c99dce9e9d32029dac549bd53c3aec4f6d96c4c7d9583ca481874aeb827c5edc | Triage

Analysis

max time kernel
131s
max time network
149s
platform
windows10_x64
resource
win10
submitted
18-07-2020 07:51

Sharing

Report Analysis Logs

General

Target

c99dce9e9d32029dac549bd53c3aec4f6d96c4c7d9583ca481874aeb827c5edc.exe
Size

273KB
MD5

f34db2579b7e4ff6c34a3f3ba81fd9a8
SHA1

6fedd4297a857547269a5f3fad70817f9d11e29e
SHA256

c99dce9e9d32029dac549bd53c3aec4f6d96c4c7d9583ca481874aeb827c5edc
SHA512

84a10c109f054b6067d713860703aa661db8300e96b6ab9462e5abf505e3e6475cddda6e5c10b5826d8d8835fe223511b92aa92b4f2e6ac8f44b8bde6dc5bda3

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2920	c99dce9e9d32029dac549bd53c3aec4f6d96c4c7d9583ca481874aeb827c5edc.exe
2920	c99dce9e9d32029dac549bd53c3aec4f6d96c4c7d9583ca481874aeb827c5edc.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2920	c99dce9e9d32029dac549bd53c3aec4f6d96c4c7d9583ca481874aeb827c5edc.exe
2920	c99dce9e9d32029dac549bd53c3aec4f6d96c4c7d9583ca481874aeb827c5edc.exe
2920	c99dce9e9d32029dac549bd53c3aec4f6d96c4c7d9583ca481874aeb827c5edc.exe
2920	c99dce9e9d32029dac549bd53c3aec4f6d96c4c7d9583ca481874aeb827c5edc.exe
2920	c99dce9e9d32029dac549bd53c3aec4f6d96c4c7d9583ca481874aeb827c5edc.exe
2920	c99dce9e9d32029dac549bd53c3aec4f6d96c4c7d9583ca481874aeb827c5edc.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
2920	c99dce9e9d32029dac549bd53c3aec4f6d96c4c7d9583ca481874aeb827c5edc.exe

C:\Users\Admin\AppData\Local\Temp\c99dce9e9d32029dac549bd53c3aec4f6d96c4c7d9583ca481874aeb827c5edc.exe
"C:\Users\Admin\AppData\Local\Temp\c99dce9e9d32029dac549bd53c3aec4f6d96c4c7d9583ca481874aeb827c5edc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:2920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2920-0-0x00000000021D0000-0x00000000021DC000-memory.dmp

Filesize
48KB

Download
memory/2920-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download