Analysis
-
max time kernel
141s -
max time network
137s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
21/08/2024, 03:47
General
-
Target
F2FMedia.exe
-
Size
2.2MB
-
MD5
0c516804417525905228919153fa6b58
-
SHA1
9bd55968e5a1a3431072907d2ba38ea6ab2fb906
-
SHA256
33d999338da4b3bb2b3a5c19eb2525fa079e4b9cdcfb0eb133927107330213a0
-
SHA512
d2f0954d81ed819cc13e89f49f0aad258c3f9f3ec7857738f91b3e0a55e7fc2c96c10bf885f76d92f8c5db028c3aac55fcf3a8eda8bf009ec61feca1300f10d8
-
SSDEEP
49152:NRrv2yECBq+UIEtjuNea7W15/hlMDvHOYrbYUviXQ:NRz2TYq/pta7wJlMDvvQUvsQ
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of FindShellTrayWindow 12 IoCs
-
Suspicious use of SendNotifyMessage 12 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\F2FMedia.exe"C:\Users\Admin\AppData\Local\Temp\F2FMedia.exe"1⤵
- Adds Run key to start application
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
Filesize
867B
MD5c5dfb849ca051355ee2dba1ac33eb028
SHA1d69b561148f01c77c54578c10926df5b856976ad
SHA256cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b
SHA51288289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da
-
Filesize
242B
MD5245000a5eeddc8f53167b51755c391a5
SHA160ebca23de25d7fb5a2e424f99260264b2f0421d
SHA2561e976f917dd2e0076af2709b2454d3909d3d42628e9e9d1cac7be1d79c0bb09a
SHA512c82d552843018777e2d71a7ff6f32f037fe81666866c0534c716e8056b433305e8f02ecf711fb84015f2718d21f34d42ae2f1c36644eea7c72171e28a14f778e
-
Filesize
242B
MD5e67a081f02d151a247ce508f76d775ec
SHA1cdb3d333552202704c39e0f8840f025868427839
SHA2560420aec89a0dd1957ada0a66dc7ffff9ce4531667cfffcb1bd7a9a16860253f2
SHA5126831abfac085ef26e6bfa2f2f86c60e12f4ceb26e360eb7f739732fa8a87b22a0803bdca8666f50d0145812f9652a5a5053ccb95e7e852cecac30b29c299406e
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b
-
Filesize
2.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB