28e1014d9968522bfbd746a443ce23f24290d92754c1b6135e097b5b16edb82a

Analysis

max time kernel
140s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 08:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1367c33d892d072ada6cf760471b7b64.exe
Size

9.5MB
MD5

1367c33d892d072ada6cf760471b7b64
SHA1

76ba6190f735db73891d4c7b855bed614320bb40
SHA256

28e1014d9968522bfbd746a443ce23f24290d92754c1b6135e097b5b16edb82a
SHA512

58a7247bc68cbdce3d4531641cd812ecf93c600d60f41c4bf800480bed88d778cf2f06ffb04a61895bfb5572460688642f3d69e40a549a5ccd1de9dc46745ac0
SSDEEP

196608:3sOMsIFgAWa19RKGDUkDVzL06bx9uEW4AAq/2HwTKWwwbMvOEgOu8hiuq:3sObRvkDVzwWx9TJr02Q2wbqOHv8AH

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3818056530-936619650-3554021955-1000\Software\Microsoft\Internet Explorer\Main	1367c33d892d072ada6cf760471b7b64.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2012	1367c33d892d072ada6cf760471b7b64.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2012	1367c33d892d072ada6cf760471b7b64.exe
2012	1367c33d892d072ada6cf760471b7b64.exe

C:\Users\Admin\AppData\Local\Temp\1367c33d892d072ada6cf760471b7b64.exe
"C:\Users\Admin\AppData\Local\Temp\1367c33d892d072ada6cf760471b7b64.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2012

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2012-9-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download