Analysis

  • max time kernel
    143s
  • max time network
    168s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-02-2023 09:26

General

  • Target

    http:///root/sample/c76199300a35a821c39ee60bb0f521a9ef80dd48

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 37 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/c76199300a35a821c39ee60bb0f521a9ef80dd48
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:908
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:908 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1316

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

    Filesize

    4KB

    MD5

    f7dcb24540769805e5bb30d193944dce

    SHA1

    e26c583c562293356794937d9e2e6155d15449ee

    SHA256

    6b88c6ac55bbd6fea0ebe5a760d1ad2cfce251c59d0151a1400701cb927e36ea

    SHA512

    cb5ad678b0ef642bf492f32079fe77e8be20c02de267f04b545df346b25f3e4eb98bb568c4c2c483bb88f7d1826863cb515b570d620766e52476c8ee2931ea94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    2897da34e63dc7264119c1358edce0ae

    SHA1

    05ae97dc53f07ac4d0e98aa52af47863191a0197

    SHA256

    357487c69e685e8c74d3aae7995be2092b33b991b5232215146b70a91589bca2

    SHA512

    fc8d4a3934f90d475d477b671889638ea860e213417f5195a15da9326f5566e887d46321621ced75c2bd1a2eaa0f34cfe8762b7e55d5ae1f15c19dc869f70935

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

    Filesize

    340B

    MD5

    58974b06a34c416c9e545cbeab2dbe54

    SHA1

    11d982023f64c24c020bee64c9f915bd28dce7ce

    SHA256

    39314081410920813fce02d997a94b77277fbd91e14a58e0dda710db06ad00d3

    SHA512

    3a0b61c22fa3b8c4d17aa478170d6f251d62d77eac5f5eb1dcf75871e7cc0c9b72ee078eee1edcd826418a1f2cc4ce0304e456ca8dd271337ce1081bfb424941

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    7c55c5f3e3aa5b5c769fdb56aa4ea8c6

    SHA1

    6919a5f0f7c00b9e7baadc8dc0bb8f8b4ec4e484

    SHA256

    68f0fe905cfce66c971b6acae4e544adf651bee1a5f05df550516ed78c3dda77

    SHA512

    216f7faa255c1f7f8a5a42ec6a145bf1fd567225b6928b2b2d008e1dd17b3a942477852647f13fefe2797d6e531663c8937afd2c7082a0482934b8f468de3ec2