Analysis

  • max time kernel
    100s
  • max time network
    183s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    11/02/2023, 03:56

General

  • Target

    http:///root/sample/55c9812652504ef02a0a0eca4848692d8ea82e57

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/55c9812652504ef02a0a0eca4848692d8ea82e57
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1104
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1104 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:960

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\OD5TW99C.txt

          Filesize

          603B

          MD5

          071f559091d9d9f7d759b9734663ed7d

          SHA1

          9e1624548ff9269d1a6e86ba813587a8f2ca8eaa

          SHA256

          0ced30f8ade5b9bd4513f669a9239af1b59111ce65c2287b079ccde6a954278f

          SHA512

          5a3812a30deddb26f6696f8838edb13efff7f41b2f19ba2a45543777b05b431aa59213a0208ab397ad44174322edcf02f7908de832397230aef4b243913b0f36