Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12-05-2024 18:20

General

  • Target

    WebBrowser.exe

  • Size

    713KB

  • MD5

    29c976b214c7b4841e362d29f782d08f

  • SHA1

    dd40193579faf1e774c69a99c652b073d77aada8

  • SHA256

    75f8144356539cad365d6f66970637a5928c9ecec6daeefb21b362a9f027d8e6

  • SHA512

    c2c2c8b0eca7a65b1205f6db60c4b0781487da1b7536aae967fac8c816414f568c1d1f333ecd189655b96f86ca93d3d5bc79b8d068800348680ff2d9c137dc9c

  • SSDEEP

    12288:ZadaSu9Nz7DgcFRWmGt8oz7UBFITXAhWclk19OAJEb5vvBap:Zad29NDgvl8oz7YFlu+7a

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 27 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\WebBrowser.exe
    "C:\Users\Admin\AppData\Local\Temp\WebBrowser.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:328

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/328-0-0x0000000000400000-0x00000000006D7000-memory.dmp

    Filesize

    2.8MB

  • memory/328-1-0x0000000000400000-0x00000000006D7000-memory.dmp

    Filesize

    2.8MB

  • memory/328-3-0x0000000000200000-0x0000000000201000-memory.dmp

    Filesize

    4KB

  • memory/328-5-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-7-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-8-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-10-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-9-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-11-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-25-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-43-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-15-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-21-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-52-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-49-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-47-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-45-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-41-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-39-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-37-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-35-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-33-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-31-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-29-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-27-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-23-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-19-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-17-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-13-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB

  • memory/328-61-0x0000000000400000-0x00000000006D7000-memory.dmp

    Filesize

    2.8MB

  • memory/328-62-0x0000000000200000-0x0000000000201000-memory.dmp

    Filesize

    4KB

  • memory/328-63-0x0000000010000000-0x000000001003E000-memory.dmp

    Filesize

    248KB