2a53fabb5988ade6a70b074b8f0be78d6538fe2242407d2486b949d07e014b90 | Triage

Analysis

max time kernel
3s
max time network
33s
platform
windows10_x64
resource
win10v20201028
submitted
13-01-2021 03:21

Sharing

Report Analysis Logs

General

Target

emotet_e2_2a53fabb5988ade6a70b074b8f0be78d6538fe2242407d2486b949d07e014b90_2021-01-13__031828391087._doc.doc
Size

157KB
MD5

ec37913746887ecedd349985c4e701d0
SHA1

3a94f9f1188ab2a87e0ad5f73e9f68fc472cf203
SHA256

2a53fabb5988ade6a70b074b8f0be78d6538fe2242407d2486b949d07e014b90
SHA512

0c9513802a1725308e3ebfe71d038b4124170b7909580dd0240ea75c955f138afd93449316793520d3a8e442ef8dbcf110b86e06157b25423bf845b3d5166def

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

WINWORD.EXE

pid process

3992 WINWORD.EXE

C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\emotet_e2_2a53fabb5988ade6a70b074b8f0be78d6538fe2242407d2486b949d07e014b90_2021-01-13__031828391087._doc.doc" /o ""
1⤵
- Suspicious use of SetWindowsHookEx
PID:3992

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3992-2-0x00007FFCBC0A0000-0x00007FFCBC6D7000-memory.dmp

Filesize
6.2MB

Download