70fe01e8c71250190849a5b5ebad7ccf55620acb3c94600cc1e386ab55250f36

Analysis

max time kernel
122s
max time network
129s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 22:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

052f8d81e4a81cd1a7963bc2e330d8ae.exe
Size

40KB
MD5

052f8d81e4a81cd1a7963bc2e330d8ae
SHA1

14b44464878b1b6d81f116fb227ed4925123dbb8
SHA256

70fe01e8c71250190849a5b5ebad7ccf55620acb3c94600cc1e386ab55250f36
SHA512

479b7db279cca732e1f10c3f0653024bd2a3b221110d7784f06d1f31eff52d373d05ab1ec33f2231f8a46c7e7c8cdf1ae8d835756556868efed1374e8134082a
SSDEEP

768:h6mEVk3xi4170P6F6LlfSzrkH757A1aVvlfh:2siy0Hzh

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main	052f8d81e4a81cd1a7963bc2e330d8ae.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2960	052f8d81e4a81cd1a7963bc2e330d8ae.exe
2960	052f8d81e4a81cd1a7963bc2e330d8ae.exe
2960	052f8d81e4a81cd1a7963bc2e330d8ae.exe

C:\Users\Admin\AppData\Local\Temp\052f8d81e4a81cd1a7963bc2e330d8ae.exe
"C:\Users\Admin\AppData\Local\Temp\052f8d81e4a81cd1a7963bc2e330d8ae.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2960

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2960-2-0x0000000003020000-0x0000000004082000-memory.dmp

Filesize
16.4MB

Download