Analysis
-
max time kernel
142s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25-01-2024 17:40
Behavioral task
behavioral1
Sample
751e67a4989473abf91876bc5f5fe704.exe
Resource
win7-20231215-en
General
-
Target
751e67a4989473abf91876bc5f5fe704.exe
-
Size
683KB
-
MD5
751e67a4989473abf91876bc5f5fe704
-
SHA1
0422c6c6414c339ad10528c8ca190c2789398315
-
SHA256
fac6ae4446cfae1d79e6fc98d2679fe01ce737eaa275868f4184e951864fb370
-
SHA512
e9d2659620e73d773c759128e166262844e884dfc8595fed14ea81f5c87219350789bf039e2de96e5c2c1f7b2a291c60f2615aeca2ddf326d42b19862d05225b
-
SSDEEP
12288:vomB2fFbcjgAlMuzjyYJkFy43+PLEtAGK8uGtffrgFnxNOMfo33sUKpfcsFmcyoC:vo1f1KRhS3OPLEtAGK8rdUFxXo33OpfS
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral1/memory/760-0-0x0000000000400000-0x00000000005B9000-memory.dmp upx behavioral1/memory/760-76-0x0000000000400000-0x00000000005B9000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Processes:
751e67a4989473abf91876bc5f5fe704.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main 751e67a4989473abf91876bc5f5fe704.exe Key created \REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch 751e67a4989473abf91876bc5f5fe704.exe Set value (str) \REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" 751e67a4989473abf91876bc5f5fe704.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
751e67a4989473abf91876bc5f5fe704.exepid process 760 751e67a4989473abf91876bc5f5fe704.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
751e67a4989473abf91876bc5f5fe704.exepid process 760 751e67a4989473abf91876bc5f5fe704.exe 760 751e67a4989473abf91876bc5f5fe704.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11KB
MD5c75583d86c4ce7ba75e3651e0b5bcce9
SHA1b1a536a62ee86ac0ed4a4f9ca3152cd11a525a65
SHA2564ce1156be542cd55b59f8c778f92550277688d9ab6929618cc9609054ba57f61
SHA512c071b1704898723d9548fcbaecf47a8962fe7a9de81466bb13a2e2484a951e501fbbc4d5ebbe98baad71f7559c2fa0761c114c70c2a5a4b46885dbb3ef6cce6b
-
Filesize
202KB
MD5a4fdd77e182bd2fabe300a47b5617a35
SHA1e002b335c75b5edefcd251962f61f53a2ab8e0f2
SHA2568b59592d67eadc703af6cdd5ba8d077f9f9485d01fb6405555614335f89be99b
SHA512ddcccde1c129f8f71fb39685abc615c4202b8b3dfc12cedd7d9cca2f97b308fc14b64497826421fa9df3d1cf54bdae9c085051af0a8d393cd3d556a6578d4085
-
Filesize
89KB
MD5219073097031d9c1a95a1291d66f3a10
SHA12b7996b01d90b7f424f2a2e6063947461db4b2b2
SHA256232066e3f6f1351afdaee1acb70c409766641fd5669e0b55ce7c77fac0a857ef
SHA5129ad2745f96cf79a4d59393cc3fbb3958b244013f6798c12abe41e37fca80df3c7cedab4b47cbd197645c86b31077388ec8f01ea8d67c5feacbef95b1ae7582b5