e2a36ae9fc179fd3770c096b01b563ee0c27727b77e4d618d9c2b58fbe313785

Analysis

max time kernel
140s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 23:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Fighter FX 8.0/Status Checker.exe
Size

54KB
MD5

c308f8db3c8eaa113396b94d3d5186dd
SHA1

e1973791abb8a760f8e09f0072ea395019ec0a20
SHA256

f7c7856b619af0abf32a166484bbd2daf9ee0b6f0f93b5f1f3496afeb7484f62
SHA512

c29b9258a8d53680c8eef3d1f9736a2c16bd630a89b70bc3c9e17484ac77ebe0adf1dd8264a9fc65e46d288ae4051f822240b86f0efa236c213683109276c3ec
SSDEEP

1536:W7k3LCsEEr9TLxcPDEcP8y8LP59tumkFP:F3+sNVyf8LB9tgZ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral5/memory/1728-0-0x0000000000400000-0x0000000000424000-memory.dmp	upx
behavioral5/memory/1728-9-0x0000000000400000-0x0000000000424000-memory.dmp	upx

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3601492379-692465709-652514833-1000\Software\Microsoft\Internet Explorer\Main	Status Checker.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1728	Status Checker.exe
1728	Status Checker.exe

C:\Users\Admin\AppData\Local\Temp\Fighter FX 8.0\Status Checker.exe
"C:\Users\Admin\AppData\Local\Temp\Fighter FX 8.0\Status Checker.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1728

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1728-0-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download
memory/1728-1-0x0000000000240000-0x0000000000264000-memory.dmp

Filesize
144KB

Download
memory/1728-2-0x0000000000240000-0x0000000000264000-memory.dmp

Filesize
144KB

Download
memory/1728-9-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download
memory/1728-11-0x0000000000240000-0x0000000000264000-memory.dmp

Filesize
144KB

Download
memory/1728-12-0x0000000000240000-0x0000000000264000-memory.dmp

Filesize
144KB

Download
memory/1728-13-0x0000000000240000-0x0000000000264000-memory.dmp

Filesize
144KB

Download