47f474c4b86eec633ab5d6c64ba5e392416009dbb4d276b89d3c4bb6e7b370af

Analysis

max time kernel
149s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
29-11-2022 15:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

47f474c4b86eec633ab5d6c64ba5e392416009dbb4d276b89d3c4bb6e7b370af.exe
Size

164KB
MD5

0b1a7f38082cc9357ca78cbfe5ca31d4
SHA1

1684a8c6b00d88a2da169724103c24d66aaa7762
SHA256

47f474c4b86eec633ab5d6c64ba5e392416009dbb4d276b89d3c4bb6e7b370af
SHA512

4f4268e196527117528de0464ecf0b8926ca2c204bbac9b17173a0402afb658d53130788c6dffd7f2141a7d6e4ac1c04812b757e80c5bfe5090def02eeac0bfb
SSDEEP

3072:h0HuVtN1LM9AtrISQJF24vEHRO3THWxN1LM9AtrISQJF24vEHRO3THWKE:So/1LM9AtMS5BU3THWT1LM9AtMS5BU3G

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2295526160-1155304984-640977766-1000\Software\Microsoft\Internet Explorer\Main	47f474c4b86eec633ab5d6c64ba5e392416009dbb4d276b89d3c4bb6e7b370af.exe

Modifies Internet Explorer start page 1 TTPs 1 IoCs

stealer

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2295526160-1155304984-640977766-1000\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page = "http://www.wj95.com/"	47f474c4b86eec633ab5d6c64ba5e392416009dbb4d276b89d3c4bb6e7b370af.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1904	47f474c4b86eec633ab5d6c64ba5e392416009dbb4d276b89d3c4bb6e7b370af.exe

C:\Users\Admin\AppData\Local\Temp\47f474c4b86eec633ab5d6c64ba5e392416009dbb4d276b89d3c4bb6e7b370af.exe
"C:\Users\Admin\AppData\Local\Temp\47f474c4b86eec633ab5d6c64ba5e392416009dbb4d276b89d3c4bb6e7b370af.exe"
1⤵
- Modifies Internet Explorer settings
- Modifies Internet Explorer start page
- Suspicious use of SetWindowsHookEx
PID:1904

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads