Analysis

  • max time kernel
    172s
  • max time network
    208s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 09:13

General

  • Target

    d46af0d3c26a1cf41ef3e8550881a0e40eb70e08691dfb8dc2aebbfc87d63525.html

  • Size

    7KB

  • MD5

    b3d9a3a12a928c522ba287fafebc693a

  • SHA1

    12e53d795c62d1f247a5dc8972c6cdf50444c406

  • SHA256

    d46af0d3c26a1cf41ef3e8550881a0e40eb70e08691dfb8dc2aebbfc87d63525

  • SHA512

    320d82691defb2b834e998da21e8d132aaffa6a82c84949f272aff9f3e14f76992cf32269818d41aad78dd0dc8b61079be3ad33caa01354c923b42cd4748b55a

  • SSDEEP

    192:rrJSG+9PzqN/PR1A8nddLXuSwSTLdlLXugfo2Ku+oLZ:rdSGabMPvLddLXuSwSTLdlLXugfo2KaZ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d46af0d3c26a1cf41ef3e8550881a0e40eb70e08691dfb8dc2aebbfc87d63525.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:272
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:272 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1480

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\MNIJY5BR.txt

    Filesize

    601B

    MD5

    0cf40cfdf8e9cc3e289deff3d0b02a80

    SHA1

    220affd58c2afb2beab5aa50f66a85b96cf1e2d1

    SHA256

    1313282b892a27050a7751c840a183a6f4e48795e9f7d20bbc779374db830033

    SHA512

    81dc4ad2121fd5f61b3448ab077229b3650c7c520564b2b517fd562211b60fbddbeaed457baf5273ffe5c3c43587f6964cd36e375efdcb6bcce3cd747727dad3