d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e | Triage

Analysis

max time kernel
131s
max time network
122s
platform
windows10_x64
resource
win10
submitted
18-07-2020 09:11

Sharing

Report Analysis Logs

General

Target

d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
Size

273KB
MD5

94fe3eb765c5c9820118201f886b75ef
SHA1

24dafb2421b295fe6e629d31069194fa361030e0
SHA256

d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e
SHA512

5aeee5150d9f09c89599b0e0ad65277533d48fef5036e9025fddef4e3388c677eedb1ca609b2f9b0a4d7348a1de0088e5aa8cbbfe8ca5976af3a90a638ea49ca

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
2920	d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe

C:\Users\Admin\AppData\Local\Temp\d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe
"C:\Users\Admin\AppData\Local\Temp\d44e1a6e55c97e4f4e41ad8e27ede71f6c4bbb17cd42d16d7468d53cbd58d28e.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:2920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2920-0-0x0000000002260000-0x000000000226C000-memory.dmp

Filesize
48KB

Download
memory/2920-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download