4e7d914dd07b244c6e4a403c70fbcd3335ac2cc690d4efb41b206b17da3f453d

General

Target

6d2e9485d9c44cb1485ed47f6012c8bf.exe
Size

584KB
MD5

6d2e9485d9c44cb1485ed47f6012c8bf
SHA1

44f23385f60805d6c4ed1616399af1fd9206499b
SHA256

4e7d914dd07b244c6e4a403c70fbcd3335ac2cc690d4efb41b206b17da3f453d
SHA512

d5ef33af1c79cec17c3e493e79074ca2128305e0e1143e8d0d05e3993b4b955ee813103c5a02f87610a7a72a8bf1467a4ca01f10eb109697ba737bbf201f9e7f
SSDEEP

12288:Cwj4+HHBpZwQFWiXy5mqHoV5KrAoy7zxkw4GyFWoG9CK3v:bhnflFWiXy5mqHw4Ti+GyFWZj3v

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 17 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2220-0-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-80-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-1-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-150-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-151-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-152-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-153-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-156-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-157-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-158-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-160-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-161-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-162-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-163-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-164-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-165-0x0000000000400000-0x0000000000521000-memory.dmp	upx
behavioral1/memory/2220-166-0x0000000000400000-0x0000000000521000-memory.dmp	upx

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	6d2e9485d9c44cb1485ed47f6012c8bf.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2220	6d2e9485d9c44cb1485ed47f6012c8bf.exe
2220	6d2e9485d9c44cb1485ed47f6012c8bf.exe

C:\Users\Admin\AppData\Local\Temp\6d2e9485d9c44cb1485ed47f6012c8bf.exe
"C:\Users\Admin\AppData\Local\Temp\6d2e9485d9c44cb1485ed47f6012c8bf.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2220

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2220-0-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-81-0x0000000000320000-0x0000000000321000-memory.dmp

Filesize
4KB

Download
memory/2220-80-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-1-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-121-0x0000000004630000-0x0000000004640000-memory.dmp

Filesize
64KB

Download
memory/2220-150-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-151-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-152-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-154-0x0000000000320000-0x0000000000321000-memory.dmp

Filesize
4KB

Download
memory/2220-153-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-155-0x0000000004630000-0x0000000004640000-memory.dmp

Filesize
64KB

Download
memory/2220-156-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-157-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-158-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-160-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-161-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-162-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-163-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-164-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-165-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-166-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-167-0x0000000000400000-0x0000000000521000-memory.dmp

Filesize
1.1MB

Download
memory/2220-168-0x0000000004630000-0x0000000004635000-memory.dmp

Filesize
20KB

Download

Analysis

Sharing