40973177b9b4329ed5e75da4a82f1f034d460d8d1beb6ee34aa36dd9f778703c | Triage

Analysis

max time kernel
138s
max time network
141s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 07:08

Sharing

Report Analysis Logs

General

Target

40973177b9b4329ed5e75da4a82f1f034d460d8d1beb6ee34aa36dd9f778703c.exe
Size

273KB
MD5

0fffb37e9e0dfab40b9dc3b137444247
SHA1

1fe6d52602d059ba7ff0bf7384bec94f7931661d
SHA256

40973177b9b4329ed5e75da4a82f1f034d460d8d1beb6ee34aa36dd9f778703c
SHA512

2afabcaf6c35aa5a496595e77e3014d5dfb3f6f6f44ab60bc96518c90272045341c0475d616327e8f728c11903e09586a507d9281af71fd3cc7a3f63cb872f1e

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3656	40973177b9b4329ed5e75da4a82f1f034d460d8d1beb6ee34aa36dd9f778703c.exe
3656	40973177b9b4329ed5e75da4a82f1f034d460d8d1beb6ee34aa36dd9f778703c.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3656	40973177b9b4329ed5e75da4a82f1f034d460d8d1beb6ee34aa36dd9f778703c.exe
3656	40973177b9b4329ed5e75da4a82f1f034d460d8d1beb6ee34aa36dd9f778703c.exe
3656	40973177b9b4329ed5e75da4a82f1f034d460d8d1beb6ee34aa36dd9f778703c.exe
3656	40973177b9b4329ed5e75da4a82f1f034d460d8d1beb6ee34aa36dd9f778703c.exe
3656	40973177b9b4329ed5e75da4a82f1f034d460d8d1beb6ee34aa36dd9f778703c.exe
3656	40973177b9b4329ed5e75da4a82f1f034d460d8d1beb6ee34aa36dd9f778703c.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3656	40973177b9b4329ed5e75da4a82f1f034d460d8d1beb6ee34aa36dd9f778703c.exe

C:\Users\Admin\AppData\Local\Temp\40973177b9b4329ed5e75da4a82f1f034d460d8d1beb6ee34aa36dd9f778703c.exe
"C:\Users\Admin\AppData\Local\Temp\40973177b9b4329ed5e75da4a82f1f034d460d8d1beb6ee34aa36dd9f778703c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3656-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download
memory/3656-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download