02eb8a30a7c45452444db129950d897b381959b3f13e7ba1f6237a743e92f9d8

Analysis

max time kernel
120s
max time network
138s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 14:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

26eab40ec40974144997da2e2a7fc6ab.exe
Size

668KB
MD5

26eab40ec40974144997da2e2a7fc6ab
SHA1

9baebd99075304a0990384ce22d4357e09d7c0ea
SHA256

02eb8a30a7c45452444db129950d897b381959b3f13e7ba1f6237a743e92f9d8
SHA512

77e0a8c7fc113c359d68dbf477d779cea4f87632cc3a519bf68de923c2a834bc2003b8dc7ce24ee41e03ac6d3e3aa306c9782a4b4640eadcd0d9ef152fc3a1c4
SSDEEP

12288:vutrzh9xOXksg8a5gnBCV8w5NkFvHFjD8cPxUW++r97zeWGtjU+jZ4IDcpIcIypl:vutr5OUsM5CBCG4NkFft8GUa5ettQ+V+

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Internet Explorer\Main	26eab40ec40974144997da2e2a7fc6ab.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2012	26eab40ec40974144997da2e2a7fc6ab.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2012	26eab40ec40974144997da2e2a7fc6ab.exe
2012	26eab40ec40974144997da2e2a7fc6ab.exe

C:\Users\Admin\AppData\Local\Temp\26eab40ec40974144997da2e2a7fc6ab.exe
"C:\Users\Admin\AppData\Local\Temp\26eab40ec40974144997da2e2a7fc6ab.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2012

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads