b1815fff96a2472c24308da0f2c7d4158692a5b68e5397b0ccd8d90ef872ba51 | Triage

Analysis

max time kernel
118s
max time network
140s
platform
windows10_x64
resource
win10
submitted
18-07-2020 14:13

Sharing

Report Analysis Logs

General

Target

b1815fff96a2472c24308da0f2c7d4158692a5b68e5397b0ccd8d90ef872ba51.exe
Size

100KB
MD5

a9de1d0b191e265319b4c33470bbf352
SHA1

2ad94055d909d33f49d5bc77f07fb5058766cec1
SHA256

b1815fff96a2472c24308da0f2c7d4158692a5b68e5397b0ccd8d90ef872ba51
SHA512

cf1649c8f91ea9309322869a77bf388a55f9db25d3488f6a5f90ee40f5fb843da2694f89138d4b1891abd0d8738c29beb712504e2e3c70ddb1d5a886eea5ec64

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3104	b1815fff96a2472c24308da0f2c7d4158692a5b68e5397b0ccd8d90ef872ba51.exe
3104	b1815fff96a2472c24308da0f2c7d4158692a5b68e5397b0ccd8d90ef872ba51.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3104	b1815fff96a2472c24308da0f2c7d4158692a5b68e5397b0ccd8d90ef872ba51.exe
3104	b1815fff96a2472c24308da0f2c7d4158692a5b68e5397b0ccd8d90ef872ba51.exe
3104	b1815fff96a2472c24308da0f2c7d4158692a5b68e5397b0ccd8d90ef872ba51.exe
3104	b1815fff96a2472c24308da0f2c7d4158692a5b68e5397b0ccd8d90ef872ba51.exe
3104	b1815fff96a2472c24308da0f2c7d4158692a5b68e5397b0ccd8d90ef872ba51.exe
3104	b1815fff96a2472c24308da0f2c7d4158692a5b68e5397b0ccd8d90ef872ba51.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3104	b1815fff96a2472c24308da0f2c7d4158692a5b68e5397b0ccd8d90ef872ba51.exe

C:\Users\Admin\AppData\Local\Temp\b1815fff96a2472c24308da0f2c7d4158692a5b68e5397b0ccd8d90ef872ba51.exe
"C:\Users\Admin\AppData\Local\Temp\b1815fff96a2472c24308da0f2c7d4158692a5b68e5397b0ccd8d90ef872ba51.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3104-0-0x00000000022D0000-0x00000000022DC000-memory.dmp

Filesize
48KB

Download
memory/3104-1-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download