b7533947dd3ddfa53d6cc8fa8320abaae9ae33d015bbf3704a399009a82de08f

Analysis

max time kernel
67s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2022 23:43

Target

b7533947dd3ddfa53d6cc8fa8320abaae9ae33d015bbf3704a399009a82de08f.exe
Size

612KB
MD5

659c2355c7bfc03e20bf94cfc9d7db80
SHA1

282aa32fdbb433185461142da39e3d28b29f3976
SHA256

b7533947dd3ddfa53d6cc8fa8320abaae9ae33d015bbf3704a399009a82de08f
SHA512

d757c234a6da5bc0d2606bb70eb7a2e6ce0f3a6d1e741f154181b802b25ae65d8330da862895742cc4fb76e07567f9382bac2bb577f831a51916df5d617bb1fa
SSDEEP

6144:rD+c0sOQ0lA5pTw/uz6sw7DifxmreAncYwXMgY7gvVUcxhSFGrV2Vn3v6DQ4bLk:racJ0lA5Fuf7DK9dXMgYUvVUUhSFown7

Score

1^/10

Modifies Internet Explorer settings 1 TTPs 4 IoCs

Modify Registry

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-929662420-1054238289-2961194603-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage	b7533947dd3ddfa53d6cc8fa8320abaae9ae33d015bbf3704a399009a82de08f.exe
Key created	\REGISTRY\USER\S-1-5-21-929662420-1054238289-2961194603-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\yy.com	b7533947dd3ddfa53d6cc8fa8320abaae9ae33d015bbf3704a399009a82de08f.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-929662420-1054238289-2961194603-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\yy.com\NumberOfSubdomains = "1"	b7533947dd3ddfa53d6cc8fa8320abaae9ae33d015bbf3704a399009a82de08f.exe
Key created	\REGISTRY\USER\S-1-5-21-929662420-1054238289-2961194603-1000\Software\Microsoft\Internet Explorer\DOMStorage\yy.com	b7533947dd3ddfa53d6cc8fa8320abaae9ae33d015bbf3704a399009a82de08f.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4760	b7533947dd3ddfa53d6cc8fa8320abaae9ae33d015bbf3704a399009a82de08f.exe
4760	b7533947dd3ddfa53d6cc8fa8320abaae9ae33d015bbf3704a399009a82de08f.exe
4760	b7533947dd3ddfa53d6cc8fa8320abaae9ae33d015bbf3704a399009a82de08f.exe
4760	b7533947dd3ddfa53d6cc8fa8320abaae9ae33d015bbf3704a399009a82de08f.exe

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact