Analysis
-
max time kernel
128s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
07/06/2023, 19:16
Static task
static1
Behavioral task
behavioral1
Sample
5c7a6babae949555a7d59977f3298800c9cb64f57d0dc23955402085752967a5.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5c7a6babae949555a7d59977f3298800c9cb64f57d0dc23955402085752967a5.exe
Resource
win10v2004-20230220-en
General
-
Target
5c7a6babae949555a7d59977f3298800c9cb64f57d0dc23955402085752967a5.exe
-
Size
4.7MB
-
MD5
58f1b9d60750decbd57345c020b2843f
-
SHA1
efbd0a966856ac4615f3cf300c429f20133549f0
-
SHA256
5c7a6babae949555a7d59977f3298800c9cb64f57d0dc23955402085752967a5
-
SHA512
72397b3e2416a51bf42fec0b956ae90218c5c7b43e6a0bcf012fdb4007d89e39af903fc51b8c63bbe3e6c392685c34bc08beba7cb1c5ed85d124c48a1d912396
-
SSDEEP
98304:r90h6LeJqyMC2NAeOchtUV9X4rO0tTno1hb7IWwkKXKg/d56U:x3C2NFt49XSOKT0hb7InkKXLr6U
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1283023626-844874658-3193756055-1000\Software\Microsoft\Internet Explorer\Main 5c7a6babae949555a7d59977f3298800c9cb64f57d0dc23955402085752967a5.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1344 5c7a6babae949555a7d59977f3298800c9cb64f57d0dc23955402085752967a5.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1344 5c7a6babae949555a7d59977f3298800c9cb64f57d0dc23955402085752967a5.exe 1344 5c7a6babae949555a7d59977f3298800c9cb64f57d0dc23955402085752967a5.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5c7a6babae949555a7d59977f3298800c9cb64f57d0dc23955402085752967a5.exe"C:\Users\Admin\AppData\Local\Temp\5c7a6babae949555a7d59977f3298800c9cb64f57d0dc23955402085752967a5.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1344