a93bd44b2c5b2a65cd8a6b4ed1feef00c7174e4868e293e33505abd2368c46b2

Analysis

max time kernel
101s
max time network
46s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
06/08/2023, 20:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ShaiyaEP3.com Client English.exe
Size

988.7MB
MD5

f2e9b42caf213a43b65e81d6bf039c70
SHA1

17e1759c09ea883eed301d66eadc4f757d4df100
SHA256

a93bd44b2c5b2a65cd8a6b4ed1feef00c7174e4868e293e33505abd2368c46b2
SHA512

411e7c17b2aa5d835b98f51c325bf65677a6a1153158aa60625bdb381d3d3fb25bc615d8374cadf350f2b53dfda6455c619c3d3eb8b15c76cd54e9833be07eb5
SSDEEP

25165824:b8JV4MM83dixcMYGGPcEOh6uNYuXAg+ZoiQJ+rS4uD3R:bLMb3UXYgF9NBATZowDuDR

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1024678951-1535676557-2778719785-1000\Software\Microsoft\Internet Explorer\Main	ShaiyaEP3.com Client English.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2836	ShaiyaEP3.com Client English.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2836	ShaiyaEP3.com Client English.exe
2836	ShaiyaEP3.com Client English.exe

C:\Users\Admin\AppData\Local\Temp\ShaiyaEP3.com Client English.exe
"C:\Users\Admin\AppData\Local\Temp\ShaiyaEP3.com Client English.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2836

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads