Analysis

  • max time kernel
    126s
  • max time network
    157s
  • platform
    windows7_x64
  • resource
    win7-en-20210920
  • submitted
    20-10-2021 15:32

General

  • Target

    San11 Tc/Doc/Reg/san11_reg.htm

  • Size

    8KB

  • MD5

    2442dfcffec83a50ba70c60628511e56

  • SHA1

    a8714bd7625ad524cf0983433a76550c01fa5e0a

  • SHA256

    654ba8d56ca8193ac04928965a8f534fb088202b89bb61dfb5d557e0dad9e1d0

  • SHA512

    7011f357a172307e3fd7cc5b71ee78c6f21c037483b71c72e6d84294b5fc28a6b5ee8c53ed05456bd50c818e0c55760913e5eead481530ab8bce606727c20672

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\San11 Tc\Doc\Reg\san11_reg.htm"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1044
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1044 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:908

Network

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\2OAK3K9C.txt
    MD5

    620f057be52f3569909859b50f4aa241

    SHA1

    380685cc793c44a257d1318d245a1154bc6714c8

    SHA256

    a274610348732b628f77d8fded33235bfed2b3fef7bd504cd70a2897ad631634

    SHA512

    5479c10465f2392056fa00cd62238aec82d7f2657aed6509c4b7f10cedebd3894ad6516030d6bc81e23fe492a759f3512cbb55f4843595649e6b7e057da7aecb

  • memory/908-54-0x0000000000000000-mapping.dmp