b420bbe5054b2b8d0ab7de7a2f266cc382dac45d0d6cf06cfcf056073cb14c03

Analysis

max time kernel
141s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20230621-en
resource tags

arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
submitted
02/07/2023, 02:39

Target

All-In-One-Downloader.exe
Size

76KB
MD5

187d0dc65dd52fb813c9ebb6613be6b6
SHA1

88211a9b3880def192f768bf7ee28e6a880d0837
SHA256

b420bbe5054b2b8d0ab7de7a2f266cc382dac45d0d6cf06cfcf056073cb14c03
SHA512

3a48d2511f8b7e39b13959143f02ceab3b0023d88c86a381262e384792f328dc6da8c372b43f09af2e0885d50a7e64df31d26dc44eb1d95d2b07706d808b01bb
SSDEEP

1536:eZ+1ppppppppppppppppzSpppppppppppppppppppppppppppppppppppppqpppo:FY2KVbYNdvc

Score

1^/10

Modifies Internet Explorer settings 1 TTPs 9 IoCs

Modify Registry

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4129409437-3162877118-52503038-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage	All-In-One-Downloader.exe
Key created	\REGISTRY\USER\S-1-5-21-4129409437-3162877118-52503038-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total	All-In-One-Downloader.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4129409437-3162877118-52503038-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\y2mate.tools\NumberOfSubdomains = "1"	All-In-One-Downloader.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4129409437-3162877118-52503038-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\Total\ = "32"	All-In-One-Downloader.exe
Key created	\REGISTRY\USER\S-1-5-21-4129409437-3162877118-52503038-1000\Software\Microsoft\Internet Explorer\DOMStorage\pc.y2mate.tools	All-In-One-Downloader.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4129409437-3162877118-52503038-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\pc.y2mate.tools\ = "32"	All-In-One-Downloader.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4129409437-3162877118-52503038-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\y2mate.tools\Total = "32"	All-In-One-Downloader.exe
Key created	\REGISTRY\USER\S-1-5-21-4129409437-3162877118-52503038-1000\Software\Microsoft\Internet Explorer\DOMStorage\y2mate.tools	All-In-One-Downloader.exe
Key created	\REGISTRY\USER\S-1-5-21-4129409437-3162877118-52503038-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\y2mate.tools	All-In-One-Downloader.exe

Suspicious use of SetWindowsHookEx 3 IoCs

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact