Analysis

  • max time kernel
    131s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 09:31

General

  • Target

    23ae885a7c4a3c1c47c9aa7623134a64151ea0905ebad70693217f79127716c8.html

  • Size

    7KB

  • MD5

    115b16a7715d4727b822075552674be8

  • SHA1

    7c9465fdd9cc779f8243919bc30af0e6358a2a46

  • SHA256

    23ae885a7c4a3c1c47c9aa7623134a64151ea0905ebad70693217f79127716c8

  • SHA512

    ac19462549e6e99f52b6c5a1f01fb2dc57438aeb048f797e9f2e49edf7cb84a0e45a238b2a646138b0d48dd503eeef3af86ab33cb6fc10b4aec51ab4293ab948

  • SSDEEP

    192:BJSG+9PzqN/PR1A8nddLXuSwSTLdlLXugfo2Ku+oLc:TSGabMPvLddLXuSwSTLdlLXugfo2Kac

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\23ae885a7c4a3c1c47c9aa7623134a64151ea0905ebad70693217f79127716c8.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1672
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1672 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1644

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\MTOGXXN3.txt

    Filesize

    608B

    MD5

    cc6e157c9332889c0854c62cfe1a53eb

    SHA1

    29fc3eb27e9b90cf647a2276bbeb86ca71871429

    SHA256

    122296f8088cbf6c82569f1c7b26fd12102cf50035f75b69490cae0a79019bdf

    SHA512

    1777171fd6c45f2fa50d62a1a5db0959281583d48526da2bea19c26a92cdb8293abd33550523d063ccfae8c441efe312ae97931a05fb9820f01091d90afb5ade