Analysis

  • max time kernel
    139s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/01/2024, 01:29

General

  • Target

    网愿科技-人才网 v2.1 Build 1228/admin/Error.htm

  • Size

    3KB

  • MD5

    97a0517384971ce46d865223461772b2

  • SHA1

    8a9b9e5a128687efd5e77c31e479ab29b15104f2

  • SHA256

    23ec4afc793fc40a1954333473fca66d7b4fad984621bd1e04d10c9851d0ce3b

  • SHA512

    34b2d6443229159fff64e260bc3bfd7bb2f9c6559ce2c88b58d1e1bc10f2be0727f28c7f8f8d36015ade3b6afe7dbdbc0c4287517ca604eaf56addc6f1b998d2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 14 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\网愿科技-人才网 v2.1 Build 1228\admin\Error.htm"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3652
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3652 CREDAT:17410 /prefetch:2
      2⤵
        PID:3180

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads