ebeb6eeed5f6f6d11f17948adb4b9985125c5f43f83a218c72b35ac64bc48b57 | Triage

Analysis

max time kernel
147s
max time network
150s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 08:52

Sharing

Report Analysis Logs

General

Target

ebeb6eeed5f6f6d11f17948adb4b9985125c5f43f83a218c72b35ac64bc48b57.exe
Size

273KB
MD5

b5916b721071f73a7471a6a02eafd0a4
SHA1

9d1a407e1776d28d9b4011ce5f83114f7bf6e7bf
SHA256

ebeb6eeed5f6f6d11f17948adb4b9985125c5f43f83a218c72b35ac64bc48b57
SHA512

664a46b9d8af544f6078b718895dccc3639a22c4ef222bf0098d5ef565f36869b95dc7bae7689069ff76ed68f1e3ace661bb1267e665f3670ffcdd07e0cf307f

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1300	ebeb6eeed5f6f6d11f17948adb4b9985125c5f43f83a218c72b35ac64bc48b57.exe
1300	ebeb6eeed5f6f6d11f17948adb4b9985125c5f43f83a218c72b35ac64bc48b57.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1300	ebeb6eeed5f6f6d11f17948adb4b9985125c5f43f83a218c72b35ac64bc48b57.exe
1300	ebeb6eeed5f6f6d11f17948adb4b9985125c5f43f83a218c72b35ac64bc48b57.exe
1300	ebeb6eeed5f6f6d11f17948adb4b9985125c5f43f83a218c72b35ac64bc48b57.exe
1300	ebeb6eeed5f6f6d11f17948adb4b9985125c5f43f83a218c72b35ac64bc48b57.exe
1300	ebeb6eeed5f6f6d11f17948adb4b9985125c5f43f83a218c72b35ac64bc48b57.exe
1300	ebeb6eeed5f6f6d11f17948adb4b9985125c5f43f83a218c72b35ac64bc48b57.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
1300	ebeb6eeed5f6f6d11f17948adb4b9985125c5f43f83a218c72b35ac64bc48b57.exe

C:\Users\Admin\AppData\Local\Temp\ebeb6eeed5f6f6d11f17948adb4b9985125c5f43f83a218c72b35ac64bc48b57.exe
"C:\Users\Admin\AppData\Local\Temp\ebeb6eeed5f6f6d11f17948adb4b9985125c5f43f83a218c72b35ac64bc48b57.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:1300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1300-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download
memory/1300-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download