Analysis

  • max time kernel
    179s
  • max time network
    206s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    20-05-2022 07:07

General

  • Target

    virtual_freer_v1.58/back/template/index.html

  • Size

    123B

  • MD5

    6b37309700ffdd85eed2431b5dfd3bb1

  • SHA1

    2eaf914fe507a09f321684b8add29b94cee50db3

  • SHA256

    c703afa89e7517dd5020ac2960b7e14b44d4010ef02d5e0f6e34b9629935a3ce

  • SHA512

    79211ac08ef90a01c9ab0bbb2f2bc437b696c9f5b1193c1d98659428ea3ba5a1db7a6659d8b14f5c4184c577ef6caff456439654b84c986740e7a2a50bd92060

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\virtual_freer_v1.58\back\template\index.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1720
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1720 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1332

Network

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\HFFB3HMF.txt
    Filesize

    587B

    MD5

    54ae87a9536c453e6b3c17c1f599465d

    SHA1

    0546d96acfef8baa6932a01d1d10041ad876817b

    SHA256

    c6c40d627ce944f0fad3d796f27bfbb22255cc1ada29adbd14438a357b498bc9

    SHA512

    f62c955311fbf5f93836de647a6f8d524db1b00d04d0d0df21cdf280efc13fb76699bbaaaa7dbfa4250eff5ab2b702a90cc568fc7991ef191a1a83e65b002af9