201a344ddf7182a4fa858dbc0519dbb096f4dd4f022c6f12e32928f3f693e5bb

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24-05-2024 12:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

201a344ddf7182a4fa858dbc0519dbb096f4dd4f022c6f12e32928f3f693e5bb.exe
Size

5.9MB
MD5

3e68f4aeda81e43a6bffc6a5ff07caf9
SHA1

262f3b2e29ecbc31169308ef4b5969c7ffe7c94d
SHA256

201a344ddf7182a4fa858dbc0519dbb096f4dd4f022c6f12e32928f3f693e5bb
SHA512

a797dfcaa1390dc6579387348560ba38d0eb2d80d6283c4f1f7dedb19f4e5611bd19b3a78b93e712916556207aff8126625c55d9b38e964c566def238d6a7af0
SSDEEP

98304:14UR/3Qmyst2pNVb/w10rmXjDpyMvBNFjvBAFgm7m2k9+UQ88D/yAcNR06HvHGLz:14iQmMl40rmTDDe7/O+FTyA+RtvHGv

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	201a344ddf7182a4fa858dbc0519dbb096f4dd4f022c6f12e32928f3f693e5bb.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2016	201a344ddf7182a4fa858dbc0519dbb096f4dd4f022c6f12e32928f3f693e5bb.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2016	201a344ddf7182a4fa858dbc0519dbb096f4dd4f022c6f12e32928f3f693e5bb.exe
2016	201a344ddf7182a4fa858dbc0519dbb096f4dd4f022c6f12e32928f3f693e5bb.exe

C:\Users\Admin\AppData\Local\Temp\201a344ddf7182a4fa858dbc0519dbb096f4dd4f022c6f12e32928f3f693e5bb.exe
"C:\Users\Admin\AppData\Local\Temp\201a344ddf7182a4fa858dbc0519dbb096f4dd4f022c6f12e32928f3f693e5bb.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2016

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads