Analysis

  • max time kernel
    85s
  • max time network
    156s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    09/02/2023, 08:25

General

  • Target

    http:///root/sample/446f91317b4f8299e891f988c7cc5bb093648c77

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/446f91317b4f8299e891f988c7cc5bb093648c77
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1708
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1708 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1244

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\OJGLT6HK.txt

          Filesize

          603B

          MD5

          9d341a2a2873e844a6d889a7664b58e2

          SHA1

          32faf1863dcf7868e806257c978da671561bc18b

          SHA256

          df0fc87994e375550a552fc5b4b0ead62d4877d129cbc7277ad849d3c6c6e537

          SHA512

          dcbc2cd3edf24f34492bbaf7ee166f81529e3022356ac8164638dcf1cdb9b3acc294aaafed5b0f65f3499abf287c2e9957e8fad1cf6dc2421e82b34b7fc8b475