Analysis

  • max time kernel
    42s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    02/12/2022, 18:57

General

  • Target

    1b14b44aa55d7cec429a56a2e6c56c6864781615e8c4d7f6d05ae4cd18545df3.exe

  • Size

    752KB

  • MD5

    8fe5cf1281756f4258586a5117bb80b3

  • SHA1

    7b988a3bcf8be5ce9712e7d8eaef01bedf0b8cad

  • SHA256

    1b14b44aa55d7cec429a56a2e6c56c6864781615e8c4d7f6d05ae4cd18545df3

  • SHA512

    f4b02e40db12187e80ecbbf4f709bc0ecf5b930ab2448825cd6e437562e68fbfa82045e2362fc07a09e65a87f718777ca51d06909b16256ae4a9ba42410590b6

  • SSDEEP

    12288:N+VgB4KIkSgnz491zYajp+O2m+7I/WlzFH6jsiCB9U6wQgNZ:NxB4KDnzIvVBskeJ16jpa91g

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1b14b44aa55d7cec429a56a2e6c56c6864781615e8c4d7f6d05ae4cd18545df3.exe
    "C:\Users\Admin\AppData\Local\Temp\1b14b44aa55d7cec429a56a2e6c56c6864781615e8c4d7f6d05ae4cd18545df3.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:992

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/992-54-0x0000000076561000-0x0000000076563000-memory.dmp

    Filesize

    8KB

  • memory/992-55-0x0000000000400000-0x000000000087A000-memory.dmp

    Filesize

    4.5MB

  • memory/992-61-0x0000000000400000-0x000000000087A000-memory.dmp

    Filesize

    4.5MB