31b7a1fb5ba4c90254c86509f41186e8a2474d691f49fba24cd88d04cd5af41f | Triage

Analysis

max time kernel
65s
max time network
144s
platform
windows10_x64
resource
win10
submitted
18-07-2020 08:40

Sharing

Report Analysis Logs

General

Target

31b7a1fb5ba4c90254c86509f41186e8a2474d691f49fba24cd88d04cd5af41f.exe
Size

273KB
MD5

c47f4cd62ca52e8cc2f628a55183062d
SHA1

7721c8efb892297e912ea3d0c6eb5c68fa0eb7a0
SHA256

31b7a1fb5ba4c90254c86509f41186e8a2474d691f49fba24cd88d04cd5af41f
SHA512

58b5667e03a343ee8d6d1d1f02a4969a23b4552f4b9099c9df21a6d75d174fbc22ff2f62aca11864f41443470941529ff7a8cfcb4ff3b7d0500c40f263fa7ff3

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3100	31b7a1fb5ba4c90254c86509f41186e8a2474d691f49fba24cd88d04cd5af41f.exe
3100	31b7a1fb5ba4c90254c86509f41186e8a2474d691f49fba24cd88d04cd5af41f.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3100	31b7a1fb5ba4c90254c86509f41186e8a2474d691f49fba24cd88d04cd5af41f.exe
3100	31b7a1fb5ba4c90254c86509f41186e8a2474d691f49fba24cd88d04cd5af41f.exe
3100	31b7a1fb5ba4c90254c86509f41186e8a2474d691f49fba24cd88d04cd5af41f.exe
3100	31b7a1fb5ba4c90254c86509f41186e8a2474d691f49fba24cd88d04cd5af41f.exe
3100	31b7a1fb5ba4c90254c86509f41186e8a2474d691f49fba24cd88d04cd5af41f.exe
3100	31b7a1fb5ba4c90254c86509f41186e8a2474d691f49fba24cd88d04cd5af41f.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3100	31b7a1fb5ba4c90254c86509f41186e8a2474d691f49fba24cd88d04cd5af41f.exe

C:\Users\Admin\AppData\Local\Temp\31b7a1fb5ba4c90254c86509f41186e8a2474d691f49fba24cd88d04cd5af41f.exe
"C:\Users\Admin\AppData\Local\Temp\31b7a1fb5ba4c90254c86509f41186e8a2474d691f49fba24cd88d04cd5af41f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3100-0-0x0000000002260000-0x000000000226C000-memory.dmp

Filesize
48KB

Download
memory/3100-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download