Analysis

  • max time kernel
    68s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    08/02/2023, 17:42

General

  • Target

    http:///root/sample/436bc13adc0fdbec717db21d347d64e8307fbe95

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/436bc13adc0fdbec717db21d347d64e8307fbe95
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1764
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1764 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:688

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\Q7Y85DTT.txt

    Filesize

    608B

    MD5

    1d88999c1f3901c859c108786047c368

    SHA1

    deffd0bc7b7a3093ed652d02a12bf6504fe5a4e9

    SHA256

    bd4550c54f694f1751dcbaedd1300dbc66ae66285b1f58fde908f2287d27063d

    SHA512

    3004aa38c503331dcb5137bb2feb7272dd04f72fa82241e0f0d135085d9e79e31dbaae63767410955d3786a7acdabb7a6d10ffab0fb25934708b74fc6268d872