f4b1088d1cbb4d043c99f875cb5c715abc96cbff5a68296f8cf0089fc4d108dc | Triage

Analysis

max time kernel
144s
max time network
147s
platform
windows10_x64
resource
win10
submitted
18-07-2020 21:48

Sharing

Report Analysis Logs

General

Target

f4b1088d1cbb4d043c99f875cb5c715abc96cbff5a68296f8cf0089fc4d108dc.exe
Size

100KB
MD5

9acf0787664cbc4513c9e5e06c5381b3
SHA1

c7ca95ae157835b0e84388dcd598dc26f81ef551
SHA256

f4b1088d1cbb4d043c99f875cb5c715abc96cbff5a68296f8cf0089fc4d108dc
SHA512

4bfeb36ecbf08d0e369714f77651e6e9f842ab59010268195ae4120a83054edc6d71093cc8cffdf524f4a1e10a2d266f1a1f517067d11288fa066e0c7b48d307

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3544	f4b1088d1cbb4d043c99f875cb5c715abc96cbff5a68296f8cf0089fc4d108dc.exe
3544	f4b1088d1cbb4d043c99f875cb5c715abc96cbff5a68296f8cf0089fc4d108dc.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3544	f4b1088d1cbb4d043c99f875cb5c715abc96cbff5a68296f8cf0089fc4d108dc.exe
3544	f4b1088d1cbb4d043c99f875cb5c715abc96cbff5a68296f8cf0089fc4d108dc.exe
3544	f4b1088d1cbb4d043c99f875cb5c715abc96cbff5a68296f8cf0089fc4d108dc.exe
3544	f4b1088d1cbb4d043c99f875cb5c715abc96cbff5a68296f8cf0089fc4d108dc.exe
3544	f4b1088d1cbb4d043c99f875cb5c715abc96cbff5a68296f8cf0089fc4d108dc.exe
3544	f4b1088d1cbb4d043c99f875cb5c715abc96cbff5a68296f8cf0089fc4d108dc.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3544	f4b1088d1cbb4d043c99f875cb5c715abc96cbff5a68296f8cf0089fc4d108dc.exe

C:\Users\Admin\AppData\Local\Temp\f4b1088d1cbb4d043c99f875cb5c715abc96cbff5a68296f8cf0089fc4d108dc.exe
"C:\Users\Admin\AppData\Local\Temp\f4b1088d1cbb4d043c99f875cb5c715abc96cbff5a68296f8cf0089fc4d108dc.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3544

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3544-0-0x00000000022D0000-0x00000000022DC000-memory.dmp

Filesize
48KB

Download
memory/3544-1-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download