Overview

overview

1

Static

static

1

watch.html

windows7-x64

1

watch.html

windows10-2004-x64

1

Analysis

  • max time kernel
    139s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-06-2023 12:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    watch.html

  • Size

    682KB

  • MD5

    85471e43edaec61c1a6bdba44564365f

  • SHA1

    ccb46cd49c436db8434570eace37c4fd27a5d4ce

  • SHA256

    1a26e17217700524e432b12993a16cd3cc70b6da59feede35faade0e9fbb392b

  • SHA512

    5620bda7eb84508e9bb9b932049db2b64be806a88d150865c1e6375ab5849f035e15d136c26b32e5af2686f1f53721af87ec4139444c29bfdfed2f3486c330a3

  • SSDEEP

    6144:qRUBhBNBUBFBSBkBxBoUpIcd3G0+fJ0iknToEYn9x6e4prz342bXit5T2tyMNjxl:qmDz+f46/ysIwG0+fJ0nt9DpX

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 39 IoCs
    adwarespyware
  • Modifies registry class 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\watch.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:5044
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5044 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:4712

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
    Filesize

    471B

    MD5

    eaf2b4a8cb83c01a0cc1467f9c0ce105

    SHA1

    62c90c740292afe990f91e3f4dd2c643141a8f17

    SHA256

    721cd25c9f544b3f19a5a1c32f2d5d776eac9f3639673a944365d84717becbb0

    SHA512

    7024515f30290c52f65005f32513206b634d4b0730c0faed60828d97e12c74660e264603511a61f34e7d569446bfca1b25482fdc947aeb02d328c68f01b39ebf

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
    Filesize

    404B

    MD5

    d17f9e2885bf9bd8cff45a6f8dcf780a

    SHA1

    a7a4d9c5365d9798fe5a1d54ae84fafe586f5ad1

    SHA256

    3a3605e96140a2b54b24590d90dfa13dc480727e9692345edcdbcf4e9121d23f

    SHA512

    7e21327babd55362d3b4e91d0bdc165e0d222a0c315bc61e9e7d3b86f4332ab1779ef457a3937778421d44fa4615cda73c9be21ff601385f1a165e2cdf6e63f1

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\4HAJQ22Y\suggestions[1].en-US
    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

    Download Submit