Analysis

  • max time kernel
    121s
  • max time network
    164s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 09:13

General

  • Target

    ce9165396be648201458950f9a090c959047b1a5505e11a902787f319a07f56d.html

  • Size

    7KB

  • MD5

    b5b0306b0a2e03c4c5bc930f3c462a46

  • SHA1

    8f53bb4579ff1416236182d833e91ed75a59f5b2

  • SHA256

    ce9165396be648201458950f9a090c959047b1a5505e11a902787f319a07f56d

  • SHA512

    34433fb8e472837e4d29f8d50c2969f430af6eca2e99a5950aa1f0411ffbac549271a218b0565d576c3f0be1507d4fde3c831c4d3d3fb3c2cf983e1b5fffa000

  • SSDEEP

    192:xJSG+9PzqN/PR1A8nddLXuSwSTLdlLXugfo2Ku+oL7:jSGabMPvLddLXuSwSTLdlLXugfo2Ka7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ce9165396be648201458950f9a090c959047b1a5505e11a902787f319a07f56d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:328
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:328 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1488

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\GN51WVUM.txt

    Filesize

    603B

    MD5

    00d07e820394296df1af342ff409c3b6

    SHA1

    ca24cdc0349873fa35f5b286bd8edf229ca7ed1c

    SHA256

    956ffd1551ca81e84a6756496cdbf87eebae9e68bbac365d12ae738f9d439a34

    SHA512

    36bf44c8143dcbced1aba8d5e07ead4a1268d67d73e00e29b31cd9f2e4c4f76e30b56335660fd8ca0d12a8208fde84a5f9a2b6555b0c6bf18982c7d1c72a2fea