Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24-05-2024 11:44
Static task
static1
Behavioral task
behavioral1
Sample
45ea90758303a8ebe12b2ca2fba0da937560eb56a88c7630c990243dac49980b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
45ea90758303a8ebe12b2ca2fba0da937560eb56a88c7630c990243dac49980b.exe
Resource
win10v2004-20240426-en
General
-
Target
45ea90758303a8ebe12b2ca2fba0da937560eb56a88c7630c990243dac49980b.exe
-
Size
339KB
-
MD5
dfc30d157bd286fec1d001051d685d44
-
SHA1
863cd3c8401b80f242b3daeeec10081ffe5db626
-
SHA256
45ea90758303a8ebe12b2ca2fba0da937560eb56a88c7630c990243dac49980b
-
SHA512
782578e6680e8af68a46c9655e782d458b1633e7ba066379317bb8e81e42a75180b0d6e30fef33d7cfb0829b4d194560885f9f2eff89973445fc63d14e493193
-
SSDEEP
6144:RoNm+qJezPbYhYInTUaWSFrJdMaiGwW357IX2w7J66:RNpszYhvXWSVJdMaeG3UJv
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main 45ea90758303a8ebe12b2ca2fba0da937560eb56a88c7630c990243dac49980b.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2756 45ea90758303a8ebe12b2ca2fba0da937560eb56a88c7630c990243dac49980b.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2756 45ea90758303a8ebe12b2ca2fba0da937560eb56a88c7630c990243dac49980b.exe 2756 45ea90758303a8ebe12b2ca2fba0da937560eb56a88c7630c990243dac49980b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\45ea90758303a8ebe12b2ca2fba0da937560eb56a88c7630c990243dac49980b.exe"C:\Users\Admin\AppData\Local\Temp\45ea90758303a8ebe12b2ca2fba0da937560eb56a88c7630c990243dac49980b.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2756