a353e0ce58667bf4f1f319f2084f462135c19288c0733f41ab8602543f2db019

Analysis

max time kernel
31s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03/12/2022, 16:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a353e0ce58667bf4f1f319f2084f462135c19288c0733f41ab8602543f2db019.exe
Size

1.9MB
MD5

414b95a8ae2673efea700a548a9dc48d
SHA1

67465f78e6f1e0c6f1c519956075ac12f8940b9e
SHA256

a353e0ce58667bf4f1f319f2084f462135c19288c0733f41ab8602543f2db019
SHA512

bf7ebda8c94508dc76c4ec62554324e8181184ab72b089376d9c6694594d3a2df9b7c5a184efae7ef9c86d29350d6649890c3c660209bd13f1b6cdd109b9a1b1
SSDEEP

49152:N1WnlZ/FOmPeff+nFIbVbH3UPTMcRddxG:N1WlZ/3Z6bVjPT

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-999675638-2867687379-27515722-1000\Software\Microsoft\Internet Explorer\Main	a353e0ce58667bf4f1f319f2084f462135c19288c0733f41ab8602543f2db019.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1096	a353e0ce58667bf4f1f319f2084f462135c19288c0733f41ab8602543f2db019.exe
1096	a353e0ce58667bf4f1f319f2084f462135c19288c0733f41ab8602543f2db019.exe

C:\Users\Admin\AppData\Local\Temp\a353e0ce58667bf4f1f319f2084f462135c19288c0733f41ab8602543f2db019.exe
"C:\Users\Admin\AppData\Local\Temp\a353e0ce58667bf4f1f319f2084f462135c19288c0733f41ab8602543f2db019.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1096

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1096-54-0x00000000768A1000-0x00000000768A3000-memory.dmp

Filesize
8KB

Download