e194e467c749fc2f5277a27ff0e91f6a7a8a3bc05899a5e5c4d176651fc94faa

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 17:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7f7c5af21fc29cf32ffec0bc5dcc7da8.exe
Size

820KB
MD5

7f7c5af21fc29cf32ffec0bc5dcc7da8
SHA1

fbe23439acd155b8f2b86e456d7a8ccb225a50b9
SHA256

e194e467c749fc2f5277a27ff0e91f6a7a8a3bc05899a5e5c4d176651fc94faa
SHA512

5c031d171bbb2a42c379a391be57e5482e74b8e2f09d67af5f81fcc0bfba22ef239ee0fd79d361c1f7dfb85a8cb17769b1180e11877ff235e92d184fbe7cfea6
SSDEEP

12288:cnSkQ2kEuOvqAElQZ4g9Mg/G8kSMM2LeHRwxaUPKIkLgbrmZ:cnSkQ2kEuMGgCg/lkSMM2KQKIksbiZ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main	7f7c5af21fc29cf32ffec0bc5dcc7da8.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2652	7f7c5af21fc29cf32ffec0bc5dcc7da8.exe
2652	7f7c5af21fc29cf32ffec0bc5dcc7da8.exe
2652	7f7c5af21fc29cf32ffec0bc5dcc7da8.exe
2652	7f7c5af21fc29cf32ffec0bc5dcc7da8.exe

C:\Users\Admin\AppData\Local\Temp\7f7c5af21fc29cf32ffec0bc5dcc7da8.exe
"C:\Users\Admin\AppData\Local\Temp\7f7c5af21fc29cf32ffec0bc5dcc7da8.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2652

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...