Analysis

  • max time kernel
    73s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-02-2023 08:58

General

  • Target

    7b96da9c88b9ad7a56fdc220c0a68a196f8ce46e2247cd1c6cc26d6a4f12f870.html

  • Size

    2KB

  • MD5

    558da264c83bfe58c1fc56171c90c093

  • SHA1

    5e7216bb407cb7e0aa5a932ceefbd27986df6e08

  • SHA256

    7b96da9c88b9ad7a56fdc220c0a68a196f8ce46e2247cd1c6cc26d6a4f12f870

  • SHA512

    9fa73444caf3cfadcbd5edf8b55a733d6dd114d50f26759f1d882379a83f1d1015bb7e4e183b7e8e7b03a35610d91415846978131855968f7fc7db14eed21d98

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 39 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7b96da9c88b9ad7a56fdc220c0a68a196f8ce46e2247cd1c6cc26d6a4f12f870.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3248
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3248 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3780

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    cccaaeef5d856cc76db09fcc38d7ecba

    SHA1

    a773555a513358cf0dde7a4d7c6b8357ccd7270c

    SHA256

    8078927d5b22d9d98e14c642fd086ebe0fa620a6a2e83aa965354c119fd92c49

    SHA512

    a1c9fd1a9ba3c3b93bc9c2680da64b3098ee9fd101fc648e97202054e0d86ddbc822e0136dd85398debb1fd57ca67fd8ef404dddb567d3066d9131e0b7d8e077

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    434B

    MD5

    38f7d7ce725b3b5a543e21caa6354e73

    SHA1

    47b5c613625fe25873091c68845300bb0064a5d5

    SHA256

    5c38d0203bb3ff7f45975abe0b81585f2684fe192f5d0be97b95c06990a13e64

    SHA512

    68c2b4af3357ef28af3201eb32859ce771f1fa8a682e81742c83645dc949232e279ef39bf174d38358d2acf7377cff4f69a9566b3fff182a3cb6da99ff828165