Overview

overview

1

Static

static

1

datos.html

windows7-x64

1

datos.html

windows10-2004-x64

1

Analysis

  • max time kernel
    85s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/04/2023, 00:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    datos.html

  • Size

    2KB

  • MD5

    ce35245fc0f1f40d3e9c7ebb0c875caa

  • SHA1

    4a0aad90a13721e9511f2082ff227589dd2cd64e

  • SHA256

    977d7601103f1c0dbdd22afe6d1063a23125e9e76bb2ef60d6da3ef5865acfa1

  • SHA512

    1617eb22947a2b25d2a8e4423820f8f948cc4acda2e569c95da4ba80c35d8a650ae6e871d17876ab1cd2b6ff47eda274133a08dfb30ffadbe1255c1ab0368f73

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 39 IoCs
    adwarespyware
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\datos.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1908
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1908 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:436

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
          Filesize

          471B

          MD5

          c21af60a56cabee014f0bddf486296d4

          SHA1

          3b143b356aed0ab3e9a73843ea221e1cab819310

          SHA256

          3b8e9be80c68a0e4dda4cf30205638b58d2f055700e2cb131351ff9663cfa787

          SHA512

          9546c265eb771109b5fc39fd85da02be4b653180c2a1a7b43428fbaead7a8286ecfbe801dbffc8fd3fe58193803699128efcc3da633614396e6da85f1fee61e2

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
          Filesize

          404B

          MD5

          c93e3a739c79ecfa37a8e1c9b4173e9f

          SHA1

          b0eacb15fa5a882168adc7e4a135f73c3c0e2d3f

          SHA256

          727b7d88a6deec38882c49127c4c88a97352ca24f76157bcd11c99bdd02c633e

          SHA512

          8c1b76c584dec311ad247a0750ab4899f8b74cde47b4bf7195846defa53c71d90015ac1999a73dfd1d0d030ee039d3c45c0f43f2586389b918b7f1270147c753

          Download Submit

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\LZ0AI98S\suggestions[1].en-US
          Filesize

          17KB

          MD5

          5a34cb996293fde2cb7a4ac89587393a

          SHA1

          3c96c993500690d1a77873cd62bc639b3a10653f

          SHA256

          c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

          SHA512

          e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

          Download Submit