Overview

overview

1

Static

static

1

URLScan

urlscan

https://m.facebook.c...

windows10-2004-x64

1

Analysis

  • max time kernel
    101s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/07/2023, 14:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    https://m.facebook.com/story.php?story_fbid=pfbid02TQ5wYpsFScWcJQfxaFjjpvMrCU2MJNUJStT3roGgvef5Lmjy8dySBFouQwuaQ2kol&id=100003234032700&mibextid=7Upa0K

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 43 IoCs
    adwarespyware
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 24 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" https://m.facebook.com/story.php?story_fbid=pfbid02TQ5wYpsFScWcJQfxaFjjpvMrCU2MJNUJStT3roGgvef5Lmjy8dySBFouQwuaQ2kol&id=100003234032700&mibextid=7Upa0K
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3316
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3316 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2656

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\qwzqiba\imagestore.dat
          Filesize

          6KB

          MD5

          e65776b885e51bf4cea06eea1b3db565

          SHA1

          d296abc1f6b5fafc53e8235d338e602e6458c94e

          SHA256

          328a9848ff760df436ffd34f275aebb94a65002d0953e54e614f54e9a551a841

          SHA512

          b7cc19e2dabb6980477ac5068efcd1008f1b1be90b7a704f653dddbc0bcf3fd8be2352b19faf6a0ca7dd80d176bff6b45d7bf2f4b7e83a90cf4becf6c5461c73

          Download Submit

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\GVVED0TI\suggestions[1].en-US
          Filesize

          17KB

          MD5

          5a34cb996293fde2cb7a4ac89587393a

          SHA1

          3c96c993500690d1a77873cd62bc639b3a10653f

          SHA256

          c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

          SHA512

          e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

          Download Submit

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\NKPTYI9X\gB76kJXPYJV[1].png
          Filesize

          6KB

          MD5

          389dfa18be34d8cf767e06fd5cde4ec6

          SHA1

          47b751cffab47d076816c63ce08d3e84600376ee

          SHA256

          3c45ce612f41b1e7936e7cf5b235047344fd3146d1630e342f186d1d1e8e00d5

          SHA512

          c4db18f636ad85e87f93a208fb4b02b528659ba367e51cfa6d7826ac1159f445a85fbca8d12ac67556e8fb5208dae24ae309e783d50feb088ef0e9f47ac19430

          Download Submit