ecd84d161fa061bf74b914416ff8559a921adc5cd871b5e8567408f5ddd2e01a

Analysis

max time kernel
37s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
30-11-2022 04:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ecd84d161fa061bf74b914416ff8559a921adc5cd871b5e8567408f5ddd2e01a.exe
Size

374KB
MD5

4773e1a462bfa4e5613d535957afd079
SHA1

72725d9fe183e8d8c6d4cc6e3cb94293e2a4cc6c
SHA256

ecd84d161fa061bf74b914416ff8559a921adc5cd871b5e8567408f5ddd2e01a
SHA512

030bc9294a4591b9772c604e37931d75c7f4c3638e07674a6126e708d1d83a7f29b763ba2ca1c0ec0ad2d325190ea3631efe306ce6dd548229f5751b5571d317
SSDEEP

6144:ByiubJGIVuo50+kr80aIxOagQuCZw3OpPYQX:siLIf5UHJu+FbX

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

Processes:

ecd84d161fa061bf74b914416ff8559a921adc5cd871b5e8567408f5ddd2e01a.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-2292972927-2705560509-2768824231-1000\Software\Microsoft\Internet Explorer\Main	ecd84d161fa061bf74b914416ff8559a921adc5cd871b5e8567408f5ddd2e01a.exe

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

ecd84d161fa061bf74b914416ff8559a921adc5cd871b5e8567408f5ddd2e01a.exe

pid	process
1108	ecd84d161fa061bf74b914416ff8559a921adc5cd871b5e8567408f5ddd2e01a.exe
1108	ecd84d161fa061bf74b914416ff8559a921adc5cd871b5e8567408f5ddd2e01a.exe

C:\Users\Admin\AppData\Local\Temp\ecd84d161fa061bf74b914416ff8559a921adc5cd871b5e8567408f5ddd2e01a.exe
"C:\Users\Admin\AppData\Local\Temp\ecd84d161fa061bf74b914416ff8559a921adc5cd871b5e8567408f5ddd2e01a.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1108

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1108-54-0x0000000075771000-0x0000000075773000-memory.dmp

Filesize
8KB

Download