe
3656	eb9bd69cbc402648971347ee8599bb751522127119a4746b06678d8905f197b4.exe
3656	eb9bd69cbc402648971347ee8599bb751522127119a4746b06678d8905f197b4.exe
3656	eb9bd69cbc402648971347ee8599bb751522127119a4746b06678d8905f197b4.exe
3656	eb9bd69cbc402648971347ee8599bb751522127119a4746b06678d8905f197b4.exe
3656	eb9bd69cbc402648971347ee8599bb751522127119a4746b06678d8905f197b4.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3656	eb9bd69cbc402648971347ee8599bb751522127119a4746b06678d8905f197b4.exe

C:\Users\Admin\AppData\Local\Temp\eb9bd69cbc402648971347ee8599bb751522127119a4746b06678d8905f197b4.exe
"C:\Users\Admin\AppData\Local\Temp\eb9bd69cbc402648971347ee8599bb751522127119a4746b06678d8905f197b4.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3656-0-0x0000000002320000-0x000000000232C000-memory.dmp

Filesize
48KB

Download
memory/3656-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download