Analysis

  • max time kernel
    144s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 10:27

General

  • Target

    1722bad4231ea5566f23876c82064618.html

  • Size

    17KB

  • MD5

    1722bad4231ea5566f23876c82064618

  • SHA1

    f467cfa4b6f1477b221a9000b545b302e9af4bae

  • SHA256

    e784cf21f2000eeba0b07183c52504703821a61828728e6ed49e0872f484608a

  • SHA512

    64a267cef1ac6e75d9216497bfcd99c39c8efb8c173ddcf0a166a61973877e9738e907af3d55ddfea00ffb2c49a682be7bc494bd6776fc05e9455719700157df

  • SSDEEP

    384:fjGzb7cfZt/s/N7ceO1LmspYutzETexdy/YqZtHTN2V:2cX/sdOdzETekYOxTm

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 61 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1722bad4231ea5566f23876c82064618.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1832
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1832 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:808

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\z99pgii\imagestore.dat

          Filesize

          1KB

          MD5

          f4a1360c156b9055eff4144fda173e0d

          SHA1

          8de88ddb6e8e5e966ff5ac25effe4ed2487d0741

          SHA256

          2ed50ea8c14c91ec9f20560267f1b3530c68702d890303572226fa9bcdd8c9ad

          SHA512

          8b3ccbccd3f71ac34d822b6a16d1852aae30979ee71829faad2caec64214dcdfe5d8c1b312a33b3f0647dcf2c107babe4870a7eb4683ecbdb60d5640a982f640

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\6AXLYU2E\analytics[1].js

          Filesize

          51KB

          MD5

          575b5480531da4d14e7453e2016fe0bc

          SHA1

          e5c5f3134fe29e60b591c87ea85951f0aea36ee1

          SHA256

          de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd

          SHA512

          174e48f4fb2a7e7a0be1e16564f9ed2d0bbcc8b4af18cb89ad49cf42b1c3894c8f8e29ce673bc5d9bc8552f88d1d47294ee0e216402566a3f446f04aca24857a

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\6AXLYU2E\d[1]

          Filesize

          23KB

          MD5

          ef76c804c0bc0cb9a96e9b3200b50da5

          SHA1

          efadb4f24bc5ba2d66c9bf4d76ef71b1b0fde954

          SHA256

          30024e76936a08c73e918f80e327fff82ee1bd1a25f31f9fce88b4b4d546055d

          SHA512

          735b6470e4639e2d13d6b8247e948dbd6082650902a9441b439ceacc4dfce12cd6c9840ee4c4dcb8a8f1e22adb80968f63ace0c0051811a8d6d1afb2b3c68d74

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\6AXLYU2E\jquery.fancybox.min[1].css

          Filesize

          12KB

          MD5

          a2d42584292f64c5827e8b67b1b38726

          SHA1

          1be9b79be02a1cfc5d96c4a5e0feb8f472babd95

          SHA256

          5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0

          SHA512

          1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\6AXLYU2E\script[1].js

          Filesize

          9KB

          MD5

          defee0a43f53c0bd24b5420db2325418

          SHA1

          55e3fdbced6fb04f1a2a664209f6117110b206f3

          SHA256

          c1f8e55b298dc653477b557d4d9ef04951b3b8ba8362a836c54e2db10cda4d09

          SHA512

          33d1a6753a32ec06dcfc07637e9654af9321fe9fa2590efc70893eb58c8603505f2be69084fb2bcbf929218c4e7df9f7a8bc3f17a5b41ed38c4d8645296ebab5

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\6AXLYU2E\suggestions[1].en-US

          Filesize

          17KB

          MD5

          5a34cb996293fde2cb7a4ac89587393a

          SHA1

          3c96c993500690d1a77873cd62bc639b3a10653f

          SHA256

          c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

          SHA512

          e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BP0ZYM9B\favicon[1].ico

          Filesize

          1KB

          MD5

          0106d4fd24f36c561cf3e33bea3973e4

          SHA1

          84572f2157c0ac8bacc38b563069b223f93cb23c

          SHA256

          5a6c5f7923c7b5ba984f3c4b79b5c3005f3c2f1347a84a6a7b3c16ffbf11777d

          SHA512

          57b77c5d345eca415257e708a52a96e71d3ddf4a781c1f60e8ba175ea0c60b1d74749cd3fa2e33f56642ce42b7221f16491cf666dc4e795ecc6d1fbfdb54ab98

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BP0ZYM9B\style[1].css

          Filesize

          165KB

          MD5

          65760e3b3b198746b7e73e4de28efea1

          SHA1

          1d1a2cce09b28cffc89378b0a60cbb1aa8a08c4f

          SHA256

          10e40ea3a2ad69c08d13e194cf13eb4a28a093c939758a17a6a775ef603ac4fc

          SHA512

          fbcb91f26b7bd874d6a6a3b1d4d6f7277ded091cdae5706c285b4d5d17446a1bf58572c224af38393ce49b310a51d5c5d60711c7094e5d32abbaaf10d1107e1b

