Overview

overview

1

Static

static

var/www/ht...eex.js

windows7-x64

1

var/www/ht...eex.js

windows10-2004-x64

1

var/www/ht...eex.js

windows7-x64

1

var/www/ht...eex.js

windows10-2004-x64

1

var/www/ht...dex.js

windows7-x64

1

var/www/ht...dex.js

windows10-2004-x64

1

var/www/ht...t.html

windows7-x64

1

var/www/ht...t.html

windows10-2004-x64

1

var/www/ht...b.html

windows7-x64

1

var/www/ht...b.html

windows10-2004-x64

1

var/www/ht...v.html

windows7-x64

1

var/www/ht...v.html

windows10-2004-x64

1

var/www/ht...n.html

windows7-x64

1

var/www/ht...n.html

windows10-2004-x64

1

var/www/ht...6.html

windows7-x64

1

var/www/ht...6.html

windows10-2004-x64

1

var/www/ht...ent.js

windows7-x64

1

var/www/ht...ent.js

windows10-2004-x64

1

var/www/ht...s.html

windows7-x64

1

var/www/ht...s.html

windows10-2004-x64

1

var/www/ht...g.html

windows7-x64

1

var/www/ht...g.html

windows10-2004-x64

1

var/www/ht...t.html

windows7-x64

1

var/www/ht...t.html

windows10-2004-x64

1

var/www/ht...b.html

windows7-x64

1

var/www/ht...b.html

windows10-2004-x64

1

var/www/ht...v.html

windows7-x64

1

var/www/ht...v.html

windows10-2004-x64

1

var/www/ht...ent.js

windows7-x64

1

var/www/ht...ent.js

windows10-2004-x64

1

var/www/ht...04.xml

windows7-x64

1

var/www/ht...04.xml

windows10-2004-x64

1

Analysis

  • max time kernel
    90s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-12-2022 08:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    var/www/html/tata-pravesh/public/images/login/__MACOSX/www.scarlet.be/_css/._nav.html

  • Size

    268B

  • MD5

    56201fecbf11aba6badaa18673f3dd99

  • SHA1

    5df24493d5a59956d462c1c94d57241f2f44bc1b

  • SHA256

    17eec5b884c01b7ca38339853914ea7aa2a82efe5be2f99ea06eda564aebbb6e

  • SHA512

    7f10d8adc256abc2e6168588af8b5c34c9e617673950425acbacae169bba676e3af302521a3be94538228d55251d7df92d781e4f77401d334f597b60a8f557a2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 39 IoCs
    adwarespyware
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\var\www\html\tata-pravesh\public\images\login\__MACOSX\www.scarlet.be\_css\._nav.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4956
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4956 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2436

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
    Filesize

    471B

    MD5

    35b6b5a1266ffd7f45cb92dc368b2f1f

    SHA1

    8c6a245e00c2f517086b7db9a2c24e876cc79f85

    SHA256

    94904b4d34cd577e29be5042bb21d65e685047f3591f3051c2c9850681d53ccc

    SHA512

    bce75bc358fb0bcfba3c071e86634dfefbfbcd9c3cb1057d4e4693b0b19318ca0ec837e8a2d7ec9308042a71f49650cec395bc6a054d12e7da7564af2fccbbae

    Download Submit
  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
    Filesize

    434B

    MD5

    11e6e4f417b8d8252e598178c5a506e8

    SHA1

    0ecc298084bb00ab6f1a052b9a3e773ec6b16eb6

    SHA256

    785e8942dc1c5d50ec987831fa147658b12b6f5a4a979212196c22856c4cad47

    SHA512

    3e06e490db1cad7487274ff161b9e85a81a3cd117b8ee4f956c181c604e82b158a7bb0b8113b14219216ce48cc553ab8cf5bd57c0d27f17870d194007dad5944

    Download Submit