Analysis

  • max time kernel
    73s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-09-2022 13:40

General

  • Target

    email-html-2.html

  • Size

    2KB

  • MD5

    f7656845da8d04ae7e6beb5c1c90c212

  • SHA1

    36c727dd4152793ef6bca775d61b2fc9701fa51b

  • SHA256

    dbec17be88d3bf4a925267b2b1857a6a779d806a1c66f371e99c459ea6c8c555

  • SHA512

    72e567128ccbd81b8675401282ab38067759a8233b0c4dfa7a0d490f1aba71925f6fb0328875b55f3585c712ae4115dd4357fbf2791907deb7f1a1ddf0055eb6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 39 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\email-html-2.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4656
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4656 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2436

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    b471dd02d20e38a6695cf3cdb539ce96

    SHA1

    d5006f272254f2639c3b7cd53a4a623aee592ac5

    SHA256

    b6f5d3c2883398ddf4f651161f90a7c85469e1f9d764de6f8481845951d1d149

    SHA512

    a8f8e19635caacf0ba160c9f502514542c9e785070aea3976be688dba8e1bb8a8b0483c286484d619451d47e3f3236bc9f44177d0f8ccd0c5a064f7aa890cf58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    9ebe45a485d2ae1eb4ef89384a9c1cc5

    SHA1

    64a649c7e38d39af740963d5a9d37b19b66e8c93

    SHA256

    508957e101329233310777f181b9b8fa6e1d2fb5af36ce2a8b15dd16bc0d3301

    SHA512

    d17aa80149b96d46e2de62b1d7d32f61c88a3bff0b6dae1c9714678f9caee9707fee04b985ad5a22a1ad375f54707ab464cddf3a07d8815534c86c3536d3ab0a