f7712a4d5cc18947f8eb9c09e3b4a36f2dfc3395a07e59adceb187290d703ea4

Analysis

max time kernel
70s
max time network
101s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 16:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f7712a4d5cc18947f8eb9c09e3b4a36f2dfc3395a07e59adceb187290d703ea4.exe
Size

100KB
MD5

325f764ad4bbe8b0494c3ee04db107c7
SHA1

1e85703cd4eba3647231977dd60ccaa7090dfd66
SHA256

f7712a4d5cc18947f8eb9c09e3b4a36f2dfc3395a07e59adceb187290d703ea4
SHA512

712fb78e8641660d122fd4c24a7b0089f76033c62aca6136d649ba878b407f797ef2f96fa27f4b3f99fb7534b7b5619665dac5a29c7a94857e7a7e40856e5ac6
SSDEEP

3072:Cj9cfDCFdd2GTLDi7wsFob/NcuNH5dFU4C:lGVO7w/1DKP

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Software\Microsoft\Internet Explorer\Main	f7712a4d5cc18947f8eb9c09e3b4a36f2dfc3395a07e59adceb187290d703ea4.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1448	f7712a4d5cc18947f8eb9c09e3b4a36f2dfc3395a07e59adceb187290d703ea4.exe
1448	f7712a4d5cc18947f8eb9c09e3b4a36f2dfc3395a07e59adceb187290d703ea4.exe

C:\Users\Admin\AppData\Local\Temp\f7712a4d5cc18947f8eb9c09e3b4a36f2dfc3395a07e59adceb187290d703ea4.exe
"C:\Users\Admin\AppData\Local\Temp\f7712a4d5cc18947f8eb9c09e3b4a36f2dfc3395a07e59adceb187290d703ea4.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1448

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1448-54-0x0000000076121000-0x0000000076123000-memory.dmp

Filesize
8KB

Download