f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e | Triage

Analysis

max time kernel
136s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
06-03-2022 13:27

Sharing

Report Analysis Logs

General

Target

f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
Size

34KB
MD5

bfceb742616da224405f831b6cb1e3cb
SHA1

d3989f0c72c29b874b5745d0524041cd070c948a
SHA256

f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e
SHA512

beb8f7d4af51b86fab6a0e5ec558fb49d25cc76c8dd39ef160ea63059c7eebeab37f6305ca063853304a536b202903355871fe83e12fc596f532e41821d6897b

Score

10^/10

suricata

Malware Config

Signatures

suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M9
suricata: ET MALWARE Win32/Emotet CnC Activity (POST) M9
suricata

Suspicious behavior: EnumeratesProcesses 18 IoCs

Processes:

f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe

pid	process
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
760	f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe

C:\Users\Admin\AppData\Local\Temp\f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe
"C:\Users\Admin\AppData\Local\Temp\f8b172eb240b003701ef2b9a40bc7aa17ac9002cc4a5f6c26035cf82e605341e.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...