77f86a7bec6b5fd2a776b29b05f3d22f60c46d88a4ef8a4b7cf049a71094df6c

General

Target

42add2e4690f922173250d9957828e55.exe
Size

80KB
MD5

42add2e4690f922173250d9957828e55
SHA1

39215cdf71d85a6c22637bcc80da9afaf2b8cd7f
SHA256

77f86a7bec6b5fd2a776b29b05f3d22f60c46d88a4ef8a4b7cf049a71094df6c
SHA512

9a9f4452ef0992a3657c7dd8d3bee839f8b43129b925c97d3993f42e90933e97cbdd3979318a6371f7fd41511119b9a67b37059019975621ba3875355f4a4059
SSDEEP

1536:VPfh7bUSOhI/j7vinaFPNo1acJr8WyS07:vUBI//VFCacJrES07

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\6hc3j5vakv = "C:\\Users\\Admin\\AppData\\Local\\Temp\\42add2e4690f922173250d9957828e55.exe"	42add2e4690f922173250d9957828e55.exe

Modifies Internet Explorer settings 1 TTPs 24 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluii_1 = "searchmyrequest.com"	42add2e4690f922173250d9957828e55.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluii_Id_2 = "0"	42add2e4690f922173250d9957828e55.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluii_Date_2	42add2e4690f922173250d9957828e55.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluii_Date_3	42add2e4690f922173250d9957828e55.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluii_Id_4 = "0"	42add2e4690f922173250d9957828e55.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctlid = "376778"	42add2e4690f922173250d9957828e55.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluii_Id_1 = "1"	42add2e4690f922173250d9957828e55.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluii_3 = "msupdater.net"	42add2e4690f922173250d9957828e55.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctlui = "0"	42add2e4690f922173250d9957828e55.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctlui = "2"	42add2e4690f922173250d9957828e55.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluii_Id_3 = "1"	42add2e4690f922173250d9957828e55.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluii_Id_4 = "1"	42add2e4690f922173250d9957828e55.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctldate = "5-1-2024"	42add2e4690f922173250d9957828e55.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctlguid = "{2CE99779-80C8-4EFB-AF80-6D72D01344E7}"	42add2e4690f922173250d9957828e55.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctlui = "1"	42add2e4690f922173250d9957828e55.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluii_2 = "msupdater.com"	42add2e4690f922173250d9957828e55.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluii_Id_3 = "0"	42add2e4690f922173250d9957828e55.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluii_Id_2 = "1"	42add2e4690f922173250d9957828e55.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctlui = "3"	42add2e4690f922173250d9957828e55.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctltc = "0"	42add2e4690f922173250d9957828e55.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluc = "4"	42add2e4690f922173250d9957828e55.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluii_Date_1	42add2e4690f922173250d9957828e55.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluii_4 = "msupdater.org"	42add2e4690f922173250d9957828e55.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\ctluii_Date_4	42add2e4690f922173250d9957828e55.exe

C:\Users\Admin\AppData\Local\Temp\42add2e4690f922173250d9957828e55.exe
"C:\Users\Admin\AppData\Local\Temp\42add2e4690f922173250d9957828e55.exe"
1⤵
- Adds Run key to start application
- Modifies Internet Explorer settings
PID:2276

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1

T1547

Registry Run Keys / Startup Folder

1

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1

T1547

Registry Run Keys / Startup Folder

1

T1547.001

Defense Evasion

Modify Registry

2

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2276-0-0x0000000000400000-0x000000000050D000-memory.dmp

Filesize
1.1MB

Download
memory/2276-18-0x0000000000400000-0x000000000050D000-memory.dmp

Filesize
1.1MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads