6a7fb7babee7d9579faf32e189d329a4937ae28d5a05ff100cc89723aedce4cd

Analysis

max time kernel
128s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 16:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7ba98a27cc391fa6ecd84be5bbcaa28c.exe
Size

2.0MB
MD5

7ba98a27cc391fa6ecd84be5bbcaa28c
SHA1

24165bfd2587793fa83fb1a743192fc652cfc436
SHA256

6a7fb7babee7d9579faf32e189d329a4937ae28d5a05ff100cc89723aedce4cd
SHA512

9bda91171b71f0de3028e7d5c5761fa409d5120064fef43ac0a723f02b82e69254796ba5e9ab4be28180927dbe0d5b7b3559eefe821fe77a57bdab73881c8201
SSDEEP

49152:UZFj2a3GN+Bk32aKpxdk3/exXhYDiXwlwOja5KLlIy8A1UfMROb:UrB3xk3wpxdk3/exXhYDiXwlw3clIy5y

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	7ba98a27cc391fa6ecd84be5bbcaa28c.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	7ba98a27cc391fa6ecd84be5bbcaa28c.exe
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main	7ba98a27cc391fa6ecd84be5bbcaa28c.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2252	7ba98a27cc391fa6ecd84be5bbcaa28c.exe
2252	7ba98a27cc391fa6ecd84be5bbcaa28c.exe
2252	7ba98a27cc391fa6ecd84be5bbcaa28c.exe
2252	7ba98a27cc391fa6ecd84be5bbcaa28c.exe

C:\Users\Admin\AppData\Local\Temp\7ba98a27cc391fa6ecd84be5bbcaa28c.exe
"C:\Users\Admin\AppData\Local\Temp\7ba98a27cc391fa6ecd84be5bbcaa28c.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2252

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\Temp\111153\index.html

Filesize
2KB

MD5
6bc60cedf4815db36fd3e2cd8e021b93

SHA1
31ff0cb534b5dfb8b1fd31322696cb098c284e14

SHA256
ffbe1dfe49a3716fb133c27b4ee438536e5e5e5c521e819e902670e08239e00f

SHA512
201aba3fdaf1aa72462ff00d5e21b0101fff68188164dc66b17b9bee6401d5864900c85c14c1e393531f36d250626f0a78d21bcf26dff23fa2cf5193d2f7d379

Download Submit