56ee29278f95492d23ef84c302c0fd4e70fea994322f55acaf01f49d76dd8a12

Analysis

max time kernel
140s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27-02-2024 23:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

aa79e7a721a1d7e153bbed8da5ffe6c0.exe
Size

11.7MB
MD5

aa79e7a721a1d7e153bbed8da5ffe6c0
SHA1

34a4ee10b462e08ea0457c75dfb8ee6ac4539d23
SHA256

56ee29278f95492d23ef84c302c0fd4e70fea994322f55acaf01f49d76dd8a12
SHA512

9c856ef3e48d895c5e915d62552e713641f9ab165431dbbc0a152956b59be7cb9b077b56c2ad66a5dc5afea00ef2bfb7d5ca70949bc600d37b1ffa5315db1ce0
SSDEEP

196608:QhpqJVhB+im1qo9cC4RK69DZgbMEo4EC/ENvPG6YdVq0x3bsjvCyJXUQPeiJ:IENBXwqoYR9ZgbMEoW/ENv+Ta0NsjvfR

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	aa79e7a721a1d7e153bbed8da5ffe6c0.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1848	aa79e7a721a1d7e153bbed8da5ffe6c0.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1848	aa79e7a721a1d7e153bbed8da5ffe6c0.exe
1848	aa79e7a721a1d7e153bbed8da5ffe6c0.exe

C:\Users\Admin\AppData\Local\Temp\aa79e7a721a1d7e153bbed8da5ffe6c0.exe
"C:\Users\Admin\AppData\Local\Temp\aa79e7a721a1d7e153bbed8da5ffe6c0.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1848

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1848-9-0x0000000000400000-0x0000000000437000-memory.dmp

Filesize
220KB

Download