Analysis
- max time kernel
3s - max time network
44s - platform
windows10_x64 - resource
win10v20201028 - submitted
30/12/2020, 13:30
Static task
static1
Behavioral task
behavioral1
Sample
emotet_e2_d51c4a95eb3b358e31b75d0f3e4fbd9f4ac62785f48019f6552ef3fd40f75a6d_2020-12-30__132543064945._doc.doc
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
emotet_e2_d51c4a95eb3b358e31b75d0f3e4fbd9f4ac62785f48019f6552ef3fd40f75a6d_2020-12-30__132543064945._doc.doc
Resource
win10v20201028
0 signatures
0 seconds
General
- Target emotet_e2_d51c4a95eb3b358e31b75d0f3e4fbd9f4ac62785f48019f6552ef3fd40f75a6d_2020-12-30__132543064945._doc.doc
- Size 160KB
- Sample201230-126f78jyja
- SHA256 d51c4a95eb3b358e31b75d0f3e4fbd9f4ac62785f48019f6552ef3fd40f75a6d
- MD5 3d7adb35938754962ce1484c666f4eb1
- SHA1 2e3e3bdddf20b6f5f2e42276e6efb1e3a5822635
- SHA512 7435c31be2f84840dd361465ac937e479fcb356589f6eacde3715b5f3473da6e5ab00a6e000c36cbd5cd5b6f134bf6a56c04d4452a14d7c517f0b3ca5234b0d4
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4804 WINWORD.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\emotet_e2_d51c4a95eb3b358e31b75d0f3e4fbd9f4ac62785f48019f6552ef3fd40f75a6d_2020-12-30__132543064945._doc.doc" /o ""1⤵
- Suspicious use of SetWindowsHookEx
PID:4804