Analysis

  • max time kernel
    133s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-11-2022 09:38

General

  • Target

    ipacc/HotVideo/pagewait.html

  • Size

    1KB

  • MD5

    ada8bc44e180ed72ea3e1870623a6c54

  • SHA1

    383da689dea5884310eb80e8fdc7760a64fac002

  • SHA256

    4c728e6db57f4fc6bc63a7e5e9e1662a0dcb30822300b1ee66d0ef1abe89bef8

  • SHA512

    8e5e4c8c117bb55daa1b21af42441676e561900df4926c408bfba2a4505ecc5f23b483023120db1aa55cf666c4b5547881017f650bb1ebbcbf00b95a0123d962

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ipacc\HotVideo\pagewait.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2836
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2836 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2704

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    e32d02ce684c01ef3af05fae9066160e

    SHA1

    29c7a6e8ed553ac2765634265d1db041d6d422ec

    SHA256

    b00322d178a6cfc206458c26b26d6c80596073bb3283dcc3fc4e33a4b5f29d71

    SHA512

    e4e3175fb131095e4681ecb76d14dc74d059c0beafb6340965516c6d3d0538deb314b36a3f09df03b491edac84d5c0580e764fed1d8bca9abd4e65cb56167148

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    2bdd5eb4730673085623f71057cc2d7e

    SHA1

    7c9bda215f3995cabb609bf95c24ce9006887828

    SHA256

    18ce3975562aa570a50a993bb62d190723a622188b9c8e203cb210437dde6bb7

    SHA512

    664a637293a65a46dfa9ba9b5f6447905c84a9133551c8b48cfaad0e4399ca83248239154ac27d8a31a3c7b7d8eef313c7d6a0b2d7ddd368b71f168eed13a0f1