Resubmissions

01/11/2022, 10:46

221101-mt7q4sbac4 1

01/11/2022, 10:39

221101-mqek6abhdl 1

Analysis

  • max time kernel
    136s
  • max time network
    171s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/11/2022, 10:39

General

  • Target

    http://www.bicdata.com.br

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 39 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http://www.bicdata.com.br
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4696
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4696 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4540

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

          Filesize

          471B

          MD5

          f96f5cc4fe29e16e576a10f0d731f764

          SHA1

          a24f0e59653b954741bebe8a1612ccacf59c1efc

          SHA256

          d36259b892a35873c19e5b65172a5f37e7df9bf4d1c614f862d76ff3617eef57

          SHA512

          12c82768aa942c2b8a803971fe8fb2355262df94fb12db1b8c4d8b550a028c3ae7a34dbdd29817803dcd88f5f915594e43b95c474e3295412227e97deb2edd5e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

          Filesize

          434B

          MD5

          f32ada5ce1a5bfe2e2f256b0ec79124e

          SHA1

          b3446886fbd3c908f81bb1a8c6932b2cab2ca506

          SHA256

          88cbfcb7cee60fe84366221b6785cc0ca50b22183a3bb0807103988fd7ad8f72

          SHA512

          0be7901e09c95fd153b5c6db9c84c4d2b7f94e627b1727f5639b2672a58a7bde699a2b04d8ec18a5a80e9b9226093856d2571959bd12900545ae66f1168fbc42

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\ru1r3yf\imagestore.dat

          Filesize

          2KB

          MD5

          45d534b14ec3b277d1ca6d3f16d26de6

          SHA1

          4c70b33836392a101ad4991d1a4677af82d43935

          SHA256

          c35990f99756257040e28aa633c8b82100e69e58d6e938a6589d446e20c4c0eb

          SHA512

          d76e8abd2c0050f0e967c40cb3bf4e8f12d6a083804a0e37c06af7096a2c7fa2a0806f7925dc4cda3f58120791cc81136d608f3fdee85cb4b062e18d448bdc40