Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
10-01-2024 16:40
Static task
static1
Behavioral task
behavioral1
Sample
fb5461ab4da6b2ca5c6eae29df0bda6358a7d456adb1358ef3dc9a1d4d06ca5b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fb5461ab4da6b2ca5c6eae29df0bda6358a7d456adb1358ef3dc9a1d4d06ca5b.exe
Resource
win10v2004-20231215-en
General
-
Target
fb5461ab4da6b2ca5c6eae29df0bda6358a7d456adb1358ef3dc9a1d4d06ca5b.exe
-
Size
10.0MB
-
MD5
7a97eec592ac354f2b525205428afe20
-
SHA1
17da9a12c0bf17ec3bbeab4b0d7fb31848e6cac8
-
SHA256
fb5461ab4da6b2ca5c6eae29df0bda6358a7d456adb1358ef3dc9a1d4d06ca5b
-
SHA512
a1db618a71c2ea804e9ecb0e6259f00502f35623208f0d1047b0de0e89a983dbd951628bfa2dae241e7583b487aa2cdbacf103ec12b213d50203fb7a5d673484
-
SSDEEP
196608:Ml107KF9/SSD2p5TNh+b3T9UJbHyneeUr6/1Y8tWcJaLrkAkWcJPNdwd:cO2rTGNh+teb4eeUONlbULrk1bpNdA
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3470981204-343661084-3367201002-1000\Software\Microsoft\Internet Explorer\Main fb5461ab4da6b2ca5c6eae29df0bda6358a7d456adb1358ef3dc9a1d4d06ca5b.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2024 fb5461ab4da6b2ca5c6eae29df0bda6358a7d456adb1358ef3dc9a1d4d06ca5b.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2024 fb5461ab4da6b2ca5c6eae29df0bda6358a7d456adb1358ef3dc9a1d4d06ca5b.exe 2024 fb5461ab4da6b2ca5c6eae29df0bda6358a7d456adb1358ef3dc9a1d4d06ca5b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\fb5461ab4da6b2ca5c6eae29df0bda6358a7d456adb1358ef3dc9a1d4d06ca5b.exe"C:\Users\Admin\AppData\Local\Temp\fb5461ab4da6b2ca5c6eae29df0bda6358a7d456adb1358ef3dc9a1d4d06ca5b.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2024