Overview

overview

5

Static

static

1

original.eml

windows7-x64

5

original.eml

windows10-2004-x64

3

ATT00001.htm

windows7-x64

1

ATT00001.htm

windows10-2004-x64

1

email-html-1.html

windows7-x64

1

email-html-1.html

windows10-2004-x64

1

Analysis

  • max time kernel
    90s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/08/2023, 15:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ATT00001.htm

  • Size

    468B

  • MD5

    fac2a724d851220cf0d6be9efb4f1793

  • SHA1

    1f5fdcebfad91235fd1a325d8211810f75db281a

  • SHA256

    708c473e0541c7304ac2836f02d42432e041b4ecb211b4f5a669ac81f80b18d2

  • SHA512

    fb7cc6c9371ca7e04a494def16924889b94c9a5e3aef5e7d15ece32dc1d77186e89cab6a1c96c174885f43e75b6db01fe4841ee1fad5c7074ee23897afa6005a

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
    adwarespyware
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ATT00001.htm
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3560
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3560 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4352

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
    Filesize

    471B

    MD5

    4f13bc92872c28cd9af3da8be58b9832

    SHA1

    254033a5138e6103c30220cf296b4997e273b104

    SHA256

    9d34e64ebac6002c473b499156bea9f6bdac4131ba5288fe791aea71ace9f008

    SHA512

    458e33366c78f8c7bd26611bb3253bc2feeac7aa1bb3c5cc657507bff2ef688b940fe2be18daab79ae5f8cd51073bc7bbf225d3af679336c86ef8faf29e9fe82

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
    Filesize

    404B

    MD5

    85a63a87be9336a025e8e37f22ea3c6c

    SHA1

    a594bb783d23e18c5970b02fe2540de3a0da5327

    SHA256

    e4997f34d63a59ea3997a992744af1cc1f1e881cf0165af072a9451c02d72779

    SHA512

    e8a4b9d6008f6849cab8820e1206c78f2a9855d1a27d48c0e65fbb10a3693279a6ad744b63742ca5f8f2d7d8b5940b57b4a0b2b0aea9d022259a07019bda2081

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\SUUB7YB2\suggestions[1].en-US
    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

    Download Submit