d471bd740687a929128b4487642a4a562fab67bb6ccb9f56f95b5d23116eef63

Analysis

max time kernel
171s
max time network
191s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 05:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

108374d9987538d75db16153fbc46dc2.exe
Size

156KB
MD5

108374d9987538d75db16153fbc46dc2
SHA1

b6b2782646661a42858838c90d7c546c868238b8
SHA256

d471bd740687a929128b4487642a4a562fab67bb6ccb9f56f95b5d23116eef63
SHA512

494a7167dba9b47277ee6aa7d7a9270dd2ef402f52da15e229a55f019d22393f54b89125360e61d02b9c3ce1d0233f7a2773a6274b20a40b02f6ff00d417a0f4
SSDEEP

3072:AgMcml0dvQ1hiH0VFo/UHAaHgjCEzdPlzFHWgygN0eHVK8/ULxPo2558F:ycmlkvQ1htFu7aHgjz9lzFHWgjN35M1m

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main	108374d9987538d75db16153fbc46dc2.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2992	108374d9987538d75db16153fbc46dc2.exe
2992	108374d9987538d75db16153fbc46dc2.exe

C:\Users\Admin\AppData\Local\Temp\108374d9987538d75db16153fbc46dc2.exe
"C:\Users\Admin\AppData\Local\Temp\108374d9987538d75db16153fbc46dc2.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2992

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2992-0-0x0000000000400000-0x000000000043B000-memory.dmp

Filesize
236KB

Download
memory/2992-1-0x0000000000240000-0x0000000000266000-memory.dmp

Filesize
152KB

Download
memory/2992-2-0x0000000000400000-0x000000000043B000-memory.dmp

Filesize
236KB

Download
memory/2992-14-0x0000000000400000-0x000000000043B000-memory.dmp

Filesize
236KB

Download