1552415e663c113cf934d3d5303c25bb99a5cd75d1fb47e129734cdf72209ce8

Analysis

max time kernel
91s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2022, 08:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1552415e663c113cf934d3d5303c25bb99a5cd75d1fb47e129734cdf72209ce8.exe
Size

22KB
MD5

79efbe9b6903faeeac55afec9457c222
SHA1

429d146c38efe2bcf3e910674ddabc4f9e46b4a5
SHA256

1552415e663c113cf934d3d5303c25bb99a5cd75d1fb47e129734cdf72209ce8
SHA512

ff7e3eaf1332b1699c27948bfde8d8c7981906653aaa5123f34e7c9058e36369c2c09c903ab4933bdace069c3c69e7551624f1ee9bac297c56bb70281dda7a27
SSDEEP

384:0EtOfGiLwIyYBMihAiiP+LJfCP4BK5thTRcs6i4uA5hBU1aLG++:BtOfG6/yYBMihAHPU5CP5jRcMMBU1a6+

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/1724-132-0x0000000000400000-0x0000000000411000-memory.dmp	upx
behavioral2/memory/1724-133-0x0000000000400000-0x0000000000411000-memory.dmp	upx

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\PIC	1552415e663c113cf934d3d5303c25bb99a5cd75d1fb47e129734cdf72209ce8.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\PIC\MID = "95c0560ebc060000dd1f4665"	1552415e663c113cf934d3d5303c25bb99a5cd75d1fb47e129734cdf72209ce8.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\PIC\MID2 = "1552415e663c113cf934d3d5303c25bb99a5cd75d1fb47e129734cdf72209ce8.exe"	1552415e663c113cf934d3d5303c25bb99a5cd75d1fb47e129734cdf72209ce8.exe

C:\Users\Admin\AppData\Local\Temp\1552415e663c113cf934d3d5303c25bb99a5cd75d1fb47e129734cdf72209ce8.exe
"C:\Users\Admin\AppData\Local\Temp\1552415e663c113cf934d3d5303c25bb99a5cd75d1fb47e129734cdf72209ce8.exe"
1⤵
- Modifies Internet Explorer settings
PID:1724

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1724-132-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download
memory/1724-133-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download