Overview

overview

1

Static

static

1

URLScan

urlscan

1

https://bit.ly/3W6Tj...

windows10-2004-x64

1

Analysis

  • max time kernel
    68s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/07/2023, 16:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    https://bit.ly/3W6TjO9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 42 IoCs
    adwarespyware
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://bit.ly/3W6TjO9
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4468
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4468 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3848

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\MQO2GUMK\www.google[1].xml
          Filesize

          13B

          MD5

          c1ddea3ef6bbef3e7060a1a9ad89e4c5

          SHA1

          35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

          SHA256

          b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

          SHA512

          6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

          Download Submit

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\qwzqiba\imagestore.dat
          Filesize

          1KB

          MD5

          f05442423ca41e1dbe1486cab3f5652d

          SHA1

          17633a698e1b0bd2d43328087a73b94ab9d836e0

          SHA256

          6b59beb0a72590c4498873c7c586b87136b7c37a025babb6b8e7662c6585ff2b

          SHA512

          d92795dc8389e7906e946577aa5bbd850724eee827025791a2a0ac4219ce4cf96d84baca68e4cadd6d20144daf54c3c7c694d291ce8e37e4e7edc691ed289a36

          Download Submit

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GVVED0TI\invoke[1].js
          Filesize

          26KB

          MD5

          affcc0a343126f51c3e69b52026ff24d

          SHA1

          1bfd99b1ec971afc51198dcb2ba3ee5bb85a1735

          SHA256

          0c16e29843132de98a01e2bc1d9433b53e4ea7ef50012387708301384d5a269a

          SHA512

          ade993b695ae14573c830fc12e4af7951e5580885bca78264ef1d2322b3e9396c54c9dc79cfc04daeea3fb143ecf416cdb1c69055fae6a060b46aa3864f4d3b5

          Download Submit

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\HV5TY8S3\favicon[2].ico
          Filesize

          1KB

          MD5

          1a91654529f763fd6db649687b951a49

          SHA1

          2ae674884a7ddc704105744c68c81f5f22b39507

          SHA256

          fd6a5bdc406e3d6134f27b6dda1a95b739b58c8665111dc58f47c0db29a98f15

          SHA512

          403ce193ebd644b681d340cfe7f80ec4075c84883340de81fe1531e2c9bbc8c2c6eb6de5cc75fc183f9c0a5140e765a613b73df755a9726e507f1058f814c8f9

          Download Submit

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\NKPTYI9X\cb=gapi[1].js
          Filesize

          135KB

          MD5

          9b08382669a20458489d8f66b9439d73

          SHA1

          ad5655cffaa1deafcea92745b8ad2dbf72f0f53d

          SHA256

          ef5b19b22516f38fd8c2e17c89b83d6cb52c96ceafb7feb39ce58dba32bff92e

          SHA512

          eb43b093c4b49ab128da3565ba636142f7d3c19835cd63f8bf9281e632af28d3ddac223f2b9282881f26aaa55f453375593c3d44eb98b957c3fa5e27164dca58

          Download Submit

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\NKPTYI9X\suggestions[1].en-US
          Filesize

          17KB

          MD5

          5a34cb996293fde2cb7a4ac89587393a

          SHA1

          3c96c993500690d1a77873cd62bc639b3a10653f

          SHA256

          c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

          SHA512

          e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

          Download Submit