99ea5f1edc23ef056fe141331f0cf385bcba8be763d87acf4e142a9c18e2cf6d

Analysis

max time kernel
131s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
12/03/2023, 01:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

91c3750077a9c422ba3a5722cd3bf691.exe
Size

90.7MB
MD5

91c3750077a9c422ba3a5722cd3bf691
SHA1

7f67fa585ccb932e4497067addf11f864cc1a328
SHA256

99ea5f1edc23ef056fe141331f0cf385bcba8be763d87acf4e142a9c18e2cf6d
SHA512

33c749f6d185123796f463b03a2476885e470dad8b442dc0da4606c67295e5770c3c01290f05b588c7e47c9501223dd54b6896812e79ac4f7d30c48250aa2ca1
SSDEEP

1572864:/EvUvrCKGzOkUB6Ru5vgjmr/GV6ZrtAWadhFaVJF66iZnUzD2cLrHgrUmYLB9B15://rCKGzOkw6Ru5vGK/GVItAp3FaDjzDv

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3948302646-268491222-1934009652-1000\Software\Microsoft\Internet Explorer\Main	91c3750077a9c422ba3a5722cd3bf691.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1992	91c3750077a9c422ba3a5722cd3bf691.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1992	91c3750077a9c422ba3a5722cd3bf691.exe
1992	91c3750077a9c422ba3a5722cd3bf691.exe

C:\Users\Admin\AppData\Local\Temp\91c3750077a9c422ba3a5722cd3bf691.exe
"C:\Users\Admin\AppData\Local\Temp\91c3750077a9c422ba3a5722cd3bf691.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1992

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...