Overview

overview

6

Static

static

3

1ec2440136...98.exe

windows7-x64

6

1ec2440136...98.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    140s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-12-2023 12:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1ec244013645bbd13f7dd27b7157b998.exe

  • Size

    77KB

  • MD5

    1ec244013645bbd13f7dd27b7157b998

  • SHA1

    526a9a2c7a08ca5c81e035c4e76c46a6218fb077

  • SHA256

    cfec2e22717624bbba66cf93550d5eaba601d902b5afabb5a6cec52a9a4c2e44

  • SHA512

    1e77dee04c30f01419a0a06e9b4b7abb4760291ee70c8d5f700a1852dc64769665391be68d264f09294f3209deaf5a21d48a31b65dea21479c748df74059fb72

  • SSDEEP

    1536:sz//JoioC/LaX+8tVx+GQxP3cBFuAQhw8j7KrVp+os7yyLxUwU/XpM:cJoioV3nxny3cqAON7KrVp+os7yKxU7M

Score
6/10
adwarepersistencestealer

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Installs/modifies Browser Helper Object 2 TTPs 1 IoCs

    BHOs are DLL modules which act as plugins for Internet Explorer.

    stealeradware
  • Drops file in Program Files directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1ec244013645bbd13f7dd27b7157b998.exe
    "C:\Users\Admin\AppData\Local\Temp\1ec244013645bbd13f7dd27b7157b998.exe"
    1⤵
    • Adds Run key to start application
    • Installs/modifies Browser Helper Object
    • Drops file in Program Files directory
    PID:2688

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2688-0-0x0000000000400000-0x0000000000418000-memory.dmp

    Filesize

    96KB

    Download

  • memory/2688-2-0x0000000000400000-0x0000000000418000-memory.dmp

    Filesize

    96KB

    Download