Analysis

  • max time kernel
    133s
  • max time network
    69s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2023, 19:14

General

  • Target

    Setup-VAS-en-US-12.0.1.136.exe

  • Size

    5.9MB

  • MD5

    94e5ec1b916ad62901f71ac272f17bdd

  • SHA1

    7e24c3e5313a707e1d52e3aedd583242ba6e8948

  • SHA256

    dc94f9efae8ebf2a046902570121d96710fd4e5c47d4c9da0029bfe214208c22

  • SHA512

    9ca27a438999439be6d70458211e03bbd4879dd6b5c3388685ecd90693a5f1271d3722a29610a066b8072caaaa4571feefa8a533ef16c12b08e4836ef2bdb1f6

  • SSDEEP

    98304:KuXA3WeCdmYU0Mh6rSL4POE028cZ9IwpZEIYi1ilH0TieeE3K7EI:KlxkUnB6028ckU4HD9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Setup-VAS-en-US-12.0.1.136.exe
    "C:\Users\Admin\AppData\Local\Temp\Setup-VAS-en-US-12.0.1.136.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1636

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1636-54-0x0000000074DA1000-0x0000000074DA3000-memory.dmp

          Filesize

          8KB