aa6c131007d4270b42e7c0569a4877e3fc7c228590f203d00e3aac0de36319bd | Triage

Analysis

max time kernel
137s
max time network
151s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 17:41

Sharing

Report Analysis Logs

General

Target

aa6c131007d4270b42e7c0569a4877e3fc7c228590f203d00e3aac0de36319bd.exe
Size

100KB
MD5

097e7464a6765d886cba9b47a4143f5a
SHA1

88df5b18bcedc13af16a5c408a57cb719172b0fa
SHA256

aa6c131007d4270b42e7c0569a4877e3fc7c228590f203d00e3aac0de36319bd
SHA512

acdb6d40037e2af654b314ba092ef7dab6b2f76d32ab6d483bac8a114f2851aa7b9762b26323971c9a152edf9bc784e8348d8b43688d1800e106d68a0a116578

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
992	aa6c131007d4270b42e7c0569a4877e3fc7c228590f203d00e3aac0de36319bd.exe
992	aa6c131007d4270b42e7c0569a4877e3fc7c228590f203d00e3aac0de36319bd.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
992	aa6c131007d4270b42e7c0569a4877e3fc7c228590f203d00e3aac0de36319bd.exe
992	aa6c131007d4270b42e7c0569a4877e3fc7c228590f203d00e3aac0de36319bd.exe
992	aa6c131007d4270b42e7c0569a4877e3fc7c228590f203d00e3aac0de36319bd.exe
992	aa6c131007d4270b42e7c0569a4877e3fc7c228590f203d00e3aac0de36319bd.exe
992	aa6c131007d4270b42e7c0569a4877e3fc7c228590f203d00e3aac0de36319bd.exe
992	aa6c131007d4270b42e7c0569a4877e3fc7c228590f203d00e3aac0de36319bd.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
992	aa6c131007d4270b42e7c0569a4877e3fc7c228590f203d00e3aac0de36319bd.exe

C:\Users\Admin\AppData\Local\Temp\aa6c131007d4270b42e7c0569a4877e3fc7c228590f203d00e3aac0de36319bd.exe
"C:\Users\Admin\AppData\Local\Temp\aa6c131007d4270b42e7c0569a4877e3fc7c228590f203d00e3aac0de36319bd.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/992-0-0x0000000002210000-0x000000000221C000-memory.dmp

Filesize
48KB

Download
memory/992-1-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download