Analysis

  • max time kernel
    75s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    08-02-2023 19:33

General

  • Target

    http:///root/sample/5cb10d6f5965d190c35f70d100cfcc35c8defc6c

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/5cb10d6f5965d190c35f70d100cfcc35c8defc6c
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1404
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1404 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:772

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\2LXRONM2.txt

    Filesize

    606B

    MD5

    3170c194b836451c335b659d1fa71dc5

    SHA1

    a8806ba55140786e24c7b34ceeb76795d4d276f2

    SHA256

    a5378ded2c148c8aea57e8df62b77bd6776aab9ddc26b03e54c0112ead515028

    SHA512

    a5e85a0f3bdbe60b21e7d11e3b4a4496c182aec180fd1001e54a8910687b082a6d904f263490f41d87cca06071175d1ef8db882d21fc2d6a76040dc2ce3e517c