0478afc9e0c67d4c8a12db4d4fdd8c815fc5a63216325ce8e1e136deff2e2fe0 | Triage

Analysis

max time kernel
66s
max time network
143s
platform
windows10_x64
resource
win10
submitted
18-07-2020 00:14

Sharing

Report Analysis Logs

General

Target

0478afc9e0c67d4c8a12db4d4fdd8c815fc5a63216325ce8e1e136deff2e2fe0.exe
Size

273KB
MD5

549fdd881b65e5e0a5a359b30fdcb447
SHA1

0a365ab2db878de7eb97672ebaa4529c98e2f207
SHA256

0478afc9e0c67d4c8a12db4d4fdd8c815fc5a63216325ce8e1e136deff2e2fe0
SHA512

aee9a142fec18db2a0a26466464c22a51d943ca5daeb17b1baf08271c0f1334b2f1e9a7e0d8f422eab5c7a11f9e6945f559d26f7142ebae5d69e7a65f6d1ff70

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2532	0478afc9e0c67d4c8a12db4d4fdd8c815fc5a63216325ce8e1e136deff2e2fe0.exe
2532	0478afc9e0c67d4c8a12db4d4fdd8c815fc5a63216325ce8e1e136deff2e2fe0.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2532	0478afc9e0c67d4c8a12db4d4fdd8c815fc5a63216325ce8e1e136deff2e2fe0.exe
2532	0478afc9e0c67d4c8a12db4d4fdd8c815fc5a63216325ce8e1e136deff2e2fe0.exe
2532	0478afc9e0c67d4c8a12db4d4fdd8c815fc5a63216325ce8e1e136deff2e2fe0.exe
2532	0478afc9e0c67d4c8a12db4d4fdd8c815fc5a63216325ce8e1e136deff2e2fe0.exe
2532	0478afc9e0c67d4c8a12db4d4fdd8c815fc5a63216325ce8e1e136deff2e2fe0.exe
2532	0478afc9e0c67d4c8a12db4d4fdd8c815fc5a63216325ce8e1e136deff2e2fe0.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
2532	0478afc9e0c67d4c8a12db4d4fdd8c815fc5a63216325ce8e1e136deff2e2fe0.exe

C:\Users\Admin\AppData\Local\Temp\0478afc9e0c67d4c8a12db4d4fdd8c815fc5a63216325ce8e1e136deff2e2fe0.exe
"C:\Users\Admin\AppData\Local\Temp\0478afc9e0c67d4c8a12db4d4fdd8c815fc5a63216325ce8e1e136deff2e2fe0.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:2532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2532-0-0x00000000021D0000-0x00000000021DC000-memory.dmp

Filesize
48KB

Download
memory/2532-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download