Analysis

  • max time kernel
    87s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-01-2024 23:22

General

  • Target

    70d3cb67e6a327f951f71ff506d00eb6.html

  • Size

    30KB

  • MD5

    70d3cb67e6a327f951f71ff506d00eb6

  • SHA1

    38505420c9e5400200d34ebd496eec8b442a0d20

  • SHA256

    f2f415acaefce2b60c7fc7e94c334efb4f2dcdfe34d5c5dddd223cbe692c7ad6

  • SHA512

    c25d0a5849e6666a92962068b830c4303807ad1d7077d4ab08f32590cf91c4a4e30b56f602eb088f43215f51400bda6456cb25e509dac81d8d3886312a5c0eaa

  • SSDEEP

    384:Wu4YFDbHINCR6iMw03xI2IERFaKYoQy2fM/CILIqK2dHu7:Wu4Y5Ig6iVAIEay2D2dHe

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\70d3cb67e6a327f951f71ff506d00eb6.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3020 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4008

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    f3990afbcdf64f1f806d1b926cf35b3d

    SHA1

    da1297f9ac1e9e9e7e78b567006e9248bfc212f7

    SHA256

    48c214dd545cc2718f7e844d699efae28f80d683340959e000bb41ad75dd6386

    SHA512

    9b5bc750b2e1038c82a93d51efe0d7dcf951ca594a62a90bac0ca1019d232afd07f9630e1ba1b609e128a9ba9c23c1ea8f1badd9e6b25f3eb591a936c89ee939

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    29e4fd87e3dc2b7384de227fa12901cb

    SHA1

    8369171f06e79b042276d4bcd27e9d13b62e4777

    SHA256

    3ea643857ad232bd4918c41e652cc1e2fb4402bb565509f340fde93d591cca29

    SHA512

    2a3233d2373f7fdbe0544a6e6d31d15bc59415347f2e4f6695e09a8aea090dbf7916a6768ad58a760531f2649beb620843d197e2cf903942aaa3b11849fa4b0c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R977VUU4\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee