Analysis

  • max time kernel
    161s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-10-2023 03:10

General

  • Target

    error-html/index.html

  • Size

    4KB

  • MD5

    a918ee47a1405166d6e4bf67cc214233

  • SHA1

    884b2d2b20e158eb463abf70b38d65f4c15741cb

  • SHA256

    afc6aaaa31bb41cdbfdc9e458c0bfda185a35eb7562915e130564c51fb047dc3

  • SHA512

    119d26104e082aca0e6fd7bbddb6729281ec641c202288da44a4ed86c68d630ded95bed59572cfb491bc5d18fcc3420d00fc43280bf0b34567fa7e7abd70bea1

  • SSDEEP

    24:hPIjWP5LhYCDHduzxkk1NVMzOuINVIkRk4vMq+DI7PJux2AJZG71s1w118141DXq:tHkxGzOu/kCqf7xuxLZc5e+DUmd/rax

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 49 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 10 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\error-html\index.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3268
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3268 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3320

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0CPPPCBR\pxiDyp8kv8JHgFVrJJLm111VF9eI[1].woff

    Filesize

    11KB

    MD5

    d3c1729414aa3a5e03f8c92d34cde291

    SHA1

    57f9d78062894a280d5709352a5f25ab194ed2ba

    SHA256

    b0218e89792e46501b077549d73a3c0cfa98962b8f1f2e038628988a5019fe8f

    SHA512

    85ed20b4aae44a9debd06007cb8409fcef8e17367338809a690a07ebb8b95e9d39304811510bff632dd01563c8effbbf9ec9b263899f260dc0e374ab559aed7d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0CPPPCBR\pxiDyp8kv8JHgFVrJJLmv1pVF9eI[1].woff

    Filesize

    11KB

    MD5

    deefbb4235220000f071fdb532101680

    SHA1

    deb59693ce64da9b8510cf3291b0d88c1b3d6e85

    SHA256

    2bd596dbc3a32b64256acece1f2fbdeea12aee6eb52479daa86eef0bb52f1952

    SHA512

    c30b34c72e9ccb83e4c3ae347ae6eaeaefd0a4d260916f5dd54c7fb2eb5a49d5333ba61ff6a48b206380de41242eba659e45f9bbeaab7d062c9508dd7c778e31

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\PVJSO5VT\css[1].css

    Filesize

    3KB

    MD5

    8fcf7044f243114e79bf91d0410577fa

    SHA1

    443db372e5543f9792b62c6664632c2097aec80a

    SHA256

    63f15fdd1b810d32970f11d42ecdda14add0be2e078a773b0ef3fd9ddadf8c59

    SHA512

    eb18df6097ee896449be92976b1c1ad807a7f036861c42b787bb0c7f4dcd03ad87c3ee9807358f604687c98f90bae80a2975af4a7b00942fe5cdbf361a4e70bb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiAyp8kv8JHgFVrJJLmE0tCMPQ[1].woff

    Filesize

    10KB

    MD5

    b610d5982e15c09809de1c203948389c

    SHA1

    953ca581016169a02331d98a1236f968bb218877

    SHA256

    7b4b192911bfe851c10b97f1b29d517ab2b051dce6b01a0d155ea69664362140

    SHA512

    3620710d37f3100caa06c5d76493a3fad51ea7b04a250583db7762a69506812a0fe1ae3c8fc695f5958e763c2a83427276028175764a0129d7b2a6fb7fd6e214

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiByp8kv8JHgFVrLBT5Z1xlEw[1].woff

    Filesize

    9KB

    MD5

    3a4c48264069d498a209f5d564a5aea5

    SHA1

    fffd791d1307a0ff215b562a7dae5d4ae2924965

    SHA256

    93cf4cf618de6250a3f50f7afb5ae798c14b1a4f794c6722d6b15bac0e45d81b

    SHA512

    0131793ebbc186435c5c13e34b720d53fd8d3376c37e09a264091b6aceedcc313d032eaa295a366abec5b65def8bc060058866d01a7c02092796519cb0cd355d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiByp8kv8JHgFVrLCz7Z1xlEw[1].woff

    Filesize

    10KB

    MD5

    2ed184f355297674786cee87899e03b7

    SHA1

    3075477be6206edb5bc400810c9a7612b9030a2e

    SHA256

    da36c91659b4490934d163c4013483e688996ee3cf8249499f945911df94c730

    SHA512

    d18a646af6096fb2c416041ef7198544dafd821bb8af64cb330efd9f3ce0fb9b95d7cadd7f8ad5469b29e70f65ed256b821d5e7dcd9a516de68c4cec1d076195

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiByp8kv8JHgFVrLDD4Z1xlEw[1].woff

    Filesize

    10KB

    MD5

    1b2d56d8a295050749994a4127d4d118

    SHA1

    3862e8f2877ea37124d36015afc3edcb202086b5

    SHA256

    5de30000c31ba3d99514ae0c30874ac0698b611fe296019f80875fb91b9d55fe

    SHA512

    877a7adea8c017de8feb0a6630294a3c8d4f241b1536d05267cf20bccb3844646bc4f430fc63d120691d76a1f247d5131d249e2064e748ae91f6691c9ae239d3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiByp8kv8JHgFVrLDz8Z1xlEw[1].woff

    Filesize

    10KB

    MD5

    67a18102cad401f10ad39a582de224d5

    SHA1

    468ad29aecc3ef946c7c19fb2a0eff3210394fd2

    SHA256

    bd83479124cc5bc403c9e0d320840a5ea0e896e899689e5d37510444f5c7b763

    SHA512

    4bda29a09c7029b2c0a010bbd4fe2a18902eaaca5751f6d6db265adea86e5b412f51cc910b8193cb1ae8641c82acb86c76ce5f6a0d7d453fe9014b7abe21d205

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiByp8kv8JHgFVrLEj6Z1xlEw[1].woff

    Filesize

    10KB

    MD5

    d5a7daaedf64050d5b56e13462760b63

    SHA1

    2e229c88b5187a5b857798081d264359e28b6f56

    SHA256

    426316de2a499a38688cfcc92c143d25fa0c45c3afcf2074a84e3563dfa33c23

    SHA512

    1aa0da0743a4b00ebda620fc4f08e1fa86b397212e290463cf53d82f7b977272d4003020b17fc53358e3a9c5746543d01d07b6599f13b4436611f93b1701eca9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiByp8kv8JHgFVrLFj_Z1xlEw[1].woff

    Filesize

    10KB

    MD5

    724b4d095d29c788d89d13941a50e015

    SHA1

    dab3d8587d1bbea4ce3ea022cd927b9e8a58934c

    SHA256

    4b3616da45a51f661b450d11aa965d662837706a564bd677cfcf7cb50970d017

    SHA512

    8741b3e0d54e8ed27cfc7aeb7bd8484207247c133eea7627b456c94d635fd76961c2e3026de4e68fba5450006242aca0e0874de9608d9e90e3a2826252efaea1

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiByp8kv8JHgFVrLGT9Z1xlEw[1].woff

    Filesize

    10KB

    MD5

    9e24286fd522ec4c65176252fc6499a0

    SHA1

    cb06bc5b83043308deb008e0465cf75ecef64657

    SHA256

    316565c31e07631fe1a6a3f605ea1f40d529f7471d8fde952f863287d74bb7f6

    SHA512

    8e6ef56d6bd801f36d400f62a6136d6a05c93c51e77fe6e7e687d77503462357195136683566def36bc8516b48f6131d0d495493cf34b51f545fb3decaecbffc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiDyp8kv8JHgFVrJJLm21lVF9eI[1].woff

    Filesize

    11KB

    MD5

    a8ea8309be746e2558fce3eda631547d

    SHA1

    68e6a36d058f1d07b78ca3dd68f56d70eb9cebe9

    SHA256

    2cc4d1c92eab0945916f1e1f037bd96ae86e0d7bc903a59fbcd2a6e056d3a07f

    SHA512

    a5dce7884262e6818b948759c41d60a7a426879158c635fa7ce03f2f877500fb8d04536f347ae798d6dcc0fa1bada3ebe9490fe8815d6ee68acaf5ff2d759ccc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiDyp8kv8JHgFVrJJLm81xVF9eI[1].woff

    Filesize

    10KB

    MD5

    afb6010f809c43fb710d74e2b563e024

    SHA1

    f5308a71d82ab8609d776f14a4c599dc6d372203

    SHA256

    eaa51df3c5a7eb19000743fbd4e9cc080566df6a33845dbf576387100bc59ce0

    SHA512

    58baa159ee155eec17454a825657f30234612998f83be0bcc06c592d632db9716e81b8921aa1c4e52f3b8a2770f7bfde3a8e12d7f5409178004049ed0b185d00

