Overview

overview

1

Static

static

var/www/ht...eex.js

windows7-x64

1

var/www/ht...eex.js

windows10-2004-x64

1

var/www/ht...eex.js

windows7-x64

1

var/www/ht...eex.js

windows10-2004-x64

1

var/www/ht...dex.js

windows7-x64

1

var/www/ht...dex.js

windows10-2004-x64

1

var/www/ht...t.html

windows7-x64

1

var/www/ht...t.html

windows10-2004-x64

1

var/www/ht...b.html

windows7-x64

1

var/www/ht...b.html

windows10-2004-x64

1

var/www/ht...v.html

windows7-x64

1

var/www/ht...v.html

windows10-2004-x64

1

var/www/ht...n.html

windows7-x64

1

var/www/ht...n.html

windows10-2004-x64

1

var/www/ht...6.html

windows7-x64

1

var/www/ht...6.html

windows10-2004-x64

1

var/www/ht...ent.js

windows7-x64

1

var/www/ht...ent.js

windows10-2004-x64

1

var/www/ht...s.html

windows7-x64

1

var/www/ht...s.html

windows10-2004-x64

1

var/www/ht...g.html

windows7-x64

1

var/www/ht...g.html

windows10-2004-x64

1

var/www/ht...t.html

windows7-x64

1

var/www/ht...t.html

windows10-2004-x64

1

var/www/ht...b.html

windows7-x64

1

var/www/ht...b.html

windows10-2004-x64

1

var/www/ht...v.html

windows7-x64

1

var/www/ht...v.html

windows10-2004-x64

1

var/www/ht...ent.js

windows7-x64

1

var/www/ht...ent.js

windows10-2004-x64

1

var/www/ht...04.xml

windows7-x64

1

var/www/ht...04.xml

windows10-2004-x64

1

Analysis

  • max time kernel
    136s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-12-2022 08:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    var/www/html/tata-pravesh/public/images/login/__MACOSX/www.scarlet.be/customercare/._logon.html

  • Size

    268B

  • MD5

    977fe817a79c4b4a382624f6d39750f1

  • SHA1

    abf97f50151478c40dffd6abaf01da70393b2578

  • SHA256

    58d3065a22e5c4f535d06e14575952bb68f905d8d8280a01a44971a736ab1ca4

  • SHA512

    f085d745f5f4da7501aa2c1923c7248e34c1d8e3ccc019790945d79f6e9512f72e53084c517087f8ce0ae42e46b440235fdd74d3457cbe282c16c469ecb0f0e5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 39 IoCs
    adwarespyware
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\var\www\html\tata-pravesh\public\images\login\__MACOSX\www.scarlet.be\customercare\._logon.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:384
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:384 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4892

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
    Filesize

    471B

    MD5

    35b6b5a1266ffd7f45cb92dc368b2f1f

    SHA1

    8c6a245e00c2f517086b7db9a2c24e876cc79f85

    SHA256

    94904b4d34cd577e29be5042bb21d65e685047f3591f3051c2c9850681d53ccc

    SHA512

    bce75bc358fb0bcfba3c071e86634dfefbfbcd9c3cb1057d4e4693b0b19318ca0ec837e8a2d7ec9308042a71f49650cec395bc6a054d12e7da7564af2fccbbae

    Download Submit
  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
    Filesize

    434B

    MD5

    1e1378e4e331e72856c2e52a36f78b68

    SHA1

    6f48f9904cda8ea34702a41b659a3a3e2dd6c496

    SHA256

    463081233b1e2f3ccbb6566afab92b7816e34fa667d1332d53f7a3410e2fced1

    SHA512

    82ff50dfcc5050cd5c04218d923ef14bb99670398db9d3dc9054cd0aaae2d772ee892a852c38b64dc4bdad0a0a0fe05c90d014ff58bd997ac38cb5fe9ae73925

    Download Submit