d4c3919ec72842ee308477798826f76fec77e2f20e862750b7cf542b385b0433

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15-06-2024 12:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

$PLUGINSDIR/manager/scripts/WebBrowser_embedded.exe
Size

37KB
MD5

fc63714527aca09e610de9b4d820b558
SHA1

8f146589072c425bffa6aa3e95a0ef6e1d2b4300
SHA256

ba998650808297fb9e79fea57556776317ca6ea3af6c7cb68b57ef62907fbb9f
SHA512

b0f29bd0a31c0b91dc0350117425711edf3d5460aefc82dbe93a94de591be7eba5648f389c7c199dfd17ac72e83b9a057e933254c16629e1d74fef222935f278
SSDEEP

768:LDWdFYu0oycO631SC12iKyyqrsA5IOON1/3X:ixO6UC122BON1PX

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	WebBrowser_embedded.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1096	WebBrowser_embedded.exe
1096	WebBrowser_embedded.exe

C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\manager\scripts\WebBrowser_embedded.exe
"C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\manager\scripts\WebBrowser_embedded.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1096

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads