Analysis

  • max time kernel
    0s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 12:29

General

  • Target

    profile/cache2/doomed/5823.html

  • Size

    44KB

  • MD5

    2d53e05fe63da1fbc2ffebbe21d6598d

  • SHA1

    4516efe3d89a3b56d861ca634ab40e32286e8566

  • SHA256

    4af073f36bbd71b1e8c0f29411474d9e54ae9dad20346fe56e970cd56e36607a

  • SHA512

    c37423564a7fa6e18e69d1bda3e43fc720e116f7cea2e81dfaaec760d967e1b36057f29afff9f75c1b700ba5a16fc29950eef22de4c645ae1d3b97d3a6620747

  • SSDEEP

    768:lgeoI3rYwjURR+e+Q6VR6VcQiHOTNBL7Gl2:OT0rYwjURR+reBF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 18 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\profile\cache2\doomed\5823.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1776
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1776 CREDAT:275457 /prefetch:2
      2⤵
        PID:1684

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads