Analysis

  • max time kernel
    96s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/01/2024, 15:08

General

  • Target
    6ac17c75fe88942514249be9b99049a7.html
  • Size 238KB
  • Sample240120-sh123scch2
  • SHA256 f080d4331b2cb5dba960a4a630113bc2e62ccd87878b440a9736b76fde734b4f
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 55 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6ac17c75fe88942514249be9b99049a7.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2172
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2172 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:2568

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
        • Size 471B
        • SHA256 10a79f11b599e86eb9a03e62f1969485589597cef2b4d8b2a7f1133736e97c22
        • MD5 SHA1 SHA512

        7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
        • Size 404B
        • SHA256 4e12d015803c77eedbaaa6e4e4f91a4fe79259b4b36746a43a0870be45599d3f
        • MD5 SHA1 SHA512

        www.youtube[1].xml

        • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\8DEYQRKR\www.youtube[1].xml
        • Size 13B
        • SHA256 b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
        • MD5 SHA1 SHA512

        www.youtube[1].xml

        • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\8DEYQRKR\www.youtube[1].xml
        • Size 229B
        • SHA256 4e33380e3e4924303d26303e14f7527f553e2239cbce038b73ae5b09a5707c14
        • MD5 SHA1 SHA512

        epic-effect-10[1].htm

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\7C34XGPV\epic-effect-10[1].htm
        • Size 5B
        • SHA256 933b971c6388d594a23fa1559825db5bec8ade2db1240aa8fc9d0c684949e8c9
        • MD5 SHA1 SHA512

        453K7VK4.htm

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\9ALL181V\453K7VK4.htm
        • Size 254B
        • SHA256 445bdd9b3dbbcc2b7325b62d649171a9ed0db47d29230fd3e58dfd21c9efa130
        • MD5 SHA1 SHA512

        cb=gapi[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\9ALL181V\cb=gapi[1].js
        • Size 133KB
        • SHA256 c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52
        • MD5 SHA1 SHA512 SSDEEP

        jquery.min[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\9ALL181V\jquery.min[1].js
        • Size 89KB
        • SHA256 c784376960f3163dc760bc019e72e5fed78203745a5510c69992a39d1d8fe776
        • MD5 SHA1 SHA512 SSDEEP

        loader[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\9ALL181V\loader[1].js
        • Size 60KB
        • SHA256 369ae154eab37b7ada7776b934833183bb053ebd1d0255f70ef8944f65cabb0c
        • MD5 SHA1 SHA512 SSDEEP

        plusone[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\PZ64U2GI\plusone[1].js
        • Size 56KB
        • SHA256 63326a1c4e0eddd3501f0a064b06a2708eb0362f3ae934f53145978d3d0799b5
        • MD5 SHA1 SHA512 SSDEEP

        suggestions[1].en-US

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\PZ64U2GI\suggestions[1].en-US
        • Size 17KB
        • SHA256 c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
        • MD5 SHA1 SHA512 SSDEEP

        fl-pattern-and-sound[1].htm

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Q15AV1NQ\fl-pattern-and-sound[1].htm
        • Size 162B
        • SHA256 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
        • MD5 SHA1 SHA512