Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/12/2023, 14:44

General

  • Target

    c94e29cc3ab34bf1c8fe9ab23e1954c4.html

  • Size

    37KB

  • MD5

    c94e29cc3ab34bf1c8fe9ab23e1954c4

  • SHA1

    1be47b4a37dff6709b0a6401a3c186e5fc90fd39

  • SHA256

    24ae917ef8d35faad3fa1c02b131d6d8fdbcb4d0ed5711e65b88296906f86945

  • SHA512

    df4b5f88703f19ac299b8a2cc64d2712a9a5a11e5a1f59656101055f04f1d34e27afc7d3c76d479a998bc8c034effe296d96526d07e08404666b991df6a2b495

  • SSDEEP

    768:HrMIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7SZT:HQIRIOITIwIgIiKZgNDfIwIGI5IVJ7St

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 57 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c94e29cc3ab34bf1c8fe9ab23e1954c4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2068
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2068 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:2536

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

          Filesize

          229B

          MD5

          28603ff515a695d8204f10de60c53539

          SHA1

          39e85edbb028182651af7d9552b2069cead2eea9

          SHA256

          1186cf85d71ae2c64e9e11d69e0f5aabdeff5b01a1d59f282c4d0bdfc38553b1

          SHA512

          76789cacc696d968b392f181a24fdad045cbbe8379926fe67b9c9def974d423684847cd3f427605f0577d99ec995503d10ba6132d487bc5ce98e4bd360dd4bd4

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

          Filesize

          229B

          MD5

          c718084aaa75a8678a5f393249e30a9b

          SHA1

          c0adaba4d159a313f0053833e87a4260b2ee0e93

          SHA256

          584323402a7551d91bc2cbfb09a46e0d4df943c11665f8ab458255a735bd734f

          SHA512

          b2148c04408fe6fd9f79d09a21858a27bb231390790d6b5855631303f37f794317be812517289cab3ed859678122d6f01e13ebd18bca891a520b32c10bb1c9cf

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

          Filesize

          229B

          MD5

          07a30d01f721de2ba9e1570d507987b6

          SHA1

          595380f9255a688cee67013884801fe323e56132

          SHA256

          b8be0ce95afc50b3149d2091b7a8df7d14116b9bb907869ecb6896f62a041723

          SHA512

          789124810ebd189aea0935b5d9ffe592e0a8394e977c21f6cafb9c3dd8812f0b6b1b25fca544a7110857923ff0d236cdec04ebf99de18aa28e419a769adfecc0

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

          Filesize

          229B

          MD5

          132429090c275c9d281b42c305bf3e48

          SHA1

          eb08caa9688a48826d881e88d1a81f18d427cb9b

          SHA256

          b714d8e3168d81488f099843517da212168dc0d2e6702f7b7314d1cad9261850

          SHA512

          1ddcf3e21e660e8938e919c43f3dbe50ce98ac248545460381d169b6b484b172e821baf234581be1dadc4bb8530a8ee7d7d2e09354942c25b1b00f5d0d325164

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

          Filesize

          686B

          MD5

          df8cef28907e5304e9cf9dc331871fdd

          SHA1

          ff41fe15c6cf4e0ccf20a39e7d52c19abc2b5b9a

          SHA256

          63baf9eb864202d53721a6ea8d6502b655eaa698f2b5d8f803440ab8551cb21f

          SHA512

          8a153c30138c4d8986266ce55b41b969407d9a5a8aec510365bbbc41f676e60f902c171ccd36d486d17b2a925b798ad9d2f4d5c2916ba185532fa1e0f9246528

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

          Filesize

          641B

          MD5

          ec55283b1222316b98a3a5a21a0a2999

          SHA1

          fb805e0b9121612cb7c65376e0aeed1aaf3de4f1

          SHA256

          fe8bf08ac787f0296deacbc9cba3764837571d08bf6e1424bb968a5733bc7d5c

          SHA512

          4e6b65a946a0ef84c70289879524e96b0eedb3cf63da543b708b73c749ce16485035c7ebd64a79375ffba9877bf2afbfbb1f10019c415cf54fc691228cb4d661

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

          Filesize

          686B

          MD5

          945e395aed5a32e25944931ab82d0ff5

          SHA1

          6dedc6e2e86d90b23cbfa1fae362c9a9cff0d45b

          SHA256

          4ebcbf74fef0bceaba62f88f242db825d3a875f082cc12e0d39e3b5e4f45ffc2

          SHA512

          e9f3a9977c5483f1a4589628705610a0aa65c1bed1ecee36a795e8081ff91d8205e5209b6e9ed1c79a320708703c07a14828a75c79371c83f380bc780d05e800

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\URV365GW\www.youtube[1].xml

          Filesize

          13B

          MD5

          c1ddea3ef6bbef3e7060a1a9ad89e4c5

          SHA1

          35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

          SHA256

          b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

          SHA512

          6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\VersionManager\versionlist.xml

