Analysis

  • max time kernel
    93s
  • max time network
    133s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 14:48

General

  • Target

    76c8c7fe81c9178a32a6008732093280.html

  • Size

    430B

  • MD5

    76c8c7fe81c9178a32a6008732093280

  • SHA1

    57920c393774b0bc89dfd5716337d3222371f34f

  • SHA256

    bda2c41d496b951aefcf3a06422d31cdb4d93c9eff41c73822c72087bfbfa250

  • SHA512

    7754010a98e856574f342f1f6f15b2d5d063bf8b51b1b198bdf6d566d2dceddd431f121b8541eed23b56359af3ac9800b69b347efb25dadc57073cd81aa01217

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 46 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\76c8c7fe81c9178a32a6008732093280.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2584
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2584 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2452

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\VersionManager\verD0DD.tmp

    Filesize

    15KB

    MD5

    1a545d0052b581fbb2ab4c52133846bc

    SHA1

    62f3266a9b9925cd6d98658b92adec673cbe3dd3

    SHA256

    557472aeaebf4c1c800b9df14c190f66d62cbabb011300dbedde2dcddd27a6c1

    SHA512

    bd326d111589d87cd6d019378ec725ac9ac7ad4c36f22453941f7d52f90b747ede4783a83dfff6cae1b3bb46690ad49cffa77f2afda019b22863ac485b406e8d

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\flj0k7l\imagestore.dat

    Filesize

    2KB

    MD5

    012b27c071a162b0fd883602daf50d2d

    SHA1

    44f3cf3c08c274324685eb50670e98159aa84a2c

    SHA256

    8c03f85c852363946a2e1cab899627513641feebf6571a328849428380d214aa

    SHA512

    f4d0b8175903e4ae30bc55a81faad9110f98bcc9aed84f48593410dff90a3c4686e38984079eb098676ae579faaf5afd1220c20ddeaf1e1674815a13b86a95f1

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\flj0k7l\imagestore.dat

    Filesize

    6KB

    MD5

    1d11354e08308053161fe54b0a587555

    SHA1

    9a1365a7ecf7715c8f16f9baa1bfb605dbfe277b

    SHA256

    1078f24a2992342e5920b80d632703c121da575e96fa6897112e9bd872c145a5

    SHA512

    ca936e5cc0c7f87e7fbaa2399c9ea6c92b354b1bb839252a06e85fa99bf7d8a921a7d3874c781afd31ffc58e5c6b55181c539e0d56ed19e0c5f83bfdd042041b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BJCNBC62\favicon[1].png

    Filesize

    3KB

    MD5

    a75c230f34b9296e6fdd8b0b855df5d8

    SHA1

    e0b9e32053d44532fb4e8bb55b54c3211965517b

    SHA256

    8adba20b1dd9747ec8ac6ed5a26a8dfbfc7ab82213d8051b76ac771c76b87920

    SHA512

    950b94afc397ac760f38f4c68691bda6b541832e1d23f496e36568def2b9f9dcb6984c6a42ff6b5abef0e19b76c37e40baab22e9dcc9360091b609333029b24c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\NSWVVUXL\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\suggestions[1].en-US

    Filesize

    11KB

    MD5

    c0301132b930bf1246dd760543ac0631

    SHA1

    2d046b2a0690c9526eaa3ff38c0cfa02bbed4b9a

    SHA256

    e12eb233c98664c64ca2b69058449210adf0bb37eb1cf7e4ddce8448ddcfc66c

    SHA512

    afb7fa1d8cfc10f8109d9173f0b2c8aa79dbcde3248e1d61cc1011ec13861c808aa8e42a4e1f408e8c937020bcb369e0470bb5a6b77e51b0be3ed64309e87071