Analysis

  • max time kernel
    146s
  • max time network
    184s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/09/2022, 11:10

General

  • Target

    c33c23c7d92178521e6493cd2e7f272fac7739df21c400c1679d429aeb7ddd23.html

  • Size

    94KB

  • MD5

    abcd51d3a69bd7fa9ccca4d6c4caa0da

  • SHA1

    2e413b7d0b4de435cfb28f99954e74195a724d27

  • SHA256

    c33c23c7d92178521e6493cd2e7f272fac7739df21c400c1679d429aeb7ddd23

  • SHA512

    41c22119a9af61e468d4a2e05d0545808edbf9999b2822117995fb7772057e5cf3d01df418bcf4a3dabf85addc630b6a0e1c4f3ed161d3e79def42999e38784f

  • SSDEEP

    1536:hcDJHH2whtVNibtjnU0ZaakMEvdVKhAz7odchvMRtNkMP:ONHWqUbtjnU04akM3eHodchvMRtNkMP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 32 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c33c23c7d92178521e6493cd2e7f272fac7739df21c400c1679d429aeb7ddd23.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3644
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3644 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2268

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    520071a63bb5e2038486cd0ce14055b1

    SHA1

    752cfb61bbe3ae1e2c2609c53aeee510661a59ed

    SHA256

    f8a989e9cf1fe0f0000c795537122a3c727e3b570b66582bfb62d9bbae4b20f8

    SHA512

    6f0131c9e0943c6a13d52a7525e1c592c95db868bf2dd21a8a37254150a239748985cc31518d0c4844bebfc5613feee6857b5debfbbbd6ed4539cd5e494ebbb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

    Filesize

    340B

    MD5

    33ed513fcfa599dd78f8fb38ab711543

    SHA1

    df8575dd8ff8f166f10c91369598435e0c43b49e

    SHA256

    609236f44435231f95b6523f20398aa1e8e0d985046013a460d47dfda7753f57

    SHA512

    5a34d66af2787b2df6d6053af4a6cf92b79fe97ecebe7d8b59367e5280739882ccf1e1e42102fc19a5ea3c5e60acf7171cbd1df8a2e5baa5f8cddd33b9f65e21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    eb13fba18714da9c025f6c5cb2e50170

    SHA1

    da2b45c328def820e14fa99516bc5a6f4963e7d0

    SHA256

    42cb7059b0ac7757217d7ffe0194199cadb6fc97816bc605e5319d313c8df1aa

    SHA512

    9134bca92aaf9776d0607ee5fb72d59b32899d038504923369c44cf5a9beff7da1aa9e88df568b5d6c30b52e10e7cec7ccd51f9749fc77f050778105b763f8db