6be66971223eb066c9f7afc4c9ad11d63ff2e1cd7d9e35df7c502aa40233be43 | Triage

Analysis

max time kernel
70s
max time network
144s
platform
windows10_x64
resource
win10
submitted
18-07-2020 09:20

Sharing

Report Analysis Logs

General

Target

6be66971223eb066c9f7afc4c9ad11d63ff2e1cd7d9e35df7c502aa40233be43.exe
Size

273KB
MD5

152b7668d99d5c5a1908e2c7cdc0bcd9
SHA1

c39f8e21cb921e36c017d9f295119d58734c3c01
SHA256

6be66971223eb066c9f7afc4c9ad11d63ff2e1cd7d9e35df7c502aa40233be43
SHA512

c0baacca3982db2c766d216ce28ffcc6570624bfc20b6ad514c57d7f8eb9fca421bd2966245a9c3a78789b5bea7e78a4961364011c3f8b92be92a1144f9f3064

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3100	6be66971223eb066c9f7afc4c9ad11d63ff2e1cd7d9e35df7c502aa40233be43.exe
3100	6be66971223eb066c9f7afc4c9ad11d63ff2e1cd7d9e35df7c502aa40233be43.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3100	6be66971223eb066c9f7afc4c9ad11d63ff2e1cd7d9e35df7c502aa40233be43.exe
3100	6be66971223eb066c9f7afc4c9ad11d63ff2e1cd7d9e35df7c502aa40233be43.exe
3100	6be66971223eb066c9f7afc4c9ad11d63ff2e1cd7d9e35df7c502aa40233be43.exe
3100	6be66971223eb066c9f7afc4c9ad11d63ff2e1cd7d9e35df7c502aa40233be43.exe
3100	6be66971223eb066c9f7afc4c9ad11d63ff2e1cd7d9e35df7c502aa40233be43.exe
3100	6be66971223eb066c9f7afc4c9ad11d63ff2e1cd7d9e35df7c502aa40233be43.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3100	6be66971223eb066c9f7afc4c9ad11d63ff2e1cd7d9e35df7c502aa40233be43.exe

C:\Users\Admin\AppData\Local\Temp\6be66971223eb066c9f7afc4c9ad11d63ff2e1cd7d9e35df7c502aa40233be43.exe
"C:\Users\Admin\AppData\Local\Temp\6be66971223eb066c9f7afc4c9ad11d63ff2e1cd7d9e35df7c502aa40233be43.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3100-0-0x0000000002270000-0x000000000227C000-memory.dmp

Filesize
48KB

Download
memory/3100-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download