Analysis

  • max time kernel
    116s
  • max time network
    161s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 09:29

General

  • Target

    3e87b2c54d07000c47115879ed30af268097386e8df219e4a22d427b3a2e4a56.html

  • Size

    7KB

  • MD5

    1d063d4adbeddd788fc936b97e6e815e

  • SHA1

    77c0ffa268bf2afed29fa432ad6d90cbcd195d13

  • SHA256

    3e87b2c54d07000c47115879ed30af268097386e8df219e4a22d427b3a2e4a56

  • SHA512

    9925eac196014d63ee381caf132172d7be13b2ad486d53df447c4360e359dd6615e48464f8233927eff9bba98ffe4941ad69d055e071679d89c6a424fdd6bacb

  • SSDEEP

    192:KtJSG+9PzqN/PR1A8nddLXuSwSTLdlLXugfo2Ku+oLQWvg:KvSGabMPvLddLXuSwSTLdlLXugfo2KaY

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3e87b2c54d07000c47115879ed30af268097386e8df219e4a22d427b3a2e4a56.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1976
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1976 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1912

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\76QHCRRX.txt

    Filesize

    601B

    MD5

    93e5ae7cb37f8e08a67c6d51f2eb3588

    SHA1

    c2015d42480d116ac3b65a26691255be17a1777e

    SHA256

    8233df02dc28f09efaba79bcf72432f8ba2d29f4803b647bfd982bcddaa0df97

    SHA512

    889687530ed0de09ceb7c8835f9e8f0f17b339c92af9cf91814d797456dc27931584f6b04020e3e6fde12ee54c5e048fb0e2b98271fb5c5f5aa9ab772b1e2279