5abc7f83cf419b0cd5c66f9fd7fe87c8541110ced2ec250e084c79593f385485

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
01/09/2023, 07:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5abc7f83cf419b0cd5c66f9fd7fe87c8541110ced2ec250e084c79593f385485.exe
Size

4.8MB
MD5

9d407a1ad7c186a662b0fbd16bda6cdc
SHA1

0867c5e9ca64944c9125e2f716270b360e75278d
SHA256

5abc7f83cf419b0cd5c66f9fd7fe87c8541110ced2ec250e084c79593f385485
SHA512

a45d4ae6680c0fb1864041dc18d0e0fe96ed76f7580485fc5d2ffd13bf73d4067fa8f3e3bd07212e9ece7b8dbed8ea2304eb413acc27dd9e52249c5a79f49d3a
SSDEEP

98304:+oJ9IN7eLJX0EdGQucAjBmw6by3jXVYtLicdotaPf1F4fqmHKV9:j9a7AFdGQ/7bcMLr2UgK7

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-686452656-3203474025-4140627569-1000\Software\Microsoft\Internet Explorer\Main	5abc7f83cf419b0cd5c66f9fd7fe87c8541110ced2ec250e084c79593f385485.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3016	5abc7f83cf419b0cd5c66f9fd7fe87c8541110ced2ec250e084c79593f385485.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3016	5abc7f83cf419b0cd5c66f9fd7fe87c8541110ced2ec250e084c79593f385485.exe
3016	5abc7f83cf419b0cd5c66f9fd7fe87c8541110ced2ec250e084c79593f385485.exe

C:\Users\Admin\AppData\Local\Temp\5abc7f83cf419b0cd5c66f9fd7fe87c8541110ced2ec250e084c79593f385485.exe
"C:\Users\Admin\AppData\Local\Temp\5abc7f83cf419b0cd5c66f9fd7fe87c8541110ced2ec250e084c79593f385485.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3016

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads