Analysis

  • max time kernel
    55s
  • max time network
    60s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/05/2023, 06:46

General

  • Target

    https://zhjdfzhgtfdthafda.s3.amazonaws.com/zhjdfzhgtfdthafda.html#rd/c1919JTrpi460677HsZs540033AsJ14683HemH461

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 32 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://zhjdfzhgtfdthafda.s3.amazonaws.com/zhjdfzhgtfdthafda.html#rd/c1919JTrpi460677HsZs540033AsJ14683HemH461
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2116
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2116 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1996

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    94efe971fd70d9d426978045456a879d

    SHA1

    97f170ffda6afd79be0795ffcc37c7efd82ee801

    SHA256

    fcfaf64c502c0feb0175aa72247927eeecd556004302a20e09f6fdaa644504e6

    SHA512

    baf5e9e1e9bbbaef3cd6365ec2b1c71314c14d0acd5837c1975e71a374b9fe724035929b47fe5bf5aef5845ef6eb17b178f20460b115419094733dfc8a27799c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    c97785d89884ee4d4ae774d28ccc7e14

    SHA1

    476ab7a032022016a5630345b2769f3c50f377ac

    SHA256

    aefcf3561d8e8f0822bb85f689aa55e84aa0bb406b14ec728428ab606cc12bbb

    SHA512

    4ed79e4dc27c1943c73482f7788a0e23017a53c7f7bafe437dd443c143156c4bfde72da984500b115dbd37e41004f8bd744c3b0d24987045232f2e274d4fa27c

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\cz9baam\imagestore.dat

    Filesize

    15KB

    MD5

    0c538b54b927580ad27085f2ef1c3a3f

    SHA1

    f14cb8564d31b8d6780b01995331be6c7ef940b3

    SHA256

    eb5d5cd34791b2ce1a5269c7a543a7f06ea480162dfb6865971b6d92a45f4951

    SHA512

    050c46c5d2f53191e15e5584be735561108ac340178d2d5760682396cfe5dfa0aaa0634f9ee69cb39667e0c32baffe23fabfa7f90dc032af673c1d0c11f40f67

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RP56V4OA\favicon[1].ico

    Filesize

    15KB

    MD5

    9e3e8b6d89d426ad950f5144d15921e6

    SHA1

    6cefe5c7ca4a97d2118fb849f37f4ffa4f9f0ee0

    SHA256

    703063f5cfebf76bd6190dd87052d6664d3a0fcf474d837d89f6b7fae7a8f3b5

    SHA512

    a063be8a7879b431338506aea3975376f7addf2b9c01563f4aaefdaa827c2568f76da0b32bae9665e09507c9cebb44fabe6d194e5944e000fc299fa0a41f1c44

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RP56V4OA\favicon[1].ico

    Filesize

    15KB

    MD5

    9e3e8b6d89d426ad950f5144d15921e6

    SHA1

    6cefe5c7ca4a97d2118fb849f37f4ffa4f9f0ee0

    SHA256

    703063f5cfebf76bd6190dd87052d6664d3a0fcf474d837d89f6b7fae7a8f3b5

    SHA512

    a063be8a7879b431338506aea3975376f7addf2b9c01563f4aaefdaa827c2568f76da0b32bae9665e09507c9cebb44fabe6d194e5944e000fc299fa0a41f1c44