Analysis

  • max time kernel
    0s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2024, 21:04

General

  • Target

    472cca166f2f3de4b6d85f8b103ef01a.html

  • Size

    8KB

  • MD5

    472cca166f2f3de4b6d85f8b103ef01a

  • SHA1

    b1ab06cc8e5fe83edbf0244fc6a4fc7ec8083fd0

  • SHA256

    8dd053c6becfd1e8ea09618424aba60b844dbaffd2f2e4daef8999fb4dcd46d6

  • SHA512

    3e3f51218bfe4395e84dce98561c0c9d04dfc555d7b924b8bf9dfac4c523066086f150cb129ba10fc1e612256be987a1f54238e2cd8e1c9a75db478f406bd90f

  • SSDEEP

    192:ln8uqnGDSSW0nq2ell1Jk104BjAffM2KLS3zNsEV8lyAsy4InPyixJ5O7Pee+:ln8uqnGDnW0q2ell1Jk104B0fM2aYsE6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 18 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\472cca166f2f3de4b6d85f8b103ef01a.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2184
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2184 CREDAT:275457 /prefetch:2
      2⤵
        PID:1404

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      54f028ca57092535d17428860fd291cf

      SHA1

      b822bfb88e00244e4b3e6c50413437056d2a6e21

      SHA256

      a97ebd0f9634a812426327bf1103f4f59a0295f0225de197e22858a9818696fb

      SHA512

      9ca0a2e50cbb593cc18e566476a948e62265c6e910994a8851c4284f9785eee2a29b2c17e6b6d2e64ea9108f8d41b9a67e18a47192de2b9eacda552d3c20e24b

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      63b91895092c606ae10de1a561e6995a

      SHA1

      07d073c9d1dee1a53b6bb117da0a3d4d205a2976

      SHA256

      37dc15e28fc6f01120fef360b43461e054769babb128a0cf3a08e542599f6da8

      SHA512

      856e93cd7e25372b9251b37e45f9649b812881bee6bf6864d0994d850e1f4cd6eafacbc243ef1cc5080e8a3a37094fd124cb8cbf5831850f6c18aec9533b03e3

    • C:\Users\Admin\AppData\Local\Temp\Cab1D62.tmp

      Filesize

      65KB

      MD5

      ac05d27423a85adc1622c714f2cb6184

      SHA1

      b0fe2b1abddb97837ea0195be70ab2ff14d43198

      SHA256

      c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

      SHA512

      6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

    • C:\Users\Admin\AppData\Local\Temp\Tar21E7.tmp

      Filesize

      92KB

      MD5

      bb84d39015d7734bc7ec5da88a516b23

      SHA1

      1a15cbe452f750dc4f5d780b2517fbf82db39fac

      SHA256

      8f807ac7fa789d13f51c3451b2728ae70fb489ff20a8c20f073e68ad0927a882

      SHA512

      299dfeacc8cfdd600ce91764a0b3f75a431a795635989c2a53dcd40cd1c42c17f92179e8b239a2596414ed59ba7deda1e3503aa5ac611703bf3cf7a0a8abbcf7