Analysis

  • max time kernel
    130s
  • max time network
    195s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    12-02-2023 00:15

General

  • Target

    http:///root/sample/d2d85d5672fdde017a7bba2abd50c3c97bcbab3e

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http:///root/sample/d2d85d5672fdde017a7bba2abd50c3c97bcbab3e
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:272
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:272 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1676

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\5MUQ5N7X.txt

    Filesize

    600B

    MD5

    ddddff221b8412532de58b6293653cd6

    SHA1

    23ea83a09f89ca54546bb5b8162f620ceda5d335

    SHA256

    dc4ca803d99deaf429f8c765edfb9756c208081a980d8bbab2a59791ae0de5a8

    SHA512

    df2512c880ebc66f357367eb638baad66a636fe543dcf0617d465dcd4aa8002c3f1ead9f953584c659b9e08b9cb8233f2e1aa09adafd06ea1fd01f15a8e4f7b4