c91ca831aeb564b048941c4fa8cc2fa6eecbcc336a1ad6b155be080a30dba5a7 | Triage

Analysis

max time kernel
64s
max time network
149s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 02:42

Sharing

Report Analysis Logs

General

Target

c91ca831aeb564b048941c4fa8cc2fa6eecbcc336a1ad6b155be080a30dba5a7.exe
Size

273KB
MD5

092047619e7f156cb6be0c7225cefeaf
SHA1

f274133e01210a28950ae9e13634d7c13a366e45
SHA256

c91ca831aeb564b048941c4fa8cc2fa6eecbcc336a1ad6b155be080a30dba5a7
SHA512

3935092189f2db8cde79fa1ac7a49d022de9f984707c079ba1b128dec4d9759d104b0a7f6922e81b2e236edfc52bb61c9daa05b67bec78f0fa07d351035c024d

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1008	c91ca831aeb564b048941c4fa8cc2fa6eecbcc336a1ad6b155be080a30dba5a7.exe
1008	c91ca831aeb564b048941c4fa8cc2fa6eecbcc336a1ad6b155be080a30dba5a7.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1008	c91ca831aeb564b048941c4fa8cc2fa6eecbcc336a1ad6b155be080a30dba5a7.exe
1008	c91ca831aeb564b048941c4fa8cc2fa6eecbcc336a1ad6b155be080a30dba5a7.exe
1008	c91ca831aeb564b048941c4fa8cc2fa6eecbcc336a1ad6b155be080a30dba5a7.exe
1008	c91ca831aeb564b048941c4fa8cc2fa6eecbcc336a1ad6b155be080a30dba5a7.exe
1008	c91ca831aeb564b048941c4fa8cc2fa6eecbcc336a1ad6b155be080a30dba5a7.exe
1008	c91ca831aeb564b048941c4fa8cc2fa6eecbcc336a1ad6b155be080a30dba5a7.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
1008	c91ca831aeb564b048941c4fa8cc2fa6eecbcc336a1ad6b155be080a30dba5a7.exe

C:\Users\Admin\AppData\Local\Temp\c91ca831aeb564b048941c4fa8cc2fa6eecbcc336a1ad6b155be080a30dba5a7.exe
"C:\Users\Admin\AppData\Local\Temp\c91ca831aeb564b048941c4fa8cc2fa6eecbcc336a1ad6b155be080a30dba5a7.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:1008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1008-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download
memory/1008-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download