Analysis

  • max time kernel
    188s
  • max time network
    225s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 09:30

General

  • Target

    2f1a189ff7557e3bb5f75062534710dd55d8c1971f1ddbacf7885b76cbe96911.html

  • Size

    7KB

  • MD5

    9d089225869b868c6976a384cafd3c3a

  • SHA1

    6887215a703229b0c08a488b6bd14ba6d9320dd5

  • SHA256

    2f1a189ff7557e3bb5f75062534710dd55d8c1971f1ddbacf7885b76cbe96911

  • SHA512

    1940da6c0bc71c70a57301fb4748cd5f71cc9ea63742408d844fd670be7c8b56c4059e071175ec0ec0a28cbf9ba22b403ce9c223073755d3a364f88e1a192796

  • SSDEEP

    192:gJSG+9PzqN/PR1A8nddLXuSwSTLdlLXugfo2Ku+oLC:KSGabMPvLddLXuSwSTLdlLXugfo2KaC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2f1a189ff7557e3bb5f75062534710dd55d8c1971f1ddbacf7885b76cbe96911.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1828
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1828 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:224

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads