5f261cd7c8d2f7533ad65ece20147b1b86cd8968c8b699a25b0194b18e1b9323 | Triage

Analysis

max time kernel
118s
max time network
147s
platform
windows10_x64
resource
win10
submitted
18-07-2020 00:14

Sharing

Report Analysis Logs

General

Target

5f261cd7c8d2f7533ad65ece20147b1b86cd8968c8b699a25b0194b18e1b9323.exe
Size

273KB
MD5

658dd5e5f95b598def930d452a2b2400
SHA1

333676c7f6e9ec3540f7a9ca13ecadc4dd82cbfd
SHA256

5f261cd7c8d2f7533ad65ece20147b1b86cd8968c8b699a25b0194b18e1b9323
SHA512

e8036e4ea2d57aaecaf139a29df14d1e52f30aa2ee8a69f2f9d3d94c58503add92a20fd7e0f29dd9284d2a8686726656f3b8ed6a5daabc78bf39806e9b96602a

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
792	5f261cd7c8d2f7533ad65ece20147b1b86cd8968c8b699a25b0194b18e1b9323.exe
792	5f261cd7c8d2f7533ad65ece20147b1b86cd8968c8b699a25b0194b18e1b9323.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
792	5f261cd7c8d2f7533ad65ece20147b1b86cd8968c8b699a25b0194b18e1b9323.exe
792	5f261cd7c8d2f7533ad65ece20147b1b86cd8968c8b699a25b0194b18e1b9323.exe
792	5f261cd7c8d2f7533ad65ece20147b1b86cd8968c8b699a25b0194b18e1b9323.exe
792	5f261cd7c8d2f7533ad65ece20147b1b86cd8968c8b699a25b0194b18e1b9323.exe
792	5f261cd7c8d2f7533ad65ece20147b1b86cd8968c8b699a25b0194b18e1b9323.exe
792	5f261cd7c8d2f7533ad65ece20147b1b86cd8968c8b699a25b0194b18e1b9323.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
792	5f261cd7c8d2f7533ad65ece20147b1b86cd8968c8b699a25b0194b18e1b9323.exe

C:\Users\Admin\AppData\Local\Temp\5f261cd7c8d2f7533ad65ece20147b1b86cd8968c8b699a25b0194b18e1b9323.exe
"C:\Users\Admin\AppData\Local\Temp\5f261cd7c8d2f7533ad65ece20147b1b86cd8968c8b699a25b0194b18e1b9323.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/792-0-0x0000000002260000-0x000000000226C000-memory.dmp

Filesize
48KB

Download
memory/792-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download