e7191959e7ef5390011ce848cb55701ae22663f791c9c4ed316738e32a43899d

Analysis

max time kernel
142s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
07-01-2024 14:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4948dfc1132bec64420b356341bb7b1d.exe
Size

258KB
MD5

4948dfc1132bec64420b356341bb7b1d
SHA1

97e746712dbbaa08cc1ff36524c41f96b09690b3
SHA256

e7191959e7ef5390011ce848cb55701ae22663f791c9c4ed316738e32a43899d
SHA512

dbdc9a770209d58fa4b850decac552ee303337e5c8d7218a1895bb6ff2aea194e664899e9a43561b47a3e4f754f4d56f64309f1d41dbd0e6b5775a08172ca48d
SSDEEP

3072:izNWMKKRZYchObK91C8sV6Xmoo4LEpYd6J2M7m2ZAml5axM7GKufzkxVjSLu5nNx:iZuuObR8sVImcyYd6J2MukCLfggG

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main	4948dfc1132bec64420b356341bb7b1d.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3064	4948dfc1132bec64420b356341bb7b1d.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3064	4948dfc1132bec64420b356341bb7b1d.exe
3064	4948dfc1132bec64420b356341bb7b1d.exe

C:\Users\Admin\AppData\Local\Temp\4948dfc1132bec64420b356341bb7b1d.exe
"C:\Users\Admin\AppData\Local\Temp\4948dfc1132bec64420b356341bb7b1d.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3064

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3064-9-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download