7bd55c90c474c5811bb4eb38bc0dde88c3230240ddbec4fb891175ff56d9c3aa

Analysis

max time kernel
166s
max time network
32s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
04/12/2022, 11:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7bd55c90c474c5811bb4eb38bc0dde88c3230240ddbec4fb891175ff56d9c3aa.exe
Size

590KB
MD5

531db2133d41782da41fcd3cda253480
SHA1

a7250377bbcd705d3a09daf1cbbf6f30c79b4236
SHA256

7bd55c90c474c5811bb4eb38bc0dde88c3230240ddbec4fb891175ff56d9c3aa
SHA512

600c03b4eaabfdb8958d4c914a7dfc2ee716b20c74302202bd0b5be4f61ace171078c30a4665faca289736c26650bc38ac54c3b302d87923a3de0bf63c54a923
SSDEEP

12288:gzy6rRxElbpnfkjuVtPuVcG6YO/uV1ObuVtEnvysf1Q1TkAQTutHh:z6rTkbp8iVtGVcG9pV1OqVtEnSQT0B

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3385717845-2518323428-350143044-1000\Software\Microsoft\Internet Explorer\Main	7bd55c90c474c5811bb4eb38bc0dde88c3230240ddbec4fb891175ff56d9c3aa.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1352	7bd55c90c474c5811bb4eb38bc0dde88c3230240ddbec4fb891175ff56d9c3aa.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1352	7bd55c90c474c5811bb4eb38bc0dde88c3230240ddbec4fb891175ff56d9c3aa.exe
1352	7bd55c90c474c5811bb4eb38bc0dde88c3230240ddbec4fb891175ff56d9c3aa.exe

C:\Users\Admin\AppData\Local\Temp\7bd55c90c474c5811bb4eb38bc0dde88c3230240ddbec4fb891175ff56d9c3aa.exe
"C:\Users\Admin\AppData\Local\Temp\7bd55c90c474c5811bb4eb38bc0dde88c3230240ddbec4fb891175ff56d9c3aa.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1352

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1352-54-0x0000000075091000-0x0000000075093000-memory.dmp

Filesize
8KB

Download