Overview

overview

1

Static

static

1

DIRECT DEB...m.html

windows7-x64

1

DIRECT DEB...m.html

windows10-2004-x64

1

Analysis

  • max time kernel
    135s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/06/2023, 19:10

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    DIRECT DEBIT_Payroll Tax Withdrawal_Check 003873653 .am.html

  • Size

    644B

  • MD5

    62d81681afb84b9bddd5c93ffcf04a27

  • SHA1

    7d222a6c2556e09b138e9fcfd74d54adf18edf6a

  • SHA256

    02f279426992bd5e40b484f395973dfdbda49f863c1cbf9e68cfc52df1e6fa2e

  • SHA512

    5f37fdbbc7be87f798eede0974c6eaca6a7023dd8925cade99837a27b11758b3e18f676a58f2d3550c49efc54c284ce37a0439e587c47af2ffb1983f09abe04b

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 37 IoCs
    adwarespyware
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\DIRECT DEBIT_Payroll Tax Withdrawal_Check 003873653 .am.html"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4288
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4288 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1924

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
          Filesize

          471B

          MD5

          6ed1b9e0ada67cd4e13ffe2ebff3202d

          SHA1

          26e57e0292d9b0fdf705748d723c197e50225bb5

          SHA256

          e4256833d3e11cd58e3725ea44482597742a652041a44b3339d371739a6e5735

          SHA512

          749783679cbd1f6f06ea031c22cc262152d57da36acf3778ac54717f5d9400aa0ad388b9898f5b0ff9bdf666f7f4c4ec590f770d48d1bf4301d05ad944746a33

          Download Submit

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
          Filesize

          404B

          MD5

          6dc8cb1f80c72e25266c6cbce51f53c0

          SHA1

          77598b642f910b3be707cc1e3e49e2a6651982ee

          SHA256

          0763ade086807337d3cc05609e4c5e3a8feb9c2ee60dc09642ff5fb00362403b

          SHA512

          11dc2c2fcb16a5264a33b253ab68e84b31266a275a5ede80640c91117eeeb01afb10d46a303444db0756da2c793201f074ff939ff5212aeba329186751fc4097

          Download Submit

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\39K1WZBJ\suggestions[1].en-US
          Filesize

          17KB

          MD5

          5a34cb996293fde2cb7a4ac89587393a

          SHA1

          3c96c993500690d1a77873cd62bc639b3a10653f

          SHA256

          c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

          SHA512

          e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

          Download Submit