5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
13/03/2024, 07:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a.exe
Size

604KB
MD5

69650a5c2bce34d556964bb5f83686bc
SHA1

39dc1d54245b5663f06a4dd233bd573312832a63
SHA256

5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a
SHA512

6ddb63f4e71f064d6bb4026037062792d1650b61652135ccf4a75a009354d646433cff07d1217b6d1772a6a2b7ca66e1c7ef1788f08746d0a86399de6dc9d1da
SSDEEP

6144:x49BR+yOy5Z5XRGgX7Wwc74lwC3+W/6CbqK/5Kq45GVd5eJljeW9sA7h:+9BHXRGgrxc74lwCOW/ruQp45pljeY7h

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main	5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2476	5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2476	5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a.exe
2476	5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a.exe
2476	5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a.exe
2476	5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a.exe

C:\Users\Admin\AppData\Local\Temp\5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a.exe
"C:\Users\Admin\AppData\Local\Temp\5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2476

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads