c9846c7c6f76e08aae1eb1efb907ccaf0db1dd1e455566151476bcdd1aed46b5

Analysis

max time kernel
150s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
07-03-2024 12:40

Target

b8bfe8ac0e765865fc3cb08af6940113.exe
Size

1.2MB
MD5

b8bfe8ac0e765865fc3cb08af6940113
SHA1

f3bc2654e6262ebd5403aec07c0cea4433993738
SHA256

c9846c7c6f76e08aae1eb1efb907ccaf0db1dd1e455566151476bcdd1aed46b5
SHA512

e4f3ad6b6d65caad7006ed54d8391757aa0c1f48016bdd8df581d090022f04133d98e1c86b75463bebf07c77dbe6bb7d5322516f74f43c2d2890661279a9565a
SSDEEP

12288:PqzPhJiSLhjM6N4E1Cf5Ggw8iww5/N7Efm9/bjbtapDb9Gjuw0IdD9f:APrie9C9iww9b9/fEGhDx

Score

1^/10

Modifies Internet Explorer start page 1 TTPs 1 IoCs

Modify Registry

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-557049126-2506969350-2798870634-1000\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page = "www.taoku.com"	b8bfe8ac0e765865fc3cb08af6940113.exe

C:\Users\Admin\AppData\Local\Temp\b8bfe8ac0e765865fc3cb08af6940113.exe
"C:\Users\Admin\AppData\Local\Temp\b8bfe8ac0e765865fc3cb08af6940113.exe"
1⤵
- Modifies Internet Explorer start page
PID:1144

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact