f5771b013f58454cc6e8fe47d692ae4cdc595b164ddaece74ce29fac50578e6a

Analysis

max time kernel
120s
max time network
130s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11/10/2023, 09:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

26.09.2023.exe
Size

8.8MB
MD5

328277b89e0f097fd6ce929f7d988ae2
SHA1

6469f24f911a5708053e52b1b66646feed0ccbe3
SHA256

f5771b013f58454cc6e8fe47d692ae4cdc595b164ddaece74ce29fac50578e6a
SHA512

c568dac8a069f9dea922dbf2b5c294fa2af97e6a749bd8b0cf492cda73bca874c4ad6d2a53c083a74227f8e926b90360547f31a88f3590700cc571ee9315dc68
SSDEEP

196608:PueT6PY18030pWfv0WvlI/hLmnMKC4pSyas/mv+K2k:juUREUv0Wvl8mnBCiSns/mb

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2180306848-1874213455-4093218721-1000\Software\Microsoft\Internet Explorer\Main	26.09.2023.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2452	26.09.2023.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2452	26.09.2023.exe
2452	26.09.2023.exe

C:\Users\Admin\AppData\Local\Temp\26.09.2023.exe
"C:\Users\Admin\AppData\Local\Temp\26.09.2023.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2452

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads