8f044193d29a716e8234b758304040545ebac2f521ba7c7a5473bf1160ea98dc

Analysis

max time kernel
140s
max time network
123s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 10:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

17e83a8f51b9f86d44ed63e3162f1163.exe
Size

4.2MB
MD5

17e83a8f51b9f86d44ed63e3162f1163
SHA1

d4a3aeb5c5061cc256ad3e02d61e6fa9012cdfa6
SHA256

8f044193d29a716e8234b758304040545ebac2f521ba7c7a5473bf1160ea98dc
SHA512

307778b09b34321dcaff9782aa0e52af7b75465785acc5983dfe6726344d086655118ccb7734e5ba63ba99123f8a220d2bb90ae6400db0a4f386233b19f7f302
SSDEEP

98304:pqW1D3GTUygrKWtoKGankexsSM9IokZZDx8KsDzdzGi7Em16l:41TUygrLtoK3kEs398ZZDx8Rz9516l

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	17e83a8f51b9f86d44ed63e3162f1163.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3044	17e83a8f51b9f86d44ed63e3162f1163.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3044	17e83a8f51b9f86d44ed63e3162f1163.exe
3044	17e83a8f51b9f86d44ed63e3162f1163.exe

C:\Users\Admin\AppData\Local\Temp\17e83a8f51b9f86d44ed63e3162f1163.exe
"C:\Users\Admin\AppData\Local\Temp\17e83a8f51b9f86d44ed63e3162f1163.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3044

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3044-9-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download