bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be | Triage

Analysis

max time kernel
140s
max time network
134s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 07:40

Sharing

Report Analysis Logs

General

Target

bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
Size

273KB
MD5

19e82521f1373b29068fa7e40c46a34b
SHA1

9ed97577f3a0e957b8691d039ede5333884579d4
SHA256

bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be
SHA512

f54fc615712bcb4d81a25a2322ff18d85c85762da622a49e3a4e3d79f9bb4b089fb06b2802ef999943dbfdfa812b06d095b3cf238d0c8ddf3a6a05080580bd75

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
4004	bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe

C:\Users\Admin\AppData\Local\Temp\bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe
"C:\Users\Admin\AppData\Local\Temp\bb07355cab1bab39007ec7d75188dc7394a6224bf7d4c236f8f6ac3f456748be.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
- Suspicious use of SetWindowsHookEx
PID:4004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4004-0-0x00000000021F0000-0x00000000021FC000-memory.dmp

Filesize
48KB

Download
memory/4004-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download