abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f | Triage

Analysis

max time kernel
117s
max time network
128s
platform
windows10_x64
resource
win10
submitted
18-07-2020 20:01

Sharing

Report Analysis Logs

General

Target

abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
Size

100KB
MD5

037db9875d6777cdc1ae0d6434f5c52f
SHA1

364bda4540b5e82369def56f9dc0859fb09f306c
SHA256

abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f
SHA512

c7893feda8a5d8f99ef801ea2490b542d59d3fbad4ae6c901eb2751fc31b6cd06d26987be621893209f905941559cbd7e4062c55346b3741a0535a89b3d0adca

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
4092	abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe

C:\Users\Admin\AppData\Local\Temp\abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe
"C:\Users\Admin\AppData\Local\Temp\abf7407ee9cb35ceb3e801576adfd25c5aeb95ff6b4bbc08dc50b60ac6bcfb0f.exe"
1⤵
- Suspicious behavior: EmotetMutantsSpam
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
PID:4092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4092-0-0x00000000022D0000-0x00000000022DC000-memory.dmp

Filesize
48KB

Download
memory/4092-1-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download