355b1f1616e4a44d1bdadca6b788a5d6cb2b2406cb6593f861f5f9e953ae2fb5

Analysis

max time kernel
111s
max time network
153s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 14:45

Target

355b1f1616e4a44d1bdadca6b788a5d6cb2b2406cb6593f861f5f9e953ae2fb5.exe
Size

914KB
MD5

0c3961b1b832242517022cb9fe3138b0
SHA1

6338ee1b314c9feca4737431caf2d426aa3654dd
SHA256

355b1f1616e4a44d1bdadca6b788a5d6cb2b2406cb6593f861f5f9e953ae2fb5
SHA512

139bb072674a5700814629773b761f361caca1acda4a26d082fc9505ab7c73b11a365b3ab3b848523a36b6ed1a653442dd66e77798e15c4562a69a763b3575ea
SSDEEP

24576:DWya+zGjuH4NP4qoFIlcOGLqEL6a9E5aCP:DFzYqIbx5aCP

Score

1^/10

Modifies Internet Explorer settings 1 TTPs 3 IoCs

Modify Registry

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-999675638-2867687379-27515722-1000\Software\Microsoft\Internet Explorer\Main\Disable Script Debugger = "yes"	355b1f1616e4a44d1bdadca6b788a5d6cb2b2406cb6593f861f5f9e953ae2fb5.exe
Key created	\REGISTRY\USER\S-1-5-21-999675638-2867687379-27515722-1000\Software\Microsoft\Internet Explorer\TypedURLs	355b1f1616e4a44d1bdadca6b788a5d6cb2b2406cb6593f861f5f9e953ae2fb5.exe
Key created	\REGISTRY\USER\S-1-5-21-999675638-2867687379-27515722-1000\Software\Microsoft\Internet Explorer\Main	355b1f1616e4a44d1bdadca6b788a5d6cb2b2406cb6593f861f5f9e953ae2fb5.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1992	355b1f1616e4a44d1bdadca6b788a5d6cb2b2406cb6593f861f5f9e953ae2fb5.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1992	355b1f1616e4a44d1bdadca6b788a5d6cb2b2406cb6593f861f5f9e953ae2fb5.exe
1992	355b1f1616e4a44d1bdadca6b788a5d6cb2b2406cb6593f861f5f9e953ae2fb5.exe
1992	355b1f1616e4a44d1bdadca6b788a5d6cb2b2406cb6593f861f5f9e953ae2fb5.exe

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1992-54-0x0000000076141000-0x0000000076143000-memory.dmp

Filesize
8KB

Download
memory/1992-55-0x0000000035B80000-0x0000000035B90000-memory.dmp

Filesize
64KB

Download