Analysis

  • max time kernel
    142s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 09:19

General

  • Target

    98b5e20360dd341f80fc3f14fe184c85b419266355d3dce7bbe9412c4309d77e.html

  • Size

    7KB

  • MD5

    3a1a5d2f9db1d1b5a0d0b55ae8a97dca

  • SHA1

    bf8375c42f2a803e7e961141260f4d72fe7825fb

  • SHA256

    98b5e20360dd341f80fc3f14fe184c85b419266355d3dce7bbe9412c4309d77e

  • SHA512

    d82dc6554d7339ba852fb8f596ad9117cc1f649c621fda2cd702526f207200adaa97cbd4c563441d31d392721d99d522ec81c21b153a8bec8f933843928843ec

  • SSDEEP

    192:4JSG+9PzqN/PR1A8nddLXuSwSTLdlLXugfo2Ku+oL6:iSGabMPvLddLXuSwSTLdlLXugfo2Ka6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\98b5e20360dd341f80fc3f14fe184c85b419266355d3dce7bbe9412c4309d77e.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1652
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1652 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1704

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\TZLHJ0EJ.txt

    Filesize

    603B

    MD5

    d78eb0d5498b9b521f480b4c9a68e1d4

    SHA1

    cd5bc34c8fa5a44009c68d1725468150fc325477

    SHA256

    5ac31cd8fcc4c68f5aaa08a8ed1fe5bc85c44b20eee0ba41d885ab05522c627e

    SHA512

    667716eaf8dcd5435e52fe7a0f42dd586e275998c8983563fac686ae05cf48a182ade97a3f24b0d6b9bda55bf5535988a48062b754cff6492a0aea730f8e7035