4f37bd5728322e75cd07a681c638c46df1f14786eaa4fd61f158f13bfc88971c

Analysis

max time kernel
33s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
09/02/2023, 08:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4f37bd5728322e75cd07a681c638c46df1f14786eaa4fd61f158f13bfc88971c.exe
Size

647KB
MD5

58fddd99e635ffc5a6c4bb793e5abd93
SHA1

7083857edaf81a5a8fef6e3b95be4643e70da136
SHA256

4f37bd5728322e75cd07a681c638c46df1f14786eaa4fd61f158f13bfc88971c
SHA512

926dd88a301c8ef502a514344a1b27315157545a17e15aa5e8eae881d44a47509bbc8da2123b67f8b114d3b20316a523358db1b0dcb5e943c84f434f7bc3f85f
SSDEEP

12288:Rr3ZBIRqZaX7MKTXCEyMOV3c1CLxlegY6Rw6ee9VT:lZB2qE7M4N8V3Hiv6395

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2292972927-2705560509-2768824231-1000\Software\Microsoft\Internet Explorer\Main	4f37bd5728322e75cd07a681c638c46df1f14786eaa4fd61f158f13bfc88971c.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1696	4f37bd5728322e75cd07a681c638c46df1f14786eaa4fd61f158f13bfc88971c.exe
1696	4f37bd5728322e75cd07a681c638c46df1f14786eaa4fd61f158f13bfc88971c.exe

C:\Users\Admin\AppData\Local\Temp\4f37bd5728322e75cd07a681c638c46df1f14786eaa4fd61f158f13bfc88971c.exe
"C:\Users\Admin\AppData\Local\Temp\4f37bd5728322e75cd07a681c638c46df1f14786eaa4fd61f158f13bfc88971c.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1696

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1696-54-0x0000000075201000-0x0000000075203000-memory.dmp

Filesize
8KB

Download