74d6226886baf074d3a48fc8d3c6b16707f26d54554d5c5d7bbc2d06ab81a1ef

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
17/01/2024, 23:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

63db243e45da1f36534ed218645ab4b4.exe
Size

339KB
MD5

63db243e45da1f36534ed218645ab4b4
SHA1

8dd09acf55c012c0904c24e4572ff22e9509d13a
SHA256

74d6226886baf074d3a48fc8d3c6b16707f26d54554d5c5d7bbc2d06ab81a1ef
SHA512

218285d8791d5721cbc8b8db37650d9567c4193c2879037d8dfc78e23638c49d1012904be7b8b8555136d9f2c919d5edac798d351509899489940e8e39380a1e
SSDEEP

6144:nKUTVniZzVW3caPk2ob4cegCzwFyWdwnvgA/7boErbE7ncXg/y/qXe1bQGG5ccu5:KwVniZzVWMis4cq4ysOvgIboEfE32

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-928733405-3780110381-2966456290-1000\Software\Microsoft\Internet Explorer\Main	63db243e45da1f36534ed218645ab4b4.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2476	63db243e45da1f36534ed218645ab4b4.exe
2476	63db243e45da1f36534ed218645ab4b4.exe

C:\Users\Admin\AppData\Local\Temp\63db243e45da1f36534ed218645ab4b4.exe
"C:\Users\Admin\AppData\Local\Temp\63db243e45da1f36534ed218645ab4b4.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2476

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2476-0-0x00000000003E0000-0x00000000003E1000-memory.dmp

Filesize
4KB

Download
memory/2476-13-0x00000000003E0000-0x00000000003E1000-memory.dmp

Filesize
4KB

Download