c2542596d8d7612ec18b2c0dd833791847da4393b7797c5d2fc3c50ac71996a2

Analysis

max time kernel
129s
max time network
31s
platform
windows7_x64
resource
win7-20230621-en
resource tags

arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
submitted
29/06/2023, 19:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c2542596d8d7612ec18b2c0dd833791847da4393b7797c5d2fc3c50ac71996a2.exe
Size

3.2MB
MD5

398e7f0f89088fb90f407fbe6824f6d3
SHA1

4f90b5bfc3fb7d8fb25e94778f44a856b7c799f0
SHA256

c2542596d8d7612ec18b2c0dd833791847da4393b7797c5d2fc3c50ac71996a2
SHA512

5a4b1c620e9465a7eae0a1430bbf10467d852ebaa3da362e883acc2628451b29f33f67c80fb92d60845e380a345e16a18de0eccb23213b103ffe7e27036b739e
SSDEEP

49152:JS4PQRgR2wPQRgR23PQRgR2q4FATD4Pnk5TrvAQoipIx46WP2Ac4W/tiXu5v6JUs:YbsSsFs1Fsorvoi0TW+v44PsR

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3419557010-3639509551-242374962-1000\Software\Microsoft\Internet Explorer\Main	c2542596d8d7612ec18b2c0dd833791847da4393b7797c5d2fc3c50ac71996a2.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1508	c2542596d8d7612ec18b2c0dd833791847da4393b7797c5d2fc3c50ac71996a2.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1508	c2542596d8d7612ec18b2c0dd833791847da4393b7797c5d2fc3c50ac71996a2.exe
1508	c2542596d8d7612ec18b2c0dd833791847da4393b7797c5d2fc3c50ac71996a2.exe

C:\Users\Admin\AppData\Local\Temp\c2542596d8d7612ec18b2c0dd833791847da4393b7797c5d2fc3c50ac71996a2.exe
"C:\Users\Admin\AppData\Local\Temp\c2542596d8d7612ec18b2c0dd833791847da4393b7797c5d2fc3c50ac71996a2.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1508

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...