Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/12/2023, 14:44

General

  • Target

    c94e29cc3ab34bf1c8fe9ab23e1954c4.html

  • Size

    37KB

  • MD5

    c94e29cc3ab34bf1c8fe9ab23e1954c4

  • SHA1

    1be47b4a37dff6709b0a6401a3c186e5fc90fd39

  • SHA256

    24ae917ef8d35faad3fa1c02b131d6d8fdbcb4d0ed5711e65b88296906f86945

  • SHA512

    df4b5f88703f19ac299b8a2cc64d2712a9a5a11e5a1f59656101055f04f1d34e27afc7d3c76d479a998bc8c034effe296d96526d07e08404666b991df6a2b495

  • SSDEEP

    768:HrMIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7SZT:HQIRIOITIwIgIiKZgNDfIwIGI5IVJ7St

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 57 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c94e29cc3ab34bf1c8fe9ab23e1954c4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2068
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2068 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:2536

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

    Filesize

    229B

    MD5

    28603ff515a695d8204f10de60c53539

    SHA1

    39e85edbb028182651af7d9552b2069cead2eea9

    SHA256

    1186cf85d71ae2c64e9e11d69e0f5aabdeff5b01a1d59f282c4d0bdfc38553b1

    SHA512

    76789cacc696d968b392f181a24fdad045cbbe8379926fe67b9c9def974d423684847cd3f427605f0577d99ec995503d10ba6132d487bc5ce98e4bd360dd4bd4

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

    Filesize

    229B

    MD5

    c718084aaa75a8678a5f393249e30a9b

    SHA1

    c0adaba4d159a313f0053833e87a4260b2ee0e93

    SHA256

    584323402a7551d91bc2cbfb09a46e0d4df943c11665f8ab458255a735bd734f

    SHA512

    b2148c04408fe6fd9f79d09a21858a27bb231390790d6b5855631303f37f794317be812517289cab3ed859678122d6f01e13ebd18bca891a520b32c10bb1c9cf

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

    Filesize

    229B

    MD5

    07a30d01f721de2ba9e1570d507987b6

    SHA1

    595380f9255a688cee67013884801fe323e56132

    SHA256

    b8be0ce95afc50b3149d2091b7a8df7d14116b9bb907869ecb6896f62a041723

    SHA512

    789124810ebd189aea0935b5d9ffe592e0a8394e977c21f6cafb9c3dd8812f0b6b1b25fca544a7110857923ff0d236cdec04ebf99de18aa28e419a769adfecc0

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

    Filesize

    229B

    MD5

    132429090c275c9d281b42c305bf3e48

    SHA1

    eb08caa9688a48826d881e88d1a81f18d427cb9b

    SHA256

    b714d8e3168d81488f099843517da212168dc0d2e6702f7b7314d1cad9261850

    SHA512

    1ddcf3e21e660e8938e919c43f3dbe50ce98ac248545460381d169b6b484b172e821baf234581be1dadc4bb8530a8ee7d7d2e09354942c25b1b00f5d0d325164

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

    Filesize

    686B

    MD5

    df8cef28907e5304e9cf9dc331871fdd

    SHA1

    ff41fe15c6cf4e0ccf20a39e7d52c19abc2b5b9a

    SHA256

    63baf9eb864202d53721a6ea8d6502b655eaa698f2b5d8f803440ab8551cb21f

    SHA512

    8a153c30138c4d8986266ce55b41b969407d9a5a8aec510365bbbc41f676e60f902c171ccd36d486d17b2a925b798ad9d2f4d5c2916ba185532fa1e0f9246528

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

    Filesize

    641B

    MD5

    ec55283b1222316b98a3a5a21a0a2999

    SHA1

    fb805e0b9121612cb7c65376e0aeed1aaf3de4f1

    SHA256

    fe8bf08ac787f0296deacbc9cba3764837571d08bf6e1424bb968a5733bc7d5c

    SHA512

    4e6b65a946a0ef84c70289879524e96b0eedb3cf63da543b708b73c749ce16485035c7ebd64a79375ffba9877bf2afbfbb1f10019c415cf54fc691228cb4d661

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

    Filesize

    686B

    MD5

    945e395aed5a32e25944931ab82d0ff5

    SHA1

    6dedc6e2e86d90b23cbfa1fae362c9a9cff0d45b

    SHA256

    4ebcbf74fef0bceaba62f88f242db825d3a875f082cc12e0d39e3b5e4f45ffc2

    SHA512

    e9f3a9977c5483f1a4589628705610a0aa65c1bed1ecee36a795e8081ff91d8205e5209b6e9ed1c79a320708703c07a14828a75c79371c83f380bc780d05e800

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\VersionManager\versionlist.xml

    Filesize

    15KB

    MD5

    1a545d0052b581fbb2ab4c52133846bc

    SHA1

    62f3266a9b9925cd6d98658b92adec673cbe3dd3

    SHA256

    557472aeaebf4c1c800b9df14c190f66d62cbabb011300dbedde2dcddd27a6c1

    SHA512

    bd326d111589d87cd6d019378ec725ac9ac7ad4c36f22453941f7d52f90b747ede4783a83dfff6cae1b3bb46690ad49cffa77f2afda019b22863ac485b406e8d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0A013ETK\ad_status[1].js

    Filesize

    29B

    MD5

    1fa71744db23d0f8df9cce6719defcb7

    SHA1

    e4be9b7136697942a036f97cf26ebaf703ad2067

    SHA256

    eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9

    SHA512

    17fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0A013ETK\remote[1].js

    Filesize

    116KB

    MD5

    969bcddef1c9783ef5bd6604b67e0091

    SHA1

    d4eb1bfb52ab8d5a4f0a0dab58dda61aaf419bf6

    SHA256

    e878848ad649d0b771d44453abd0ae8e4aa7a2b93298641ed0c26fff581dcb4f

    SHA512

    2ed070c4e7cbb357be73c626a8ba4c7939d7c655ffe5ef5a3f352f2d01e4b1ade20c3a091ceb9c9697b40ed1f432c656545deba3f5756bbc26a5cf7caabfb8b9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\base[1].js

    Filesize

    2.4MB

    MD5

    5bdc213718b5e58cdc9646967810459e

    SHA1

    80a2b274802a65a8828300f961e8ea30166767e7

    SHA256

    fd8d118fe8ac283b6e6ece58b4bcbbc06cd734f11761faa7c46ff08069f711f5

    SHA512

    c164c540f71c99784277e542399dacba89fafb9de63ecbfbafac636dbfd75a46093d5a71d8f0b63d2fba65fae20e84c0fdc2786e221bb57f553a7c656ec8c5f9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\www-embed-player[1].js

    Filesize

    322KB

    MD5

    303d9f3d8084d98c3cfc81721790f192

    SHA1

    7bd3f1a1f6b4752b7d646dd45051e446be259a41

    SHA256

    d854531f9c3833536d6971b4fd7617dafe1a2c6fd0bbed9469122e73ff3b13a1

    SHA512

    5dacdc9b308da058cbc33e80a4e4900adb17bd63c9b55316da06cb3f0867257180d89cdf7d0069440cfdf5a696f66d2b6161add2e090daed59114bf1d6c36aff

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\www-player[1].css

    Filesize

    357KB

    MD5

    f273335110f2108edde77264cebddef1

    SHA1

    7b7881cfffe8fd1197e74da6ae4fdc62b3cce672

    SHA256

    af17d4cff542b33c97ee3a95f82a21d8993c87fd3472dff534fa855828a3b615

    SHA512

    c45111893164fcfed5be0c6c1fc847495868964e498411f7dd1658c7e7af6aba6931fd73825c9ff73d0afd0e7c48af0c7b3a7fbdc08b02a81deaa51657b00c39

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QPBAQNGM\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff

    Filesize

    19KB

    MD5

    de8b7431b74642e830af4d4f4b513ec9

    SHA1

    f549f1fe8a0b86ef3fbdcb8d508440aff84c385c

    SHA256

    3bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a

    SHA512

    57d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QPBAQNGM\KFOmCnqEu92Fr1Mu4mxM[1].woff

    Filesize

    19KB

    MD5

    bafb105baeb22d965c70fe52ba6b49d9

    SHA1

    934014cc9bbe5883542be756b3146c05844b254f

    SHA256

    1570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed

    SHA512

    85a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RVXHSNZG\SQgbchfOupGpmqTGWTosnYfncWnz9Dj8T9-qGXYPu1Q[1].js

    Filesize

    52KB

    MD5

    8b3d7ca7224a3157fcb3793b6b0ea2ba

    SHA1

    fd6413b554d68705ddc47dd19f495efa8196a137

    SHA256

    49081b7217ceba91a99aa4c6593a2c9d87e77169f3f438fc4fdfaa19760fbb54

    SHA512

    532e854517613d961885b58863ce188da1779224ce6dfcccd1cf0062f76792c73c0cc9e6529b06c5b86c3f5c6e660e00880cb35e556f9e3e79bda95001a443de

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RVXHSNZG\embed[1].js

    Filesize

    51KB

    MD5

    02e3aa6de0c0cecb0267cd83d6f64d51

    SHA1

    ab29481e145d32c7ff2a2e850a90e93ea9e2a60d

    SHA256

    234595572b74d58cd52917208142b3131ad7992126358ee0d917a40cd1240e83

    SHA512

    2e01c259120af23f10fab29d646879a9db5d1b8c4d8ed37b1c6cb0a49c19fbd7683e77f1749ac476fb44fe6f992c2403a3590a8d79ebf0dbaa3164f50c702660