eadaf26df948f0fd541f297e2f0bad435aa4bee5c97e4324ad767dacca77e29d

max time kernel
285s
max time network
413s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
09-05-2023 19:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

trojan-leaks-main/HorrorTrojan123.exe
Size

8.4MB
MD5

2b71cc65cc949cfce47107383f9bce29
SHA1

a57d725a4cb391d4ea02a3c4b5680935f72669cf
SHA256

a513325690cf5bf2302ccc34e2264a8a48270de49a1863c018afed246472e37a
SHA512

158d6e92839b4d83827832e870b4e3d2c8d388894dd5a194abbfcf4ad228fea7e83543b6278cedd6fb2b92801ba102178a962c4d4f0868e1aac62f50d668a824
SSDEEP

196608:5MBEQlWRG1ywPTazB6S5KJ7lsL2jXdFTOJkJlJ0dN:qBEQl2G1yzB6HJ7GSjXjGx

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

Processes:

HorrorTrojan123.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-1283023626-844874658-3193756055-1000\Software\Microsoft\Internet Explorer\Main	HorrorTrojan123.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

HorrorTrojan123.exe

pid process

820 HorrorTrojan123.exe
Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

HorrorTrojan123.exe

pid process

820 HorrorTrojan123.exe
820 HorrorTrojan123.exe

pid	process
820	HorrorTrojan123.exe

pid	process
820	HorrorTrojan123.exe
820	HorrorTrojan123.exe

C:\Users\Admin\AppData\Local\Temp\trojan-leaks-main\HorrorTrojan123.exe
"C:\Users\Admin\AppData\Local\Temp\trojan-leaks-main\HorrorTrojan123.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:820

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads