Overview

overview

10

Static

static

1

URLScan

urlscan

10

https://s1.sphinxonl...

windows10-2004-x64

1

Analysis

  • max time kernel
    127s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-07-2023 06:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    https://s1.sphinxonline.net/community/TSCACSC/tellme/d/bxhxtjm7jbgk6ja

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 49 IoCs
    adwarespyware
  • Modifies registry class 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://s1.sphinxonline.net/community/TSCACSC/tellme/d/bxhxtjm7jbgk6ja
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4148
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4148 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:4084

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\8IFPZIOL\s1.sphinxonline[1].xml
    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\qwzqiba\imagestore.dat
    Filesize

    4KB

    MD5

    b3d9eced2c552eba4dd593cd7af1f24b

    SHA1

    46c1b3819ab9a7e52a6e4f3f547195ceca60d0bf

    SHA256

    cf98a428c819a89b6461cd03d880283a5f15f7b99996286a42e1e68e3df917fb

    SHA512

    41dbf88bdcbf4ceb2fe97a6e504a36ff39e72d211a0be4897a0a86197155efe62b097a5e94d8df438d2b34053a5f9b22ab9b07015899e02c362ad0df809ade40

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GVVED0TI\favicon[1].ico
    Filesize

    4KB

    MD5

    a0aaab2c934070e79979655d511e1df1

    SHA1

    1f0bdca2e25f1b28a31870a9ffd3e92d1b88e7ef

    SHA256

    de4e790008a26eaf31fea7034aec53f2499ccc2510237d60a2edb2aa6a8ec8aa

    SHA512

    ddd22a6378d30e2199bbdbd9dd58acd195bf47b8ba83f2f83a6073fdb34eb8e56834092f5739e53987feaf61be9f0eda0e8268658621f3c4065792ec9199ffef

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\HV5TY8S3\kendo.common-bootstrap.min[1].css
    Filesize

    309KB

    MD5

    f94ff5b6b1a342b436763c06483aaf14

    SHA1

    83b719561ac4742b241e97c9074452fcf3dc5a04

    SHA256

    43fab01c33561c036f16248c66bf71358c37c2ca0169d437fa13a811e7e69dc9

    SHA512

    fd159b625603b9a6f889accd57a0e971eda4713ef70bfa276861b3b2ca43dd6ad6faf3de00aead034b9bb5d797ddfcea1597ee4b077463fc33287c15206195bd

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\NKPTYI9X\suggestions[1].en-US
    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

    Download Submit