Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26-12-2023 15:35
Behavioral task
behavioral1
Sample
795773c09813a3e0159aabee6a2de283.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
795773c09813a3e0159aabee6a2de283.exe
Resource
win10v2004-20231215-en
General
-
Target
795773c09813a3e0159aabee6a2de283.exe
-
Size
87KB
-
MD5
795773c09813a3e0159aabee6a2de283
-
SHA1
6e3b1e9bc5c6a99417481276904e869ce3d3fbef
-
SHA256
98c613376e9087dac1e96e307881611c2dda0ae2d85246ca8393e5370ef3f745
-
SHA512
912248fe8800b0031c977561486b4a61e39fbd00cd4100b8a02c161cc9ea36b60d53c8023a4c0a503962dac960760aadea59883ba9896fe2d4b1d264eb582373
-
SSDEEP
384:Il94MDefu8RDaDlwv12zAv3XQ5CgZSf9P25gkOYBSsmnlPnz:Il94MW+Duv12zeOCgZm9YdknVz
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2132-0-0x0000000000400000-0x0000000000417000-memory.dmp upx behavioral1/memory/2132-17-0x0000000000400000-0x0000000000417000-memory.dmp upx behavioral1/memory/2132-18-0x0000000000320000-0x0000000000330000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main 795773c09813a3e0159aabee6a2de283.exe -
Modifies Internet Explorer start page 1 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2444714103-3190537498-3629098939-1000\Software\Microsoft\Internet Explorer\Main\Start Page = "www.otherchance.com/?rid=881" 795773c09813a3e0159aabee6a2de283.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
258B
MD566ab49ea89bc894b24751248ae430348
SHA19d667d4033f381e4d40ee7a5271a21f5846d6edf
SHA256942bb187a5ae10e2434c2cd8dd843c5be1f2227801fba88d00c0b83fd94b5b2e
SHA51242c9add6bfd0b997e9f6fc04b761a557c1120325494877e493a788fddc1b13a783e7de7872e5139441cf6d6f13a343ccb479ab0d67f235cd208c13c2dd9a47cf