d52f67a99e453c41e3b1618785d3bf973c7c05bd97b62bd14b802ad416279c85

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12-10-2023 02:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d52f67a99e453c41e3b1618785d3bf973c7c05bd97b62bd14b802ad416279c85.exe
Size

768KB
MD5

4736236a05fa98a6c8e4ee7baf2cc526
SHA1

7093e73d452ee6fc44e1bc759c268cfce0becd0b
SHA256

d52f67a99e453c41e3b1618785d3bf973c7c05bd97b62bd14b802ad416279c85
SHA512

e0a9ba8c8b75d781ed76d6ce06ab4279d703421a9cdf1a60e84f1dee5d890fbc3f0b1ecfaf9ad48417fffae97fa1593e1cac005d86f99f7ab1cd031e9bc39439
SSDEEP

12288:Mscm77zMcmvwVL1EVX3faTvOs1V8r6uF29:MyxmYVOVnfyvBz8r6uF29

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer start page 1 TTPs 1 IoCs

stealer

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2180306848-1874213455-4093218721-1000\Software\Microsoft\Internet Explorer\Main\Start Page = "http://www.wz123.com/?mip16"	d52f67a99e453c41e3b1618785d3bf973c7c05bd97b62bd14b802ad416279c85.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2988	d52f67a99e453c41e3b1618785d3bf973c7c05bd97b62bd14b802ad416279c85.exe
2988	d52f67a99e453c41e3b1618785d3bf973c7c05bd97b62bd14b802ad416279c85.exe

C:\Users\Admin\AppData\Local\Temp\d52f67a99e453c41e3b1618785d3bf973c7c05bd97b62bd14b802ad416279c85.exe
"C:\Users\Admin\AppData\Local\Temp\d52f67a99e453c41e3b1618785d3bf973c7c05bd97b62bd14b802ad416279c85.exe"
1⤵
- Modifies Internet Explorer start page
- Suspicious use of SetWindowsHookEx
PID:2988

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads