46cdc38806d00295bb3d6c87a2d06a3aefe648c8a1bb7e7aa54abe37019a96aa

Analysis

max time kernel
50s
max time network
16s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
28/05/2024, 19:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Setup_FileViewPro_2024.exe
Size

1.3MB
MD5

9462e2b4992e3ea63f3f04c499dc5a05
SHA1

9e57c55d9d51d6eabda71ffdfaf48709209943e2
SHA256

46cdc38806d00295bb3d6c87a2d06a3aefe648c8a1bb7e7aa54abe37019a96aa
SHA512

3f5d68ceeb34a24a91a2718e645564dbc2c6a75d018a517f9884f1a228140ee00f5108e00d43f3feeaf5f40cf391a44d81ec90fd63d445ecb1e3f2675dd3f13d
SSDEEP

24576:ih6SVFzDl6eZmL4v9IoYOlrQ14T1+G05hKwzlXX8l8whkwBY2/+WLHkO4H:K6UXtvDz85hK8XM8rcY/OI

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	Setup_FileViewPro_2024.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
1680	Setup_FileViewPro_2024.exe
1680	Setup_FileViewPro_2024.exe
1680	Setup_FileViewPro_2024.exe
1680	Setup_FileViewPro_2024.exe
1680	Setup_FileViewPro_2024.exe
1680	Setup_FileViewPro_2024.exe
1680	Setup_FileViewPro_2024.exe
1680	Setup_FileViewPro_2024.exe

C:\Users\Admin\AppData\Local\Temp\Setup_FileViewPro_2024.exe
"C:\Users\Admin\AppData\Local\Temp\Setup_FileViewPro_2024.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1680

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\{326D0447-14C8-4E08-B6BE-3A4EB1B540F0}\resources.1.0.0.34s

Filesize
1.6MB

MD5
1938c8aba656a7661565ceb7ea8b5b94

SHA1
ab5e8279d90b240b58d35d13d27fb7e92bb77741

SHA256
fba5162e6a34f8d0d53254ba0b348714956100035c1935c0294e190c75b0de2c

SHA512
f17b83aaa10ec88ba851be7fa3670c2ab921770669e32934c791da5b0b70518c0c577fdea37247170e880bd171f011113e526121efbc46a559266e7eafe66ec8

Download Submit