Analysis

  • max time kernel
    110s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    10/02/2023, 11:53

General

  • Target

    http:///root/sample/f7b5c6363fc59eded3fbe0c90dbbbd2d6720f500

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/f7b5c6363fc59eded3fbe0c90dbbbd2d6720f500
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1604
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1604 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1996

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\AM2BI9SJ.txt

    Filesize

    607B

    MD5

    86a6aa098f65c89c022c91dc6850336c

    SHA1

    2fa753e9f2b7a083daae3dec0bea486c3684adf3

    SHA256

    a1f57a2b7dd282e3f50d4449118f0444a504d2d4b5de06eb5ec3886b6526318e

    SHA512

    119330617290e8decc35c7f71fedd07d6df8faeb46469db3d6afa09668615f2bcf706573850f66acbc92409b3164e67ec6c5d5090b54dafbcf45cf775845edb6