Analysis

  • max time kernel
    147s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 09:11

General

  • Target

    e453e4e354a0eb664e9293ece9d5f863a49ee5a247a34d89854327fd00071e60.html

  • Size

    7KB

  • MD5

    63e696d3569261877053b59864bad980

  • SHA1

    5a302510a933556f3e3c820399f167791eee1142

  • SHA256

    e453e4e354a0eb664e9293ece9d5f863a49ee5a247a34d89854327fd00071e60

  • SHA512

    cfc6d904813e62e2a3ea3438f9ce319e8855925f7f4d38932a6156f38fa2d7a59d5243203ee4ffa6299c45f86cbc529aa2e6331a4dd8c3b40bcbfd5c9921296d

  • SSDEEP

    192:bJSG+9PzqN/PR1A8nddLXuSwSTLdlLXugfo2Ku+oL9:tSGabMPvLddLXuSwSTLdlLXugfo2Ka9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 40 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\e453e4e354a0eb664e9293ece9d5f863a49ee5a247a34d89854327fd00071e60.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3300
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3300 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4372

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    416f43a5e5978e25d0b2b3804604f9eb

    SHA1

    71da8e406f52bb253c6b3932e24038dd593521a9

    SHA256

    457ae2aca2600e218804f138f83fb6f5ee451a0694cff806f97f15f5b00b1917

    SHA512

    0ece1d0ffa3cebd377155244da084f25206cda3ca499adf63eceab3b157598a2e290352120900563ece8938183b2a090dc527461eb4a197310abebb82103fecb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    2a1eecfecfb47c4155acb0c1ce9e947b

    SHA1

    c4464c1ba4c77e61c60c54a5b4e60f9098f93c2b

    SHA256

    94ec420322ea5e8735cd9e714ab8b68b9a9ad9ca0fb4141b144566aeda811a41

    SHA512

    5f7f062515bf1cfad6cdf421fc852fdd9527e59006157f541b620dd85e772ee5dc3f5a7ca5702c4a1b5341f9267ccb7a77853742c6ef058d46e9a3abc6d77b04