Analysis
-
max time kernel
92s -
max time network
156s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
30-11-2022 07:38
Behavioral task
behavioral1
Sample
8cf136af478e9ba8afababb54744c3d0b932388a9bbc0c78b15f3ca7e1ad8a80.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8cf136af478e9ba8afababb54744c3d0b932388a9bbc0c78b15f3ca7e1ad8a80.exe
Resource
win10v2004-20220812-en
General
-
Target
8cf136af478e9ba8afababb54744c3d0b932388a9bbc0c78b15f3ca7e1ad8a80.exe
-
Size
561KB
-
MD5
2f5d1d560a21e890c338dc16562dde7a
-
SHA1
060b83e46ba8ab48d8a2a3c9f356ffd8707467f3
-
SHA256
8cf136af478e9ba8afababb54744c3d0b932388a9bbc0c78b15f3ca7e1ad8a80
-
SHA512
e3c70e9575c4066cac6cd91ad687f9de592aeed6b2dff301089a80b3836275f9346f20d921e32663f115d7daa3493a4edbab9a23f701a17dd249a23e4f64011f
-
SSDEEP
12288:ckMG5PWfBhaIsmc0RNVvuUSaUTr8gR+m:1dAfzhvNxjwr8gR
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral1/memory/960-55-0x0000000000400000-0x000000000048E000-memory.dmp upx behavioral1/memory/960-56-0x0000000000400000-0x000000000048E000-memory.dmp upx -
Installs/modifies Browser Helper Object 2 TTPs 1 IoCs
BHOs are DLL modules which act as plugins for Internet Explorer.
Processes:
8cf136af478e9ba8afababb54744c3d0b932388a9bbc0c78b15f3ca7e1ad8a80.exedescription ioc process Key created \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects 8cf136af478e9ba8afababb54744c3d0b932388a9bbc0c78b15f3ca7e1ad8a80.exe