c4b01c678e3bbff4a304e04f864a5105c42db4dfd94f7956702f35751d20dd2d

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 04:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0eca27b5df0eba9585c4c278f80b1348.exe
Size

339KB
MD5

0eca27b5df0eba9585c4c278f80b1348
SHA1

7f00318011a852a8621eeccf20b7af55114a7b09
SHA256

c4b01c678e3bbff4a304e04f864a5105c42db4dfd94f7956702f35751d20dd2d
SHA512

b3398858476df6affe83343058056ed533b97024aa6f31689cd0f21ec8392fffaf0c49496fdf9cdbcfcb9f44bfdae50e167e4c27da34f9edcc6e46461bd6e24b
SSDEEP

6144:nKUTVniZzVW3caPk2ob4cegCzwFyWdwnvgA/7boErbE7ncXg/y/qXe1bQGG5ccuY:KwVniZzVWMis4cq4ysOvgIboEfE3z

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	0eca27b5df0eba9585c4c278f80b1348.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
952	0eca27b5df0eba9585c4c278f80b1348.exe
952	0eca27b5df0eba9585c4c278f80b1348.exe

C:\Users\Admin\AppData\Local\Temp\0eca27b5df0eba9585c4c278f80b1348.exe
"C:\Users\Admin\AppData\Local\Temp\0eca27b5df0eba9585c4c278f80b1348.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:952

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/952-0-0x00000000021E0000-0x00000000021E1000-memory.dmp

Filesize
4KB

Download