Analysis

  • max time kernel
    146s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 11:22

General

  • Target

    1706fb532e6f9df04c9e25aa9ff15c7e.html

  • Size

    16KB

  • MD5

    1706fb532e6f9df04c9e25aa9ff15c7e

  • SHA1

    7f70601a0ea7c905279cf91a84bd699028113f8d

  • SHA256

    e67c088f63df284082215799ee2bf25f3dd26d2e0a0f0e17e827b165cf827e12

  • SHA512

    6fd1150f65d6ad517e7924473c3947d082a2e5793c8b2e5fde023d5ad454da4e31ee8a87c47e0411238a5c2bf20824493e1adf3e91f1e4cecf095271ddbaf06b

  • SSDEEP

    384:XfnWcdCBDYA0WXYOyrAhfEskmx6k5B1b2V:ecMtYlrAJnYk5HI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 63 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1706fb532e6f9df04c9e25aa9ff15c7e.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4352
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4352 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4916

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\VersionManager\verCD14.tmp

    Filesize

    15KB

    MD5

    1a545d0052b581fbb2ab4c52133846bc

    SHA1

    62f3266a9b9925cd6d98658b92adec673cbe3dd3

    SHA256

    557472aeaebf4c1c800b9df14c190f66d62cbabb011300dbedde2dcddd27a6c1

    SHA512

    bd326d111589d87cd6d019378ec725ac9ac7ad4c36f22453941f7d52f90b747ede4783a83dfff6cae1b3bb46690ad49cffa77f2afda019b22863ac485b406e8d

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\flj0k7l\imagestore.dat

    Filesize

    1KB

    MD5

    1b29f7a9da102997e5148fd8efe76c4c

    SHA1

    46e71ba91140f257ac5bf6bacdda129ef172f9cc

    SHA256

    1bb035ecabf0197e2d98e5f328ee0ed997b4e4abee0a90e0927938974ab0db3d

    SHA512

    56bf75065ce60c35b36cdfe235d4e88b3b7c51b2caca238e424b55dec9d49a870fcf3b452773db969e0373b964321e10add1f9b50f629bf4ef890201e94b5794

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BJCNBC62\css[1].css

    Filesize

    530B

    MD5

    0a127ad39a8ebe4207492293b556adf6

    SHA1

    17d3dad64e4f9139cfb85bbcca6659a8aa532a48

    SHA256

    c1294965425b5028a83bbe5eeed0cd9b92733ec41efd07e34532522d4c97b6e1

    SHA512

    5aa845c5c6c20259d9c6bc0c9fdbd13ff178ba4008865f7113387767db0ad39cd53c1d276cfa4997186fd39f21d30bf00caf8d092e5c04119d992368b1563df3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BJCNBC62\script[1].js

    Filesize

    9KB

    MD5

    defee0a43f53c0bd24b5420db2325418

    SHA1

    55e3fdbced6fb04f1a2a664209f6117110b206f3

    SHA256

    c1f8e55b298dc653477b557d4d9ef04951b3b8ba8362a836c54e2db10cda4d09

    SHA512

    33d1a6753a32ec06dcfc07637e9654af9321fe9fa2590efc70893eb58c8603505f2be69084fb2bcbf929218c4e7df9f7a8bc3f17a5b41ed38c4d8645296ebab5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BJCNBC62\zyw6mds[1].css

    Filesize

    1KB

    MD5

    4c2e266587bb622926747856f9bdb65d

    SHA1

    16999e0d2a01b96b70a0ef191461388c5047f1ed

    SHA256

    cfddcd1ab28963d8219ef42d0b455b1e062521bfe7b100d4c47e0b9dd0a79023

    SHA512

    c9526cd6537aa068b48641fd2dfb93843fc5f535faa4cd856d4d3427c8f1e97d79c969215a9291fd50a96597c43dba3c45a3fe2ad32c78677e38f93dbfc32ca0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\NSWVVUXL\reboot.min[1].css

    Filesize

    3KB

    MD5

    51b8b71098eeed2c55a4534e48579a16

    SHA1

    2ec1922d2bfaf67bf3ffabe43a11e3bf481dc5d7

    SHA256

    bd78e3bcc569d029e7c709144e4038dede4d92a143e77bc46e4f15913769758b

    SHA512

    2597223e603e095bf405998aacd8585f85e66de8d992a9078951dd85f462217305e215b4828188bf7840368d8116ed8fb5d95f3bfab00240b4a8ddab71ac760d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\NSWVVUXL\style[1].css

    Filesize

    98KB

    MD5

    9d4a425a5a419f62e9f6278239c11b5e

    SHA1

    1d330a74467449534d3f01879fd47300bfb7811a

    SHA256

    066d22ce31e4d221cc876755466ba3785d1b0012d958c4e9e76838d7c7226274

    SHA512

    b9e79e4af2f66cb95844a98a2ed66f86a422e016f9e0f24c65d2121890b45ff0fa3387bc20eaa2ca6528a53b817f8784eb81fe1d8e989fddb4f7df34369ac5e4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QSO8CY24\favicon[1].ico

    Filesize

    1KB

    MD5

    0106d4fd24f36c561cf3e33bea3973e4

    SHA1

    84572f2157c0ac8bacc38b563069b223f93cb23c

    SHA256

    5a6c5f7923c7b5ba984f3c4b79b5c3005f3c2f1347a84a6a7b3c16ffbf11777d

    SHA512

    57b77c5d345eca415257e708a52a96e71d3ddf4a781c1f60e8ba175ea0c60b1d74749cd3fa2e33f56642ce42b7221f16491cf666dc4e795ecc6d1fbfdb54ab98

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QSO8CY24\js[1].js

    Filesize

    92KB

    MD5

    137da52f0b428f49579254c7c402c46c

    SHA1

    954f6ba7790c0333ebf788b63d30ddc00c8d9ff0

    SHA256

    484270af4039c833dd2da42af1aab1e0870c1e9f277e787214b8c18132d23292

    SHA512

    2baa68dddab245e0de58903a4a76ee5325c34eb6a08112faa5858c34942718a9236b0262b7bc6ea45df5a27420175eaef6e1b72d80bc7a9e78bb3997cc36aee5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QSO8CY24\js[2].js

    Filesize

    92KB

    MD5

    66f508709ed76f64e03809d2b2e4eab5

    SHA1

    d43e0e417b1a36c8b3f05d58c4e6a518f9a559a8

    SHA256

    1f13e68806d6555c6c3df2a5aec420010901a54c1c0cbb146e0d39a6c3342c14

    SHA512

    711964a6fcaf9174fb4e4057bd79bab55e065bda823757086bf44afb3f6594a2bed7ba3e03aa5732a5be31215a91807f7c97f8b8edac8edfb8f524dd5f7a0cc5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QSO8CY24\recaptcha__en[1].js

    Filesize

    257KB

    MD5

    7a43aa3d95856b26a5f0e50542c42b4b

    SHA1

    8c22b303139d7422d943aa718534a772517f06c0

    SHA256

    495c6b45c88aa09f1cee8bba6428122d5b1c3b71d1293f4ce2be4387de2d659c

    SHA512

    4c478aed8818702843119e45c06c9357ac666867d2a456ac62039be28a70d7907fe467a39fd19703ce2e9b1052ff49ecab74d17f7c6085a7d426768fc1b07a6e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\jquery.fancybox.min[1].css

    Filesize

    12KB

    MD5

    a2d42584292f64c5827e8b67b1b38726

    SHA1

    1be9b79be02a1cfc5d96c4a5e0feb8f472babd95

    SHA256

    5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0

    SHA512

    1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\jquery.min[1].js

    Filesize

    84KB

    MD5

    c9f5aeeca3ad37bf2aa006139b935f0a

    SHA1

    1055018c28ab41087ef9ccefe411606893dabea2

    SHA256

    87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

    SHA512

    dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\p[1].css

    Filesize

    5B

    MD5

    83d24d4b43cc7eef2b61e66c95f3d158

    SHA1

    f0cafc285ee23bb6c28c5166f305493c4331c84d

    SHA256

    1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb

    SHA512

    e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\responsive[1].css

    Filesize

    66KB

    MD5

    781608aaede6e759fe48d7967b0a6c53

    SHA1

    bc595134b15c604ec6d42dded9f6d167d94084ac

    SHA256

    7371dd376a195424e3df2ee7877a045a2d60c307b3b3a119789c7160b7c21b92

    SHA512

    0eadd4bd38115eee3db9c62508143e7b93b5ff5fc5f8f05489af21c6499ccfc9e741d4de740e75ab933a32de2a1ca5cce7777a60b015ba53e503196e75bd0c71

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\styles__ltr[1].css

    Filesize

    55KB

    MD5

    eb4bc511f79f7a1573b45f5775b3a99b

    SHA1

    d910fb51ad7316aa54f055079374574698e74b35

    SHA256

    7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050

    SHA512

    ec9bdf1c91b6262b183fd23f640eac22016d1f42db631380676ed34b962e01badda91f9cbdfa189b42fe3182a992f1b95a7353af41e41b2d6e1dab17e87637a0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee