effb01d3750420b012ee400f56644e99805bdd0b286db20cacabcca98830fc52

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
04/05/2024, 04:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

effb01d3750420b012ee400f56644e99805bdd0b286db20cacabcca98830fc52.exe
Size

156KB
MD5

f1aea8fda077b7a5773a725ef492e5d4
SHA1

f93e46549be62947c69f7044a2449a421de86dd1
SHA256

effb01d3750420b012ee400f56644e99805bdd0b286db20cacabcca98830fc52
SHA512

83836abed2a6ebbe40efa7b3788840a2880775c2b30263712b45f660a6242f98c20d29e9de1e72f40d2ab45a78a6fdd78de602cbfaedb71179e8e2e34503be70
SSDEEP

3072:hfTJQwbXNwGXJW3MOi4WPd0/GUa8E+gOAe:hf+wbXNxWidoL6

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main	effb01d3750420b012ee400f56644e99805bdd0b286db20cacabcca98830fc52.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
352	effb01d3750420b012ee400f56644e99805bdd0b286db20cacabcca98830fc52.exe
352	effb01d3750420b012ee400f56644e99805bdd0b286db20cacabcca98830fc52.exe
352	effb01d3750420b012ee400f56644e99805bdd0b286db20cacabcca98830fc52.exe
352	effb01d3750420b012ee400f56644e99805bdd0b286db20cacabcca98830fc52.exe

C:\Users\Admin\AppData\Local\Temp\effb01d3750420b012ee400f56644e99805bdd0b286db20cacabcca98830fc52.exe
"C:\Users\Admin\AppData\Local\Temp\effb01d3750420b012ee400f56644e99805bdd0b286db20cacabcca98830fc52.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:352

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/352-3-0x0000000000350000-0x0000000000351000-memory.dmp

Filesize
4KB

Download
memory/352-4-0x00000000003D0000-0x00000000003D1000-memory.dmp

Filesize
4KB

Download
memory/352-5-0x00000000003F0000-0x00000000003F1000-memory.dmp

Filesize
4KB

Download
memory/352-10-0x0000000005060000-0x00000000051D5000-memory.dmp

Filesize
1.5MB

Download
memory/352-12-0x00000000051E0000-0x00000000053C9000-memory.dmp

Filesize
1.9MB

Download