6ccd9eec650256413c4a119534284d8042d4750c70fa1335a28475830fe1f006

Analysis

max time kernel
46s
max time network
52s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
24-11-2022 07:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6ccd9eec650256413c4a119534284d8042d4750c70fa1335a28475830fe1f006.exe
Size

8.7MB
MD5

72f6cfd44e046b37753bc19773879ab0
SHA1

217f0e2fc04c8a9ad0cbbad1b50c2ed2bab74d5a
SHA256

6ccd9eec650256413c4a119534284d8042d4750c70fa1335a28475830fe1f006
SHA512

e2e854f18d7399fb01d8f054b020e848b8c3ea8c2766d7d0e1bbeaa960b4d7dcd02c7eba1f2ab0d5627d84ffa3eee109651db0a888cfd8f654fa8dcb31481481
SSDEEP

196608:tTXE6wQRwphEsTFaYeQkKtrNhDtaNbgaIEjHejC/KLIT+TJqG4RxV:tZJkfKQRhZi0RgeO1+TJ8

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4063495947-34355257-727531523-1000\Software\Microsoft\Internet Explorer\Main	6ccd9eec650256413c4a119534284d8042d4750c70fa1335a28475830fe1f006.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1300	6ccd9eec650256413c4a119534284d8042d4750c70fa1335a28475830fe1f006.exe
1300	6ccd9eec650256413c4a119534284d8042d4750c70fa1335a28475830fe1f006.exe

C:\Users\Admin\AppData\Local\Temp\6ccd9eec650256413c4a119534284d8042d4750c70fa1335a28475830fe1f006.exe
"C:\Users\Admin\AppData\Local\Temp\6ccd9eec650256413c4a119534284d8042d4750c70fa1335a28475830fe1f006.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1300

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1300-54-0x00000000757A1000-0x00000000757A3000-memory.dmp

Filesize
8KB

Download