          Filesize

          15KB

          MD5

          1a545d0052b581fbb2ab4c52133846bc

          SHA1

          62f3266a9b9925cd6d98658b92adec673cbe3dd3

          SHA256

          557472aeaebf4c1c800b9df14c190f66d62cbabb011300dbedde2dcddd27a6c1

          SHA512

          bd326d111589d87cd6d019378ec725ac9ac7ad4c36f22453941f7d52f90b747ede4783a83dfff6cae1b3bb46690ad49cffa77f2afda019b22863ac485b406e8d

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0A013ETK\ad_status[1].js

          Filesize

          29B

          MD5

          1fa71744db23d0f8df9cce6719defcb7

          SHA1

          e4be9b7136697942a036f97cf26ebaf703ad2067

          SHA256

          eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9

          SHA512

          17fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0A013ETK\remote[1].js

          Filesize

          116KB

          MD5

          969bcddef1c9783ef5bd6604b67e0091

          SHA1

          d4eb1bfb52ab8d5a4f0a0dab58dda61aaf419bf6

          SHA256

          e878848ad649d0b771d44453abd0ae8e4aa7a2b93298641ed0c26fff581dcb4f

          SHA512

          2ed070c4e7cbb357be73c626a8ba4c7939d7c655ffe5ef5a3f352f2d01e4b1ade20c3a091ceb9c9697b40ed1f432c656545deba3f5756bbc26a5cf7caabfb8b9

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\base[1].js

          Filesize

          2.4MB

          MD5

          5bdc213718b5e58cdc9646967810459e

          SHA1

          80a2b274802a65a8828300f961e8ea30166767e7

          SHA256

          fd8d118fe8ac283b6e6ece58b4bcbbc06cd734f11761faa7c46ff08069f711f5

          SHA512

          c164c540f71c99784277e542399dacba89fafb9de63ecbfbafac636dbfd75a46093d5a71d8f0b63d2fba65fae20e84c0fdc2786e221bb57f553a7c656ec8c5f9

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\suggestions[1].en-US

          Filesize

          17KB

          MD5

          5a34cb996293fde2cb7a4ac89587393a

          SHA1

          3c96c993500690d1a77873cd62bc639b3a10653f

          SHA256

          c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

          SHA512

          e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\www-embed-player[1].js

          Filesize

          322KB

          MD5

          303d9f3d8084d98c3cfc81721790f192

          SHA1

          7bd3f1a1f6b4752b7d646dd45051e446be259a41

          SHA256

          d854531f9c3833536d6971b4fd7617dafe1a2c6fd0bbed9469122e73ff3b13a1

          SHA512

          5dacdc9b308da058cbc33e80a4e4900adb17bd63c9b55316da06cb3f0867257180d89cdf7d0069440cfdf5a696f66d2b6161add2e090daed59114bf1d6c36aff

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\www-player[1].css

          Filesize

          357KB

          MD5

          f273335110f2108edde77264cebddef1

          SHA1

          7b7881cfffe8fd1197e74da6ae4fdc62b3cce672

          SHA256

          af17d4cff542b33c97ee3a95f82a21d8993c87fd3472dff534fa855828a3b615

          SHA512

          c45111893164fcfed5be0c6c1fc847495868964e498411f7dd1658c7e7af6aba6931fd73825c9ff73d0afd0e7c48af0c7b3a7fbdc08b02a81deaa51657b00c39

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QPBAQNGM\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff

          Filesize

          19KB

          MD5

          de8b7431b74642e830af4d4f4b513ec9

          SHA1

          f549f1fe8a0b86ef3fbdcb8d508440aff84c385c

          SHA256

          3bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a

          SHA512

          57d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QPBAQNGM\KFOmCnqEu92Fr1Mu4mxM[1].woff

          Filesize

          19KB

          MD5

          bafb105baeb22d965c70fe52ba6b49d9

          SHA1

          934014cc9bbe5883542be756b3146c05844b254f

          SHA256

          1570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed

          SHA512

          85a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RVXHSNZG\SQgbchfOupGpmqTGWTosnYfncWnz9Dj8T9-qGXYPu1Q[1].js

          Filesize

          52KB

          MD5

          8b3d7ca7224a3157fcb3793b6b0ea2ba

          SHA1

          fd6413b554d68705ddc47dd19f495efa8196a137

          SHA256

          49081b7217ceba91a99aa4c6593a2c9d87e77169f3f438fc4fdfaa19760fbb54

          SHA512

          532e854517613d961885b58863ce188da1779224ce6dfcccd1cf0062f76792c73c0cc9e6529b06c5b86c3f5c6e660e00880cb35e556f9e3e79bda95001a443de

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RVXHSNZG\embed[1].js

          Filesize

          51KB

          MD5

          02e3aa6de0c0cecb0267cd83d6f64d51

          SHA1

          ab29481e145d32c7ff2a2e850a90e93ea9e2a60d

          SHA256

          234595572b74d58cd52917208142b3131ad7992126358ee0d917a40cd1240e83

          SHA512

          2e01c259120af23f10fab29d646879a9db5d1b8c4d8ed37b1c6cb0a49c19fbd7683e77f1749ac476fb44fe6f992c2403a3590a8d79ebf0dbaa3164f50c702660