39dfaff219b0af2214ead0dc2bea9ed8b60fb0d1745afe8f6ae2f55f0572dbba | Triage

Analysis

max time kernel
119s
max time network
149s
platform
windows10_x64
resource
win10v200430
submitted
18-07-2020 16:37

Sharing

Report Analysis Logs

General

Target

39dfaff219b0af2214ead0dc2bea9ed8b60fb0d1745afe8f6ae2f55f0572dbba.exe
Size

100KB
MD5

6939d7add7873b15af24363340a52ca9
SHA1

62c84492723718be0b2f15b2d91ba3c79168c02a
SHA256

39dfaff219b0af2214ead0dc2bea9ed8b60fb0d1745afe8f6ae2f55f0572dbba
SHA512

5877cf5a467a51726fb0f2b354139558c91dfbbcd5aa480a91d52c7e977b1cd883b4b1c1053ad71db9cb72f695afde89c4d998cae19ce0522a708b3ef2e3d535

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1520	39dfaff219b0af2214ead0dc2bea9ed8b60fb0d1745afe8f6ae2f55f0572dbba.exe
1520	39dfaff219b0af2214ead0dc2bea9ed8b60fb0d1745afe8f6ae2f55f0572dbba.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1520	39dfaff219b0af2214ead0dc2bea9ed8b60fb0d1745afe8f6ae2f55f0572dbba.exe
1520	39dfaff219b0af2214ead0dc2bea9ed8b60fb0d1745afe8f6ae2f55f0572dbba.exe
1520	39dfaff219b0af2214ead0dc2bea9ed8b60fb0d1745afe8f6ae2f55f0572dbba.exe
1520	39dfaff219b0af2214ead0dc2bea9ed8b60fb0d1745afe8f6ae2f55f0572dbba.exe
1520	39dfaff219b0af2214ead0dc2bea9ed8b60fb0d1745afe8f6ae2f55f0572dbba.exe
1520	39dfaff219b0af2214ead0dc2bea9ed8b60fb0d1745afe8f6ae2f55f0572dbba.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
1520	39dfaff219b0af2214ead0dc2bea9ed8b60fb0d1745afe8f6ae2f55f0572dbba.exe

C:\Users\Admin\AppData\Local\Temp\39dfaff219b0af2214ead0dc2bea9ed8b60fb0d1745afe8f6ae2f55f0572dbba.exe
"C:\Users\Admin\AppData\Local\Temp\39dfaff219b0af2214ead0dc2bea9ed8b60fb0d1745afe8f6ae2f55f0572dbba.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:1520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1520-0-0x0000000002210000-0x000000000221C000-memory.dmp

Filesize
48KB

Download
memory/1520-1-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download