Analysis
-
max time kernel
121s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
30-06-2024 01:15
General
-
Target
Fiddler.exe
-
Size
1.4MB
-
MD5
bf4fb7029571683986ecf3a48eacd4fd
-
SHA1
5f1c4f0a79f4a0c8e96d27adbf0153a45a58cc11
-
SHA256
b0eab66bae42868d402f326a37cb0e4364d4a686eb5feb4d93325b5078c1bc0e
-
SHA512
ec240842386f28e87576720252d12c5a02ea9e2c29485d1acaea34c89a1577041462610d953a59e9e4acef4d3c566e861d6672a00d9bf196d778bf13a45bb25e
-
SSDEEP
24576:HA93BNl5yPcNBSuUsRCb/l+53flpmjaqkIw:swLzkIw
Malware Config
Signatures
-
Downloads MZ/PE file
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Fiddler.exe"C:\Users\Admin\AppData\Local\Temp\Fiddler.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
Filesize
342B
MD59784ca32e86052e3f22109653c91b074
SHA115cc00a6849743c65fa46a7bfc36a00f03c577e5
SHA25657cf4213f879b97bc00b68aae15ff4fdff511b141c4fbf44248121a702c398ab
SHA512792398212f3fac8a119076190a073e143d970ac95ea33747bf29c5020611b9bafaac9812ffc60843ddb18f6921fad2d109bddc1140edb5685523368b4579d4d1
-
Filesize
242B
MD5bd892836313502d61ac1a64012a792f2
SHA130968f7255b204c354eadb4624bf843fee998da5
SHA25608979555f575f1a1ed906812edd44ecfa5d4b1d499a8e7b490a43d386aa323df
SHA512cc85c9229ff0e50ad85201bd8c1fb7dc0d8233fdc7d57397aef2f6787f72373489dfbe63243655fabc8a12a6827fde52235add874107208775f381073e884ed4
-
Filesize
966B
MD5e73446b3922c9ec6bc5092873b0db117
SHA1846f8fc308aa3e2e2b48e54eac10b2c57ccee8fd
SHA25623d100bd5b481e4798620eff38865daecd0ba9d72fd39faa92e48049b4bf620b
SHA51292ee3281d7ed8a7bcbd48a803f04f7e133b88c101c339ba1e5204963b55b533d39306972b05244301f004fd495dd9ef0b6c37af5e3827e501b17d3fe03c739ed
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b
-
Filesize
4.4MB
MD578537045a5e032d4ac93514f027c7a47
SHA15b6e705b20652c0cf39ee890013b9b8e8ad26b07
SHA25606812518a722af6f98fbd8c3a5ace0cad1c6d53477972618728e64bafcbc948c
SHA5128fee84a791ae85175b7d61b54c66fc47abd4e231b7194779d2213f94c388b23e3f8e0408a1f29856b2a0404d824f17858f6b0676f6a1656428424665658c4a47
-
Filesize
104KB
-
Filesize
152KB
-
Filesize
88KB
-
Filesize
288KB
-
Filesize
144KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
9.9MB
-
Filesize
264KB
-
Filesize
72KB
-
Filesize
64KB
-
Filesize
9.9MB
-
Filesize
1.7MB
-
Filesize
9.9MB
-
Filesize
32KB
-
Filesize
48KB
-
Filesize
32KB
-
Filesize
320KB
-
Filesize
56KB
-
Filesize
744KB
-
Filesize
5.0MB
-
Filesize
5.0MB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
9.9MB
-
Filesize
672KB
-
Filesize
9.9MB
-
Filesize
7.6MB
-
Filesize
4KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
1.5MB
-
Filesize
4KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB