Analysis

  • max time kernel
    181s
  • max time network
    192s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 09:23

General

  • Target

    728af22f067efdda1dfe0532985e0ee69b5a302b3cab994ea1306ec121b52429.html

  • Size

    7KB

  • MD5

    4976d764e0e76b0d749785e659f52a18

  • SHA1

    887b0661f2514ef9cbaf06376616483a7feb040b

  • SHA256

    728af22f067efdda1dfe0532985e0ee69b5a302b3cab994ea1306ec121b52429

  • SHA512

    337eecd2e25c05e39027d92edc41ce28dd0e03dc7e735cd43e6a59ecf10bf9dabdda51ff3a1649c45915d55b6fe0e14cfc7b76ab92441a8a9854108b2aad24bc

  • SSDEEP

    192:uJSG+9PzqN/PR1A8nddLXuSwSTLdlLXugfo2Ku+oL5:ISGabMPvLddLXuSwSTLdlLXugfo2Ka5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\728af22f067efdda1dfe0532985e0ee69b5a302b3cab994ea1306ec121b52429.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:380
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:380 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1904

Network

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\4O6Y56LM.txt
    Filesize

    601B

    MD5

    94fb117236a1229f7d2a82e26757af02

    SHA1

    960c6886061a3efc835228e1c651ef42963141b0

    SHA256

    1ed6d09eef4468bc5ca5565536d05ed3100b4ed07047c12990069469fa16186f

    SHA512

    596e161b90db8fad86d640cd3004ed0e6988da717ca736a5c7a2e746bb01a6db2350e24a461971d06191e0c5d0243b81819a2b607daadafeb36853b96164766a