765cb405a4f319efb9ff91c2d16f72a0ae44564a8269dd81e19a42f104b6b694

Analysis

max time kernel
137s
max time network
131s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12/03/2024, 14:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c3927b9a995fc2d42d881422f263c73a.exe
Size

8.0MB
MD5

c3927b9a995fc2d42d881422f263c73a
SHA1

d89ebc81480cbbfdfc8716ecd71ce3a131150002
SHA256

765cb405a4f319efb9ff91c2d16f72a0ae44564a8269dd81e19a42f104b6b694
SHA512

01bbc6829d9fcd2cbb73bfe5b810434fe93837f947560e102ffdca593b0e4f5bc3b8633422e87068bd1b52f5bda3e1bc33bb5ded997e1d793bc1c5889e48fbe0
SSDEEP

196608:51qR9KhUstkhGhLooe2EcAUFCETkLKut78S4k:6R9KmsSsog3ADETkHt714k

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2461186416-2307104501-1787948496-1000\Software\Microsoft\Internet Explorer\Main	c3927b9a995fc2d42d881422f263c73a.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2584	c3927b9a995fc2d42d881422f263c73a.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2584	c3927b9a995fc2d42d881422f263c73a.exe
2584	c3927b9a995fc2d42d881422f263c73a.exe

C:\Users\Admin\AppData\Local\Temp\c3927b9a995fc2d42d881422f263c73a.exe
"C:\Users\Admin\AppData\Local\Temp\c3927b9a995fc2d42d881422f263c73a.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2584

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...