Analysis
-
max time kernel
141s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
24-05-2023 05:49
General
-
Target
sample.html
-
Size
128KB
-
MD5
989f367feb49d433c9fa7cf23e09ef3f
-
SHA1
cb6d91326fc1c06195fab1af149a499368619fbc
-
SHA256
ce4e40d489347601be589d719d829a7a675fab629ecd9fd6de4d3662ead73dc0
-
SHA512
d6c2c779dbaf31f8acb8fe14d18988de328cab08bd89d083c72386fd24134c6db12bd01bf8d798587fd03c3782f155cffefa542e4ecdd9071d421eb3b339b203
-
SSDEEP
3072:JxN20eck64Cwm7YshFyLSc9PIt88wjibUUhu:JKb
Malware Config
Signatures
-
Modifies Internet Explorer settings 1 TTPs 39 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 11 IoCs
-
Suspicious use of SendNotifyMessage 9 IoCs
-
Suspicious use of SetWindowsHookEx 7 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1260 CREDAT:17410 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
-
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\PushRedo.3gpp"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
471B
MD594efe971fd70d9d426978045456a879d
SHA197f170ffda6afd79be0795ffcc37c7efd82ee801
SHA256fcfaf64c502c0feb0175aa72247927eeecd556004302a20e09f6fdaa644504e6
SHA512baf5e9e1e9bbbaef3cd6365ec2b1c71314c14d0acd5837c1975e71a374b9fe724035929b47fe5bf5aef5845ef6eb17b178f20460b115419094733dfc8a27799c
-
Filesize
404B
MD59e70b77ca142ca3c4ffa3f8b2e0a065e
SHA1d837455ca74e0018b7b46c6008e0efdb2ee7dc0e
SHA256b15f96cba35d4178727d9183c5df2af8105f90976588f235e2b3fc192c7620bd
SHA5124c9bb2538d818e25c31bfb786f7cde77ed0fc0aac8961c6cbd6c2f79cd5b02d15f536ccdb1703e4fc31e5eeb91104c8c3ffa9724feed51d853c898e6405d99cc
-
Filesize
17KB
MD55a34cb996293fde2cb7a4ac89587393a
SHA13c96c993500690d1a77873cd62bc639b3a10653f
SHA256c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
SHA512e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee
-
Filesize
992KB
-
Filesize
208KB
-
Filesize
2.7MB
-
Filesize
96KB
-
Filesize
92KB
-
Filesize
68KB
-
Filesize
92KB
-
Filesize
68KB
-
Filesize
116KB
-
Filesize
68KB
-
Filesize
2.0MB
-
Filesize
252KB
-
Filesize
16.7MB
-
Filesize
132KB
-
Filesize
68KB
-
Filesize
96KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
108KB
-
Filesize
96KB
-
Filesize
192KB
-
Filesize
412KB
-
Filesize
444KB
-
Filesize
344KB
-
Filesize
68KB
-
Filesize
160KB
-
Filesize
92KB
-
Filesize
144KB
-
Filesize
68KB
-
Filesize
140KB
-
Filesize
72KB
-
Filesize
132KB
-
Filesize
76KB
-
Filesize
72KB
-
Filesize
1.2MB
-
Filesize
176KB
-
Filesize
1.7MB
-
Filesize
368KB
-
Filesize
604KB
-
Filesize
68KB
-
Filesize
72KB
-
Filesize
2.2MB
-
Filesize
1.1MB
-
Filesize
212KB
-
Filesize
148KB
-
Filesize
68KB
-
Filesize
388KB
-
Filesize
68KB
-
Filesize
72KB
-
Filesize
76KB
-
Filesize
636KB
-
Filesize
68KB
-
Filesize
1.0MB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
72KB
-
Filesize
68KB
-
Filesize
96KB
-
Filesize
88KB
-
Filesize
164KB
-
Filesize
72KB
-
Filesize
68KB
-
Filesize
68KB