Analysis

  • max time kernel
    117s
  • max time network
    144s
  • platform
    windows10_x64
  • resource
    win10v200430
  • submitted
    18-07-2020 04:52

General

  • Target

    b237cf4bbd813c1a8f942d9ee8d5f546af1c9ff12a5ae9a54da23b0dbbf58f0b.exe

  • Size

    273KB

  • MD5

    5fa626b28f4e944e9203d97f98ef91a1

  • SHA1

    e13cadfff0fb43e6c815d42c117e3bca8cfade81

  • SHA256

    b237cf4bbd813c1a8f942d9ee8d5f546af1c9ff12a5ae9a54da23b0dbbf58f0b

  • SHA512

    7d0d331ea986133d974ea437c8dab86b7dbaac2950b54931e8482da794e8a6929f40b63d1f803295e9fa9e24ed4785e6d9c99f574e8e9cdd173eb2f817741b89

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: EmotetMutantsSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b237cf4bbd813c1a8f942d9ee8d5f546af1c9ff12a5ae9a54da23b0dbbf58f0b.exe
    "C:\Users\Admin\AppData\Local\Temp\b237cf4bbd813c1a8f942d9ee8d5f546af1c9ff12a5ae9a54da23b0dbbf58f0b.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: EmotetMutantsSpam
    PID:2024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2024-0-0x0000000002320000-0x000000000232C000-memory.dmp
    Filesize

    48KB

  • memory/2024-1-0x0000000000400000-0x0000000000449000-memory.dmp
    Filesize

    292KB