5208dc9c28292022663129641cafbd8c908d4f03cbb1984c9dfd234e475ac721

Analysis

max time kernel
44s
max time network
50s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 14:45

Target

5208dc9c28292022663129641cafbd8c908d4f03cbb1984c9dfd234e475ac721.exe
Size

918KB
MD5

0f524131aa1f05243a98a6b59a1618a0
SHA1

7455e7c16cfdfeac258e3547190803f513cddc35
SHA256

5208dc9c28292022663129641cafbd8c908d4f03cbb1984c9dfd234e475ac721
SHA512

46f51360455fd1f7e2c0bec5e2bd1e34ac0bec068e7da6a41fc67c9ed608d7683e549f672361c2d408de8add61551de5d4721ac41e3580ea43e29c86cb45edda
SSDEEP

24576:hiryaFQUU3eYJbXiHlcOM6EhmEL6a9E5ark:kFltH50mx5ark

Score

1^/10

Modifies Internet Explorer settings 1 TTPs 3 IoCs

Modify Registry

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4063495947-34355257-727531523-1000\Software\Microsoft\Internet Explorer\Main\Disable Script Debugger = "yes"	5208dc9c28292022663129641cafbd8c908d4f03cbb1984c9dfd234e475ac721.exe
Key created	\REGISTRY\USER\S-1-5-21-4063495947-34355257-727531523-1000\Software\Microsoft\Internet Explorer\TypedURLs	5208dc9c28292022663129641cafbd8c908d4f03cbb1984c9dfd234e475ac721.exe
Key created	\REGISTRY\USER\S-1-5-21-4063495947-34355257-727531523-1000\Software\Microsoft\Internet Explorer\Main	5208dc9c28292022663129641cafbd8c908d4f03cbb1984c9dfd234e475ac721.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1352	5208dc9c28292022663129641cafbd8c908d4f03cbb1984c9dfd234e475ac721.exe

Suspicious use of SetWindowsHookEx 3 IoCs

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1352-54-0x0000000075B51000-0x0000000075B53000-memory.dmp

Filesize
8KB

Download
memory/1352-55-0x0000000036A60000-0x0000000036A70000-memory.dmp

Filesize
64KB

Download