Analysis

  • max time kernel
    67s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    08-02-2023 23:56

General

  • Target

    http:///root/sample/3654d9c314dda5e008f97d5dfe49a6d2369f40c2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/3654d9c314dda5e008f97d5dfe49a6d2369f40c2
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:940
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:940 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:268

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\Z9DXN3H7.txt

    Filesize

    608B

    MD5

    f81780f8be1db32817226c5976664103

    SHA1

    00ce56a9a77e2adfc9ce405abe8dc0b4730af3b8

    SHA256

    26da81e4e17ead7a2cded6a1ebd8f94a61a0e205500f1189403bcb865f6bd70d

    SHA512

    ed60e4d1d9338b1deaac41cd297f4f2cad3010e2f663b606c81b66edf85316534b62d441588a0d0e5b1bbcd6cf044512f61c5d91487f78ed9b950cd3c1444d60