7b366f11cd77c0b574d0cb0a80a6636546eacc2f043a27b8c96dfb607157c1ae

Analysis

max time kernel
9s
max time network
48s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
27/11/2022, 00:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

7b366f11cd77c0b574d0cb0a80a6636546eacc2f043a27b8c96dfb607157c1ae.exe
Size

798KB
MD5

b0678f9d3a5172b8a72165de1ac97eb9
SHA1

5af460ac7b8c194af1900a3632ecddc2d24db311
SHA256

7b366f11cd77c0b574d0cb0a80a6636546eacc2f043a27b8c96dfb607157c1ae
SHA512

a1cb43a14e25817dae44f8205e75c7af9a4185a1aff3ca01fb641fac1a2815984bac7c65ca52ca340c9fd6a07db632bf2a0e2023222bb000f4f73f755c252981
SSDEEP

24576:EiFiRKODauQgPziU5ZOvfWdJfqZBB/Ys4DN:D4cuTLi7fWdxeBesi

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2292972927-2705560509-2768824231-1000\Software\Microsoft\Internet Explorer\Main	7b366f11cd77c0b574d0cb0a80a6636546eacc2f043a27b8c96dfb607157c1ae.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
968	7b366f11cd77c0b574d0cb0a80a6636546eacc2f043a27b8c96dfb607157c1ae.exe
968	7b366f11cd77c0b574d0cb0a80a6636546eacc2f043a27b8c96dfb607157c1ae.exe

C:\Users\Admin\AppData\Local\Temp\7b366f11cd77c0b574d0cb0a80a6636546eacc2f043a27b8c96dfb607157c1ae.exe
"C:\Users\Admin\AppData\Local\Temp\7b366f11cd77c0b574d0cb0a80a6636546eacc2f043a27b8c96dfb607157c1ae.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:968

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/968-54-0x0000000076091000-0x0000000076093000-memory.dmp

Filesize
8KB

Download