5112ee14af558ef18d05ef86fe1629585164e3095ba1e02093cf6ea429db8441 | Triage

Analysis

max time kernel
137s
max time network
146s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 03:19

Sharing

Report Analysis Logs

General

Target

5112ee14af558ef18d05ef86fe1629585164e3095ba1e02093cf6ea429db8441.exe
Size

273KB
MD5

b1a000ab194842638c53567440449a4b
SHA1

e35955bd9807200a1588fb936eb5d97b75781dbd
SHA256

5112ee14af558ef18d05ef86fe1629585164e3095ba1e02093cf6ea429db8441
SHA512

5abfdfb7cc97c1095e8643480ef87e91b138ad0a9763f7927b0bd36929bc7a4617f406a98dc24969c8b49850ed2ef2555e08a751d6bcea8105c54eed764cf226

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
992	5112ee14af558ef18d05ef86fe1629585164e3095ba1e02093cf6ea429db8441.exe
992	5112ee14af558ef18d05ef86fe1629585164e3095ba1e02093cf6ea429db8441.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
992	5112ee14af558ef18d05ef86fe1629585164e3095ba1e02093cf6ea429db8441.exe
992	5112ee14af558ef18d05ef86fe1629585164e3095ba1e02093cf6ea429db8441.exe
992	5112ee14af558ef18d05ef86fe1629585164e3095ba1e02093cf6ea429db8441.exe
992	5112ee14af558ef18d05ef86fe1629585164e3095ba1e02093cf6ea429db8441.exe
992	5112ee14af558ef18d05ef86fe1629585164e3095ba1e02093cf6ea429db8441.exe
992	5112ee14af558ef18d05ef86fe1629585164e3095ba1e02093cf6ea429db8441.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
992	5112ee14af558ef18d05ef86fe1629585164e3095ba1e02093cf6ea429db8441.exe

C:\Users\Admin\AppData\Local\Temp\5112ee14af558ef18d05ef86fe1629585164e3095ba1e02093cf6ea429db8441.exe
"C:\Users\Admin\AppData\Local\Temp\5112ee14af558ef18d05ef86fe1629585164e3095ba1e02093cf6ea429db8441.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/992-0-0x00000000021E0000-0x00000000021EC000-memory.dmp

Filesize
48KB

Download
memory/992-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download