093ad7f53e6c81249746bb0e40840a3654fcb6d04c92cf0a00d8a324b2c36074

Analysis

max time kernel
140s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
21/04/2024, 14:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

SuperDIY.sfx.exe
Size

573KB
MD5

3fc301a3994724953bdd7f82ba78649c
SHA1

5edf116edebd51c023b2192d869ca167b9e3c94b
SHA256

ea69a5b2ff1cb71df4024444e162173aaf52a854e5ea1e8ee1759d667a8ac0b0
SHA512

16bd7dd02206cd716c7b8d211319a32860ed941663e753e8f042a03d19b6ae9376c8c3b136307b4aafaa2a905d47e5d85c8314ed8b6b762c355d2b079035d17d
SSDEEP

12288:ZOzOpJRVnw7av1b3AjSreyJ1k/HquQFh2yyDmL3Uvsc:MzOpJQ7aKSreyJ1huQFydvL

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	SuperDIY.sfx.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2020	SuperDIY.sfx.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2020	SuperDIY.sfx.exe
2020	SuperDIY.sfx.exe

C:\Users\Admin\AppData\Local\Temp\SuperDIY.sfx.exe
"C:\Users\Admin\AppData\Local\Temp\SuperDIY.sfx.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2020

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2020-9-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download