9c99a84e9b97a261020a111944e17d2b8a970b5325dac4a5cf98f01b50338f22 | Triage

Analysis

max time kernel
139s
max time network
145s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 09:55

Sharing

Report Analysis Logs

General

Target

9c99a84e9b97a261020a111944e17d2b8a970b5325dac4a5cf98f01b50338f22.exe
Size

273KB
MD5

6e2ca6da274236fb56a49f2db6ae0f7b
SHA1

7cdcec15fb87cc4e0570d7036d1f5d0569887dc7
SHA256

9c99a84e9b97a261020a111944e17d2b8a970b5325dac4a5cf98f01b50338f22
SHA512

1107327802a66e1a19ce0af18416aafdafda2ed9e867e480785ad7cf289f47beae5d7c02d9287e793e93dfdc3531af087c0972ee47852038676d625ae63ebcbe

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3724	9c99a84e9b97a261020a111944e17d2b8a970b5325dac4a5cf98f01b50338f22.exe
3724	9c99a84e9b97a261020a111944e17d2b8a970b5325dac4a5cf98f01b50338f22.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3724	9c99a84e9b97a261020a111944e17d2b8a970b5325dac4a5cf98f01b50338f22.exe
3724	9c99a84e9b97a261020a111944e17d2b8a970b5325dac4a5cf98f01b50338f22.exe
3724	9c99a84e9b97a261020a111944e17d2b8a970b5325dac4a5cf98f01b50338f22.exe
3724	9c99a84e9b97a261020a111944e17d2b8a970b5325dac4a5cf98f01b50338f22.exe
3724	9c99a84e9b97a261020a111944e17d2b8a970b5325dac4a5cf98f01b50338f22.exe
3724	9c99a84e9b97a261020a111944e17d2b8a970b5325dac4a5cf98f01b50338f22.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3724	9c99a84e9b97a261020a111944e17d2b8a970b5325dac4a5cf98f01b50338f22.exe

C:\Users\Admin\AppData\Local\Temp\9c99a84e9b97a261020a111944e17d2b8a970b5325dac4a5cf98f01b50338f22.exe
"C:\Users\Admin\AppData\Local\Temp\9c99a84e9b97a261020a111944e17d2b8a970b5325dac4a5cf98f01b50338f22.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3724-0-0x0000000002320000-0x000000000232C000-memory.dmp

Filesize
48KB

Download
memory/3724-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download