a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417 | Triage

Analysis

max time kernel
135s
max time network
151s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 22:15

Sharing

Report Analysis Logs

General

Target

a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
Size

100KB
MD5

182f9aaa595fe0129cea35b9d864ab15
SHA1

0f1887828758ef2af56a411633f65f3c0d2ce100
SHA256

a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417
SHA512

402314b1fbd9ff361d2b8259288de17c99ac991ed741cee9ab16285a61c9965fe183d92d336e3a925b91c40c426170ead376097054bac4e95a80a11856b5b0a2

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
1356	a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe

C:\Users\Admin\AppData\Local\Temp\a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe
"C:\Users\Admin\AppData\Local\Temp\a4c673ef4660ef3a7a90dc0f6afc2234bf763863b80e1789ccab010462e46417.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:1356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1356-0-0x0000000002210000-0x000000000221C000-memory.dmp

Filesize
48KB

Download
memory/1356-1-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download