3a9847eb8ea16d09df068bf41e753a31c094cab92ea4a4234b9118506b422095 | Triage

Analysis

max time kernel
145s
max time network
148s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 11:44

Sharing

Report Analysis Logs

General

Target

3a9847eb8ea16d09df068bf41e753a31c094cab92ea4a4234b9118506b422095.exe
Size

100KB
MD5

3eedb409b39520221f6f6642dc5909ad
SHA1

a3d46ec66403fc23c4a85ecb7d74c4620c496f8b
SHA256

3a9847eb8ea16d09df068bf41e753a31c094cab92ea4a4234b9118506b422095
SHA512

1f25d886e7858916e0806357d533f9624e069638166bcd648a83a64387fa22322052f6f17468e1e4ff368df2e7546ee2cf6bdc31c5c9dc8adc04a4bd05e35976

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1740	3a9847eb8ea16d09df068bf41e753a31c094cab92ea4a4234b9118506b422095.exe
1740	3a9847eb8ea16d09df068bf41e753a31c094cab92ea4a4234b9118506b422095.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1740	3a9847eb8ea16d09df068bf41e753a31c094cab92ea4a4234b9118506b422095.exe
1740	3a9847eb8ea16d09df068bf41e753a31c094cab92ea4a4234b9118506b422095.exe
1740	3a9847eb8ea16d09df068bf41e753a31c094cab92ea4a4234b9118506b422095.exe
1740	3a9847eb8ea16d09df068bf41e753a31c094cab92ea4a4234b9118506b422095.exe
1740	3a9847eb8ea16d09df068bf41e753a31c094cab92ea4a4234b9118506b422095.exe
1740	3a9847eb8ea16d09df068bf41e753a31c094cab92ea4a4234b9118506b422095.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
1740	3a9847eb8ea16d09df068bf41e753a31c094cab92ea4a4234b9118506b422095.exe

C:\Users\Admin\AppData\Local\Temp\3a9847eb8ea16d09df068bf41e753a31c094cab92ea4a4234b9118506b422095.exe
"C:\Users\Admin\AppData\Local\Temp\3a9847eb8ea16d09df068bf41e753a31c094cab92ea4a4234b9118506b422095.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:1740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1740-0-0x00000000022D0000-0x00000000022DC000-memory.dmp

Filesize
48KB

Download
memory/1740-1-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download