3da4eadcfc51d2a43c4433f6a151dff201d6da222cf45132988c1e154d0934f7

Analysis

max time kernel
141s
max time network
153s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 03:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

50ee6e48fbddefddda08f7b7c624f8da.exe
Size

108KB
MD5

50ee6e48fbddefddda08f7b7c624f8da
SHA1

4306bacd6e0283065d85bd68881c52c6ad186c50
SHA256

3da4eadcfc51d2a43c4433f6a151dff201d6da222cf45132988c1e154d0934f7
SHA512

a04783d3a3b7fa599c14d485a4eb1ebd349bf9bcdda28ac26140b5fe25d9d48709adf97f24a555b1686cf14d6eccdd3f8376fb7736184173721bf5ad6ccb4628
SSDEEP

1536:/LM6/Qb0DwR8Hgt+0hbdME3KpRUuGPUMC9vLJV7Bl25DmQZ:TM6/Qb0DwR8HgNhbdME3KLxGIz10DmQZ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main	50ee6e48fbddefddda08f7b7c624f8da.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2284	50ee6e48fbddefddda08f7b7c624f8da.exe
2284	50ee6e48fbddefddda08f7b7c624f8da.exe
2284	50ee6e48fbddefddda08f7b7c624f8da.exe

C:\Users\Admin\AppData\Local\Temp\50ee6e48fbddefddda08f7b7c624f8da.exe
"C:\Users\Admin\AppData\Local\Temp\50ee6e48fbddefddda08f7b7c624f8da.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2284

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2284-2-0x0000000004410000-0x0000000004585000-memory.dmp

Filesize
1.5MB

Download
memory/2284-4-0x0000000004590000-0x0000000004779000-memory.dmp

Filesize
1.9MB

Download