f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6

Analysis

max time kernel
27s
max time network
48s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20-10-2022 10:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
Size

20KB
MD5

81992e55a7dbdbc6305cf229824b5062
SHA1

21287b67abdaa149cadabc4acbff65f7d0d43cb5
SHA256

f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6
SHA512

2bf87232b8dddd7e32184f6bc18fc1e6c2b0ae8a04ccbff4664c6e4d16cd899fcf0a6bf6b5b7e7807cfe46e382ef6cc7fca6d43f39552079c52b3af3cc3cc4fa
SSDEEP

96:/lxTVUJ63nYDMDuhTptrQrZCD0qgT/YCv63A4nPurtQDQDxEqDq2:/TBr3YY4L0hAAsA4nPFkVEqW

Score

1^/10

Malware Config

Signatures

Modifies Control Panel 15 IoCs

evasion

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\Desktop\WindowMetrics\CaptionHeight = "-315"	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\Desktop\WindowMetrics\BorderWidth = "-15"	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\Desktop\WindowMetrics\ScrollHeight = "-255"	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\Desktop\WindowMetrics\MenuFont = 0800000000000000000000000000000090010000000000010000000056004b002000530061006e0073002000530065007200690066000000000000000000000000000000000000000000000000000000000000000000000000000000	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\Desktop\WindowMetrics\MenuWidth = "-285"	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\Desktop\WindowMetrics\MenuHeight = "-285"	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\Desktop\WindowMetrics\PaddedBorderWidth = "-60"	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\Desktop\WindowMetrics\ScrollWidth = "-255"	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\Desktop\WindowMetrics\CaptionWidth = "-525"	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\Desktop\WindowMetrics\SmCaptionWidth = "-255"	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\Desktop\WindowMetrics\StatusFont = 0800000000000000000000000000000090010000000000010000000056004b002000530061006e0073002000530065007200690066000000000000000000000000000000000000000000000000000000000000000000000000000000	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\Desktop\WindowMetrics\MessageFont = 0800000000000000000000000000000090010000000000010000000056004b002000530061006e0073002000530065007200690066000000000000000000000000000000000000000000000000000000000000000000000000000000	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\Desktop\WindowMetrics\SmCaptionHeight = "-255"	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\Desktop\WindowMetrics\CaptionFont = 0800000000000000000000000000000090010000000000010000000056004b002000530061006e0073002000530065007200690066000000000000000000000000000000000000000000000000000000000000000000000000000000	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\Desktop\WindowMetrics\SmCaptionFont = 0800000000000000000000000000000090010000000000010000000056004b002000530061006e0073002000530065007200690066000000000000000000000000000000000000000000000000000000000000000000000000000000	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
668	f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe

C:\Users\Admin\AppData\Local\Temp\f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe
"C:\Users\Admin\AppData\Local\Temp\f0e19e22a875bcfb0097a045f29cde8065b51ed45318f3abf394029149acada6.exe"
1⤵
- Modifies Control Panel
- Suspicious use of SetWindowsHookEx
PID:668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/668-56-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download
memory/668-57-0x0000000000400000-0x0000000000416000-memory.dmp

Filesize
88KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads