Analysis

  • max time kernel
    73s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-01-2023 10:20

General

  • Target

    http://www.summaryradical.shop/wnwfqtcnwt/kbqvr4401xatfe/mz532Z

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 37 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http://www.summaryradical.shop/wnwfqtcnwt/kbqvr4401xatfe/mz532Z
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1600
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1600 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2696

Network

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
    Filesize

    471B

    MD5

    b011d2725e33c0bae4cc6110f1228caa

    SHA1

    98595cb1500ab32b457063d29a60a8ae5496b49b

    SHA256

    cfb146a5a70caac0842df76ab5cffbb524b9964c4a4250473189d053f24ea9ae

    SHA512

    60e98f54414f8e14185dd66570b6f4e1cee6471648b700391e59042249e9546d9baa19a6dd0c0b6b8ea17e1eb4059303b7a584507624d0634a50d957af21bfc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
    Filesize

    434B

    MD5

    708ef057f84b46f15e8f105fc2b8cdfa

    SHA1

    111af0bcea157ed8696b2a2d4331f790edb16345

    SHA256

    c6e1ea1141cba698883461f869f4e6ad4e8bfd125ad5eae2d76dc9ef12ce19f1

    SHA512

    138e152a18c22afcdca83cda769ca0438ad7cdddc6cc3278f050a3f473262a3f2be4f5c553e45ad233305cef94f55deb575611d6616081c8225cfc44ab88f49c

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\zpu22o1\imagestore.dat
    Filesize

    1KB

    MD5

    f95b41be3f62f06436dfab6c64f02a23

    SHA1

    e116e80274be62ecbf9a5f7e12de34d5cee46095

    SHA256

    f1baa0adef19931c0f40e28204b40afbf826e1333ac962fd610a00324ab7bf2c

    SHA512

    468530ff731fa85d213d7e98683b6c4992b30fc13d9a9bdea9c7652adf3413eba1a344c3666aa6a3f424ef226c3c4a3a347db1209bab0955ab532bb0a88365a0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\90MK9CXD\favicon[1].ico
    Filesize

    1KB

    MD5

    011201ab56695ce86ea2f190bce2670b

    SHA1

    bb8fad6accf293e619360935047c23f00da3c769

    SHA256

    a9bc1ab7f7c0c6bc5d097050968993474e32346cffa537be1e0335a19645f12e

    SHA512

    56d53a1219e58ad045c96dc81d71c63c0cf5a9766add778d34895fdaa7fda8dead44161ec291f0ed3d10a405322b7973b56c6b211d68a8d82a8510b5b7c0456c