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiDyp8kv8JHgFVrJJLmg1hVF9eI[1].woff

    Filesize

    11KB

    MD5

    8561c545c94ebeb87680d2494056c3ed

    SHA1

    191c42f636eefb14096e6addb36b7b3060cdb36b

    SHA256

    28238ab1ad114e57d2500d16aa0919ef25aee69dd8439b8557784926b696e7f7

    SHA512

    e0ef5f5ddcc584be57404be5dbdac83ab1608c4aa342d6a4c4c1b43e70fa9924e2c48a0a274e2ba604131431700d7c9959ab4f4907a6266ee86345ff72df275e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiDyp8kv8JHgFVrJJLmr19VF9eI[1].woff

    Filesize

    11KB

    MD5

    296e77ef37d055573d76ddb1b8a9553d

    SHA1

    600d761d48e39d430735dc64d804e414fa19c893

    SHA256

    f5c1083a86a60fa2dd35ad0f90f02a4e46157ac24efb5b6d7ecf63d8e641d984

    SHA512

    1aab07dd34166bc0b827821f738c6fce3b9844a0e9d67072d78c379ec57671b5c4162a136d1f5f61640458b6fdf788b486c91c0d020dd4fca997e6714feb9da0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiDyp8kv8JHgFVrJJLmy15VF9eI[1].woff

    Filesize

    11KB

    MD5

    e7fd3ab3b6ce24c43b0be0419c00ff59

    SHA1

    8ce7dc9620156d175be8acdbf8a12b10732b136a

    SHA256

    47c75bc28ef2b6e268e4d6c3069728570dadd91c315e04dddea65af9ae4788ab

    SHA512

    79c0a5e4c120960e1daf922446f1cd462f414522e3d651b2d8e6ee87fe80d913914af1e2c36c9d3c0510793f654b01b592997ec28d11f6eb91d5e4549e4d01c6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiEyp8kv8JHgFVrJJfedA[1].woff

    Filesize

    10KB

    MD5

    f8ed328094e376b0b011d24029d0c2e6

    SHA1

    a8db3445fc77bd533e33a6e0cf23d3c8c9f47cb8

    SHA256

    49f0742d602fcc0092b7dbcb7c710849988b0a7094df8979af9c5f151f301d6d

    SHA512

    74bf92ca4fbae035f69524c5f3775f6ade1d5765ab1637ccfe07c6c96a2f79301255a5bee48b9fc09ae31ed35bb58099524d760cd796303eb73c2ab44486e9dd

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiGyp8kv8JHgFVrJJLucHtG[1].woff

    Filesize

    11KB

    MD5

    777dda5a4170d9b7af08cdba3e50a6fb

    SHA1

    aa5e5580fff3f4172a788b8cf132366adeec50d5

    SHA256

    182723b819284d4741967a205449c1d1cda98d9304ce3c88578ec775b6e679a2

    SHA512

    add25fed4c95ef82fae9b2339b0da379ed0756e052af9a86d8ba87dc2b91c12968b973b2c7e54d3b243030842ffcf6c6325c9425eafe8ce4637d62166da22b30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X7JAO703\pxiGyp8kv8JHgFVrLPTucHtG[1].woff

    Filesize

    9KB

    MD5

    861b442767cd6233b449ae8bcaa7226b

    SHA1

    571520747bd30df30902a4b88df3aaba3ad116f4

    SHA256

    439ff4aae2d65377570512a4b0bb69b70985a94cebf3e1201b244a18fbefc353

    SHA512

    df23c275ca3acb0ea692f0b4c16275653468b557915cbc1c4b544b4d8bd14ca8a7fb17bdfca1cd8e719321c477979aff4f9f263f108b24fc1b9f42df80b7d33c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\XQJAPFBD\font-awesome[1].css

    Filesize

    21KB

    MD5

    1f9e9d1a5a1d347d945ef4b7727f2ea0

    SHA1

    2a8eccf4ac288eb99979b62dcc1cc1036d8ff8fa

    SHA256

    3083e8d3b21ddc3f0e6d65ec3580aa6edfaadca5d9737d9caa27e6a233e1ccf3

    SHA512

    c67c0c483bfb36fe499976f8f20283e44c553a75c06cda415950174e8f41256449472806f27c1023cd68e5b61ef26c9cf6488417faa13063e3912b05d3a8721c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\XQJAPFBD\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee