528dec38d1b3e0d6816b63aebdb12cdcccf19403f8ecc5d582a29cf653dae9e7

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 01:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

528dec38d1b3e0d6816b63aebdb12cdcccf19403f8ecc5d582a29cf653dae9e7.exe
Size

1015KB
MD5

e0353229df66fb776cd2d7be4e145e2f
SHA1

e172a149a411b7f8fb6f53772eb12ec8a330f3d9
SHA256

528dec38d1b3e0d6816b63aebdb12cdcccf19403f8ecc5d582a29cf653dae9e7
SHA512

ddd1d8e340622e1ac3d490484a9a53dec7331d36b597fa5660e8fbe3b19057aab72f69da5e3a583e88e0c8f4d39698bd9aeb71610251972e636816721e53f801
SSDEEP

24576:T5ZWs+OZVEWry8AF4qO1ukokOkokOkokOkokNkokOkokOkokOkokNkokOkokOkoX:NZB1G8YC1udddddddSdddddddSdddddX

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

Processes:

528dec38d1b3e0d6816b63aebdb12cdcccf19403f8ecc5d582a29cf653dae9e7.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	528dec38d1b3e0d6816b63aebdb12cdcccf19403f8ecc5d582a29cf653dae9e7.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

528dec38d1b3e0d6816b63aebdb12cdcccf19403f8ecc5d582a29cf653dae9e7.exe

pid process

1008 528dec38d1b3e0d6816b63aebdb12cdcccf19403f8ecc5d582a29cf653dae9e7.exe

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

528dec38d1b3e0d6816b63aebdb12cdcccf19403f8ecc5d582a29cf653dae9e7.exe

pid	process
1008	528dec38d1b3e0d6816b63aebdb12cdcccf19403f8ecc5d582a29cf653dae9e7.exe
1008	528dec38d1b3e0d6816b63aebdb12cdcccf19403f8ecc5d582a29cf653dae9e7.exe

C:\Users\Admin\AppData\Local\Temp\528dec38d1b3e0d6816b63aebdb12cdcccf19403f8ecc5d582a29cf653dae9e7.exe
"C:\Users\Admin\AppData\Local\Temp\528dec38d1b3e0d6816b63aebdb12cdcccf19403f8ecc5d582a29cf653dae9e7.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1008

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads