Analysis

  • max time kernel
    148s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 10:33

General

  • Target

    160ce4ceb7f487f5d9f85af46566e621.html

  • Size

    88KB

  • MD5

    160ce4ceb7f487f5d9f85af46566e621

  • SHA1

    488a48e555cab6e2981d426540a5dad2f826db3f

  • SHA256

    782e160777b4478b338198795c99e9194574620fffe02d02bb006008b6262c00

  • SHA512

    8c695d27c08ae3cc619cc43d586c7654ee78f16a95f5ed23d9c4563016e15c2338a4a2efd56a6b5a7bc78cf5aefb4852fc013c1ec0d9f97b0ae5adfa62465c64

  • SSDEEP

    1536:6OQeSGjwLBjXq8LJ7JvxWM9Oql2pP3g4fmK3t4FM9SjO2eJQsGembEpgk0H15PjI:60wBjXXV7JvxWM9Oql2pP3g4fb3t4FMB

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 12 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\160ce4ceb7f487f5d9f85af46566e621.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4632
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4632 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SetWindowsHookEx
      PID:3316
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x320 0x304
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1532

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\77OHN2NL\www.youtube[1].xml

    Filesize

    228B

    MD5

    02a0e9c1577db47d26d71a151cb3654d

    SHA1

    c507d01d7eb04a230feeda2c8b863f7f6f82353e

    SHA256

    0cd425376ef69704fec5599de8639b12f5ac400630de06f09810d1d664ef7b31

    SHA512

    d0c166c6fff8f4866d936fb41f4fbaccefa1a60b235f262ce0e8914315effcd41e2abd9d1a0b39df37c4c982545e170f2d0eeed91a13e738609555e049825390

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\77OHN2NL\www.youtube[1].xml

    Filesize

    8KB

    MD5

    f2b191a4a175dfbbe8225eaf79e6e71f

    SHA1

    31f35e5ab12389d491ee137adaa9b12954635c69

    SHA256

    709467eec1b4677a729c2a2340ccb0919520a12dc8f59dc8cab23ac4d693a277

    SHA512

    abe4829e17901313b18f48e46b74c6a2d86b99c1d9ce6532779bbd66cc4c6b36129e871015235be63f12e52e495b08d92fa8f4e2c1b1c4a151fe8b0c3236b1de

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\77OHN2NL\www.youtube[1].xml

    Filesize

    8KB

    MD5

    99a6417ffc6402dc21aa31e79a247a26

    SHA1

    c8616705d2a53afaaa7ed67fe39a9a412a7cdde7

    SHA256

    340992a6769b21526299d6e7d8ac963e04079f5dab9450c87adcb32187686b6f

    SHA512

    b848e9e0cb7872b9236822530ec9337a8184c2a9400bd2efee77a9a7b1378464c2db6a641a0f5c7c0d3766ca57013be480210afaeebb0f080d837083efbbed65

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\77OHN2NL\www.youtube[1].xml

    Filesize

    1KB

    MD5

    b7d6863abfea857bc278ce8337f21cae

    SHA1

    52a1f5b2f018ed821dd7c971baeef1dfba3a9ca2

    SHA256

    f7465d1c257bc10fffcbb341b4a83d3bdb3d45f69ae211e760b32da014e21dac

    SHA512

    4ab2168e1ec6dd2b8ee6a0f6acddec647c8fb0f67d96d8bd6a3f943ede43072bc9a74aa66572adba06cd171f0eaeb630d3e4fdd39080fbe3fb52831066f2b391

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\VersionManager\verF627.tmp

    Filesize

    15KB

    MD5

    1a545d0052b581fbb2ab4c52133846bc

    SHA1

    62f3266a9b9925cd6d98658b92adec673cbe3dd3

    SHA256

    557472aeaebf4c1c800b9df14c190f66d62cbabb011300dbedde2dcddd27a6c1

    SHA512

    bd326d111589d87cd6d019378ec725ac9ac7ad4c36f22453941f7d52f90b747ede4783a83dfff6cae1b3bb46690ad49cffa77f2afda019b22863ac485b406e8d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QSO8CY24\www-player[1].css

    Filesize

    156KB

    MD5

    634511129c26ea9e7bcaf3802f919b94

    SHA1

    7b26342bbaa173bf1024e60190990041dbc6047f

    SHA256

    16bd2bbfe5afc0cd0114a20fe988c057f926c67a7f35c7735d00482c6d05f5a5

    SHA512

    66c528e702c0740845f7d5a9aef2fbd1ed9a8a2ffa7a1c4a85336d9b084f62f37756c6fc1f510f49073d4dd4196f274bd9e89c98b0162e8da57e02fcc94bbd50

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\www-embed-player[1].js

    Filesize

    92KB

    MD5

    6faaa92563eaae49cb2647d9efd59b29

    SHA1

    63380b6f13dd654cf44b72bd2645b91efd5cd278

    SHA256

    3eed6e8b72c2645b5de21ef08014dd708aeb6537411277cee928eb11b145f0c2

    SHA512

    b537e507e2ee478f2d0e06b497c6fc6c64b86f0855a977228f92ea9655b71c9023f0a8cc234235056ae48ab1d691581f6724c176e94ad284045f790cd562330c