7767bbcfbf6f10fd5480a306e48fafa717b6068a7ca5b45a215abf12e5e39cbe

Analysis

max time kernel
192s
max time network
32s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
09-02-2023 09:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7767bbcfbf6f10fd5480a306e48fafa717b6068a7ca5b45a215abf12e5e39cbe.exe
Size

337KB
MD5

fbeac749a943b6e6318723f5bce81c3b
SHA1

62338d0b69964f49c906d99e8ddcb976e1de2ec3
SHA256

7767bbcfbf6f10fd5480a306e48fafa717b6068a7ca5b45a215abf12e5e39cbe
SHA512

547cd7be88f6d68214969a8f8354db1d432a66da8c73b5db6af3d19600752bfd9439e9119d7b928495107d2a2cecc4e6b65dff35390705b776de241681b9d1b8
SSDEEP

6144:hTouKrWBEu3/Z2lpGDHU3ykJ5T+tz1i4/D30oKP4:hToPWBv/cpGrU3ywT+twsYoKP4

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3406023954-474543476-3319432036-1000\Software\Microsoft\Internet Explorer\Main	7767bbcfbf6f10fd5480a306e48fafa717b6068a7ca5b45a215abf12e5e39cbe.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
548	7767bbcfbf6f10fd5480a306e48fafa717b6068a7ca5b45a215abf12e5e39cbe.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
548	7767bbcfbf6f10fd5480a306e48fafa717b6068a7ca5b45a215abf12e5e39cbe.exe
548	7767bbcfbf6f10fd5480a306e48fafa717b6068a7ca5b45a215abf12e5e39cbe.exe

C:\Users\Admin\AppData\Local\Temp\7767bbcfbf6f10fd5480a306e48fafa717b6068a7ca5b45a215abf12e5e39cbe.exe
"C:\Users\Admin\AppData\Local\Temp\7767bbcfbf6f10fd5480a306e48fafa717b6068a7ca5b45a215abf12e5e39cbe.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:548

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/548-54-0x00000000753D1000-0x00000000753D3000-memory.dmp

Filesize
8KB

Download