Overview

overview

4

Static

static

4

代码/1-P...�.html

windows7-x64

1

代码/1-P...�.html

windows10-2004-x64

1

代码/1-P...块.js

windows7-x64

1

代码/1-P...块.js

windows10-2004-x64

1

代码/1-P...�.html

windows7-x64

1

代码/1-P...�.html

windows10-2004-x64

1

代码/1-P...块.js

windows7-x64

1

代码/1-P...块.js

windows10-2004-x64

1

代码/1-P...法.js

windows7-x64

1

代码/1-P...法.js

windows10-2004-x64

1

代码/1-P...�.html

windows7-x64

1

代码/1-P...�.html

windows10-2004-x64

1

代码/2-P...h.html

windows7-x64

1

代码/2-P...h.html

windows10-2004-x64

1

代码/2-P...e.html

windows7-x64

1

代码/2-P...e.html

windows10-2004-x64

1

代码/2-P...t.html

windows7-x64

1

代码/2-P...t.html

windows10-2004-x64

1

代码/2-P...l.html

windows7-x64

1

代码/2-P...l.html

windows10-2004-x64

1

代码/2-P...e.html

windows7-x64

1

代码/2-P...e.html

windows10-2004-x64

1

代码/3-�...�.html

windows7-x64

1

代码/3-�...�.html

windows10-2004-x64

1

代码/3-�...�.html

windows7-x64

1

代码/3-�...�.html

windows10-2004-x64

1

代码/3-�...�.html

windows7-x64

1

代码/3-�...�.html

windows10-2004-x64

1

代码/3-�...�.html

windows7-x64

1

代码/3-�...�.html

windows10-2004-x64

1

代码/3-�...�.html

windows7-x64

1

代码/3-�...�.html

windows10-2004-x64

1

Analysis

  • max time kernel
    140s
  • max time network
    170s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-10-2022 16:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    代码/3-关键问题/2-能否执行多个回调.html

  • Size

    575B

  • MD5

    df21b6c05fd7ebdffa3d25d31c95ef83

  • SHA1

    a6c437e013d503355ec656e5db1af9cc4fb2d50f

  • SHA256

    a2ca081bb6bd2d351693cd22a3173751ee072ce989ca3059b7484b89b2254a51

  • SHA512

    5f75eb581962d6b50355322835a721490df86590cb1b7ab23b54c01f3060c3ec4ea10450519c3cabd5cea56a4ef663e7922ec3e5e15416c022762c89840842e1

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
    adwarespyware
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\代码\3-关键问题\2-能否执行多个回调.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3136
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3136 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4456

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
    Filesize

    471B

    MD5

    60c5dda6c87529c1fdbe874fd534913b

    SHA1

    141dd530c67ebdac9998a8f253aede034519ebbb

    SHA256

    c210d69c28a4a6abb399a425ffb66797df7c3fcf3bfc9eab0bf0dc7e19fc84ee

    SHA512

    bfd86d9e0ee15f5b183070573cfd693e83ce1083aa9c061ce9e68ed0f38518352ccd11b5f78a4b9179bccbed6dad89ee2003b414fbc1e20cf835af7c57b232c5

    Download Submit
  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
    Filesize

    434B

    MD5

    c6f31fcb46efce6501fb8d42d8a0b3ad

    SHA1

    20573077e7654707b6d0ef42c2034ee8e2836432

    SHA256

    fa38c4dacdd86c3b9e8a62a51ac4c50756130ee00b8ed344882a33fbc3fa85b5

    SHA512

    73b0640d43907e28c32188c93e85ce72477c4cb356b7044d1981d30b6fadb20334e2778d3f4f990adaa98e743b0afe18b1bf37715e5544899e87445a975bbce8

    Download Submit