Analysis
-
max time kernel
123s -
max time network
124s -
platform
windows7_x64 -
resource
win7v20210410 -
submitted
13-05-2021 12:56
Static task
static1
Behavioral task
behavioral1
Sample
4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe
Resource
win10v20210410
0 signatures
0 seconds
General
-
Target
4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe
-
Size
2.9MB
-
MD5
b55a50a92c2ed420a88d61df47d99a3f
-
SHA1
943e9c8c919df6fe11635c51d86b2ad7e01493ae
-
SHA256
4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641
-
SHA512
9376baac56030ca712c1529967bcd898a28ce63a8c2072566966b577b8d9d783336f88086342aa5b15947f2708c0931e375c66f2748931d41e9e965acf7635a4
Score
1/10
Malware Config
Signatures
-
Processes:
4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-2513283230-931923277-594887482-1000\Software\Microsoft\Internet Explorer\Main 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe -
Suspicious behavior: EnumeratesProcesses 16 IoCs
Processes:
4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exepid process 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exepid process 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe 1088 4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe"C:\Users\Admin\AppData\Local\Temp\4e512e401c0440949f3ce60077bf801af0585c24b67ef8d49b7012bd19f5d641.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx