1cb31d6a53eb1e77462853b7ec78733d9a537950ef47a5e2d44c13b305960140 | Triage

Analysis

max time kernel
117s
max time network
148s
platform
windows10_x64
resource
win10
submitted
18-07-2020 16:06

Sharing

Report Analysis Logs

General

Target

1cb31d6a53eb1e77462853b7ec78733d9a537950ef47a5e2d44c13b305960140.exe
Size

100KB
MD5

d941c9fa9616ed28d5d55846dbff85ca
SHA1

d2158f216683f3f0a4b6b8cd1cf4931e8440bad5
SHA256

1cb31d6a53eb1e77462853b7ec78733d9a537950ef47a5e2d44c13b305960140
SHA512

2ba3f07a382ccec516ac503e0fea61ef3db0d52b20832580fe08d5313cd7d43b72f72f244897263ead910205780277b4408a5b69a71ae30a32f4988f86cbbd29

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3068	1cb31d6a53eb1e77462853b7ec78733d9a537950ef47a5e2d44c13b305960140.exe
3068	1cb31d6a53eb1e77462853b7ec78733d9a537950ef47a5e2d44c13b305960140.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3068	1cb31d6a53eb1e77462853b7ec78733d9a537950ef47a5e2d44c13b305960140.exe
3068	1cb31d6a53eb1e77462853b7ec78733d9a537950ef47a5e2d44c13b305960140.exe
3068	1cb31d6a53eb1e77462853b7ec78733d9a537950ef47a5e2d44c13b305960140.exe
3068	1cb31d6a53eb1e77462853b7ec78733d9a537950ef47a5e2d44c13b305960140.exe
3068	1cb31d6a53eb1e77462853b7ec78733d9a537950ef47a5e2d44c13b305960140.exe
3068	1cb31d6a53eb1e77462853b7ec78733d9a537950ef47a5e2d44c13b305960140.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3068	1cb31d6a53eb1e77462853b7ec78733d9a537950ef47a5e2d44c13b305960140.exe

C:\Users\Admin\AppData\Local\Temp\1cb31d6a53eb1e77462853b7ec78733d9a537950ef47a5e2d44c13b305960140.exe
"C:\Users\Admin\AppData\Local\Temp\1cb31d6a53eb1e77462853b7ec78733d9a537950ef47a5e2d44c13b305960140.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3068-0-0x00000000022D0000-0x00000000022DC000-memory.dmp

Filesize
48KB

Download
memory/3068-1-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download