Analysis

  • max time kernel
    91s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 09:19

General

  • Target

    9bd8fd1830ea2d0a8444ddb6519ec1eb661638a2721b2e1ca42025f9f710fa30.html

  • Size

    7KB

  • MD5

    ae866ef8a8036db4f000d68c71756248

  • SHA1

    4493f701fe6a6479682a579e2a5719ede16b4826

  • SHA256

    9bd8fd1830ea2d0a8444ddb6519ec1eb661638a2721b2e1ca42025f9f710fa30

  • SHA512

    9414e472c2f71730c6517bb9af8f805ad2bbe93177441b4df1bd5a0a38c011e2bcdcf90facda93a72b71fa655d02d4aa84d6224eb820d950f724dab06cdea365

  • SSDEEP

    192:oAJSG+9PzqN/PR1A8nddLXuSwSTLdlLXugfo2Ku+oL7:XSGabMPvLddLXuSwSTLdlLXugfo2Ka7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 40 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9bd8fd1830ea2d0a8444ddb6519ec1eb661638a2721b2e1ca42025f9f710fa30.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1316
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1316 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:464

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    416f43a5e5978e25d0b2b3804604f9eb

    SHA1

    71da8e406f52bb253c6b3932e24038dd593521a9

    SHA256

    457ae2aca2600e218804f138f83fb6f5ee451a0694cff806f97f15f5b00b1917

    SHA512

    0ece1d0ffa3cebd377155244da084f25206cda3ca499adf63eceab3b157598a2e290352120900563ece8938183b2a090dc527461eb4a197310abebb82103fecb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    50f4c20a94f3859da76e3ecf9e51eff8

    SHA1

    e1794ef9d1e650a058519c8091ce22a7dcc182e3

    SHA256

    f4679285814fc0cbc49a3893c98a3892e71daac79da1ab3d9d6a1864b05de6fe

    SHA512

    8ad904889592bf6b45d92601f0d859c9a724de52ce05ad1846fc468862a92b46edc5c69587038ffdb8baa911f8c3e47a12b09951f3834bb4e3e2b5443acf00c1