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BP0ZYM9B\zyw6mds[1].css

          Filesize

          1KB

          MD5

          4c2e266587bb622926747856f9bdb65d

          SHA1

          16999e0d2a01b96b70a0ef191461388c5047f1ed

          SHA256

          cfddcd1ab28963d8219ef42d0b455b1e062521bfe7b100d4c47e0b9dd0a79023

          SHA512

          c9526cd6537aa068b48641fd2dfb93843fc5f535faa4cd856d4d3427c8f1e97d79c969215a9291fd50a96597c43dba3c45a3fe2ad32c78677e38f93dbfc32ca0

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Q9YQXK50\css[1].css

          Filesize

          530B

          MD5

          0a127ad39a8ebe4207492293b556adf6

          SHA1

          17d3dad64e4f9139cfb85bbcca6659a8aa532a48

          SHA256

          c1294965425b5028a83bbe5eeed0cd9b92733ec41efd07e34532522d4c97b6e1

          SHA512

          5aa845c5c6c20259d9c6bc0c9fdbd13ff178ba4008865f7113387767db0ad39cd53c1d276cfa4997186fd39f21d30bf00caf8d092e5c04119d992368b1563df3

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Q9YQXK50\jquery.min[1].js

          Filesize

          84KB

          MD5

          c9f5aeeca3ad37bf2aa006139b935f0a

          SHA1

          1055018c28ab41087ef9ccefe411606893dabea2

          SHA256

          87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

          SHA512

          dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Q9YQXK50\reboot.min[1].css

          Filesize

          3KB

          MD5

          51b8b71098eeed2c55a4534e48579a16

          SHA1

          2ec1922d2bfaf67bf3ffabe43a11e3bf481dc5d7

          SHA256

          bd78e3bcc569d029e7c709144e4038dede4d92a143e77bc46e4f15913769758b

          SHA512

          2597223e603e095bf405998aacd8585f85e66de8d992a9078951dd85f462217305e215b4828188bf7840368d8116ed8fb5d95f3bfab00240b4a8ddab71ac760d

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Q9YQXK50\recaptcha__en[1].js

          Filesize

          502KB

          MD5

          37c6af40dd48a63fcc1be84eaaf44f05

          SHA1

          1d708ace806d9e78a21f2a5f89424372e249f718

          SHA256

          daf20b4dbc2ee9cc700e99c7be570105ecaf649d9c044adb62a2098cf4662d24

          SHA512

          a159bf35fc7f6efdbe911b2f24019dca5907db8cf9ba516bf18e3a228009055bcd9b26a3486823d56eacc391a3e0cc4ae917607bd95a3ad2f02676430de03e07

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\VH9W14NQ\js[1].js

          Filesize

          186KB

          MD5

          4722ece417248ff7bee11f49a6bbe1d6

          SHA1

          01cf5aa5df4ff5f45646591ef5b988f4e465d840

          SHA256

          577a4c8eb2bdec521e2199e3c3224fedce869e8dbef46eca39f3b453893780bc

          SHA512

          4aee2288b0d16a5c29f416060e19275c349ece98430062152a1e4aaa7c69e2550c55642c0c1addb1c8b4b05cc805eb62b90ffcbf643b83afc086ccb99d95d958

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\VH9W14NQ\js[2].js

          Filesize

          240KB

          MD5

          ed36e8461801d51162a777b497b7aaa7

          SHA1

          8a612b70dbe4889b80d7453f3832d126e27aca82

          SHA256

          b2ed28a2f8988e1bd05ecb767737640dc4615f3990bdb4e0121a52bb024875ff

          SHA512

          84d61189b403c9f3337167877dce1c43d9816b24b91e4e4ea3e9f393069203cdb58ff046739c536b43cc2196554c4c0196724c4c1609a6d1ea0a76b7c4d84e49

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\VH9W14NQ\p[1].css

          Filesize

          5B

          MD5

          83d24d4b43cc7eef2b61e66c95f3d158

          SHA1

          f0cafc285ee23bb6c28c5166f305493c4331c84d

          SHA256

          1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb

          SHA512

          e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\VH9W14NQ\responsive[1].css

          Filesize

          66KB

          MD5

          781608aaede6e759fe48d7967b0a6c53

          SHA1

          bc595134b15c604ec6d42dded9f6d167d94084ac

          SHA256

          7371dd376a195424e3df2ee7877a045a2d60c307b3b3a119789c7160b7c21b92

          SHA512

          0eadd4bd38115eee3db9c62508143e7b93b5ff5fc5f8f05489af21c6499ccfc9e741d4de740e75ab933a32de2a1ca5cce7777a60b015ba53e503196e75bd0c71

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\VH9W14NQ\styles__ltr[1].css

          Filesize

          55KB

          MD5

          eb4bc511f79f7a1573b45f5775b3a99b

          SHA1

          d910fb51ad7316aa54f055079374574698e74b35

          SHA256

          7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050

          SHA512

          ec9bdf1c91b6262b183fd23f640eac22016d1f42db631380676ed34b962e01badda91f9cbdfa189b42fe3182a992f1b95a7353af41e41b2d6e1dab17e87637a0