2cb1d46e5ca1af22841c4a613b16ee60be1c474065ae89053cc02c6d3740101b

Analysis

Target
emotet_e2_2cb1d46e5ca1af22841c4a613b16ee60be1c474065ae89053cc02c6d3740101b_2020-12-23__042038285507._doc.doc
Size 209KB
Sample201223-b3v6xdcmc6
SHA256 2cb1d46e5ca1af22841c4a613b16ee60be1c474065ae89053cc02c6d3740101b
MD5 8211db9f7fce4aba92016f12cb3e7857
SHA1 2be9d3359f272095ce092951ae19f1b23c076d7c
SHA512 52fa21648e2e28f3ba74a6ddacdc21b853484e473c86630859324a5bca5f439043f4a0b718ec0da2af402b8b70ce3e1e98053e1bb9e3b6630e3c7caf9c3206f6
MD5 SHA1 SHA512

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4712	WINWORD.EXE

C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\emotet_e2_2cb1d46e5ca1af22841c4a613b16ee60be1c474065ae89053cc02c6d3740101b_2020-12-23__042038285507._doc.doc" /o ""
1⤵
- Suspicious use of SetWindowsHookEx
PID:4712

memory/4712-2-0x000001B36FF50000-0x000001B370587000-memory.dmp

Download