Analysis

  • max time kernel
    89s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/01/2024, 15:18

General

  • Target

    6fc400f094fd70a6aab96e14645420db.html

  • Size

    128KB

  • MD5

    6fc400f094fd70a6aab96e14645420db

  • SHA1

    d1eb9c2f6490572f39d733bbaae309d0d6f1fa9b

  • SHA256

    4e99ebb83852583c40687e4354ce6abc96d601b88e612b7228a554e016f002d1

  • SHA512

    1c467735ed2902bdf5a89a7513df86cdcaa143ac7e39d3d3e8d081494ce5a99498ae1fe1feaa557a09ee7d6b0f8eb54d3694eb42ae78c00d391a07cb2b465643

  • SSDEEP

    3072:RUtCWDxYxQ2PDxYxC2T/Z1s0oEHJxSeuhzSNE7jzCqezI/3QO:RUt1DxYxQ2PDxYxC2T/Z2r

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 49 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6fc400f094fd70a6aab96e14645420db.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:516
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:516 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2824

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    00c810ad5af9bb1ffa13d83698695136

    SHA1

    356ae631a77f5b6039531fd01904a27e8d64fd3c

    SHA256

    646abae3e23a04a2e487d6811e6fa2f65666e86f650baefcd821f45737165854

    SHA512

    b7335f7b5f9a36999e5eb128f839ad8566c50ef9922f19ddff691266c745faa72a8ecedc97de3e91aa7be7e99df3c4928660f147aa1c9dd76361eb2eb2b1c3fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    f15feac3dc9076e3f019121b09dfc0d5

    SHA1

    bc73b4855f92afb245c1a40c45038a51b89337d2

    SHA256

    beb551aa33d871cde7017ac5e5376137ef28be9b347feb555c9f23da85f9507c

    SHA512

    1db96d5f05296d1fbdf096245245587f80442579d84d7c6a1e33a661f7be30878b4f9b49e0aa85b2f14a05a501755baa0951cd254ae05925ef59b9faeb646d39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8D1Z5HG5\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee