Overview

overview

10

Static

static

ElectraSof...cg.exe

windows7_x64

1

ElectraSof...cg.exe

windows10_x64

Resubmissions

17-01-2021 18:30

210117-q3vy6kg7wx 1

26-12-2020 16:39

201226-mkwafa6hqe 10

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    26-12-2020 16:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ElectraSoft_FaxMail_Network_keygen_by_aaocg.exe

  • Size

    8.4MB

  • MD5

    7783fb57f7fe810c9dcfbbfda2b47eb6

  • SHA1

    2892bfd93cf7ef01e928960ecd5cc082bca99f3e

  • SHA256

    6d5307f8ae9c15be09190b6ff1f2c557d7a0519b765b6ef020ac3e7343fb190c

  • SHA512

    171a6b1651cd062869a5b979616e54a57b83e14af969d19a8aa344c2d5ed123a5d00ec8a51c2713146b9bfd2ec37c4c335cc0240cb0890b60b768e50cfc7478a

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ElectraSoft_FaxMail_Network_keygen_by_aaocg.exe
    "C:\Users\Admin\AppData\Local\Temp\ElectraSoft_FaxMail_Network_keygen_by_aaocg.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:1972

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1476-4-0x000007FEF7180000-0x000007FEF73FA000-memory.dmp
    Filesize

    2.5MB

    Download
  • memory/1972-2-0x0000000000ED0000-0x0000000000ED1000-memory.dmp
    Filesize

    4KB

    Download