Analysis
-
max time kernel
118s -
max time network
141s -
platform
windows10_x64 -
resource
win10 -
submitted
18/07/2020, 01:15
Static task
static1
Behavioral task
behavioral1
Sample
cb62c25b304e78ffc269450d2b21348f35d7950a8dd91cb1d2f7097bdb9c92bb.exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
cb62c25b304e78ffc269450d2b21348f35d7950a8dd91cb1d2f7097bdb9c92bb.exe
Resource
win10
0 signatures
0 seconds
General
-
Target
cb62c25b304e78ffc269450d2b21348f35d7950a8dd91cb1d2f7097bdb9c92bb.exe
-
Size
273KB
-
MD5
8d5ae2c625c04904b4a37a04fdd2260c
-
SHA1
6d5ca0f136e265e8856c47f72bc9f52f046e2bfd
-
SHA256
cb62c25b304e78ffc269450d2b21348f35d7950a8dd91cb1d2f7097bdb9c92bb
-
SHA512
8ac98e4e674155f857fb1d75c9b3f3f10db081497d38b3ee37d065a1dd6b45e40cd75664030e682e03484471c322d97d0fc8146210e85a422aa89bda8800d263
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3104 cb62c25b304e78ffc269450d2b21348f35d7950a8dd91cb1d2f7097bdb9c92bb.exe 3104 cb62c25b304e78ffc269450d2b21348f35d7950a8dd91cb1d2f7097bdb9c92bb.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3104 cb62c25b304e78ffc269450d2b21348f35d7950a8dd91cb1d2f7097bdb9c92bb.exe 3104 cb62c25b304e78ffc269450d2b21348f35d7950a8dd91cb1d2f7097bdb9c92bb.exe 3104 cb62c25b304e78ffc269450d2b21348f35d7950a8dd91cb1d2f7097bdb9c92bb.exe 3104 cb62c25b304e78ffc269450d2b21348f35d7950a8dd91cb1d2f7097bdb9c92bb.exe 3104 cb62c25b304e78ffc269450d2b21348f35d7950a8dd91cb1d2f7097bdb9c92bb.exe 3104 cb62c25b304e78ffc269450d2b21348f35d7950a8dd91cb1d2f7097bdb9c92bb.exe -
Suspicious behavior: EmotetMutantsSpam 1 IoCs
pid Process 3104 cb62c25b304e78ffc269450d2b21348f35d7950a8dd91cb1d2f7097bdb9c92bb.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\cb62c25b304e78ffc269450d2b21348f35d7950a8dd91cb1d2f7097bdb9c92bb.exe"C:\Users\Admin\AppData\Local\Temp\cb62c25b304e78ffc269450d2b21348f35d7950a8dd91cb1d2f7097bdb9c92bb.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3104