Analysis

  • max time kernel
    140s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/01/2024, 10:31

General

  • Target
    7a008a8c216f82e2d07fdc776717ffa4.html
  • Size 112KB
  • Sample240127-mkcvdacafn
  • SHA256 162b29bc60338a3d1aac9832c9539133bf537b26959be23f53f532d3526ae932
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 50 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7a008a8c216f82e2d07fdc776717ffa4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3976
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3976 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4376

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
        • Size 471B
        • SHA256 3a418958f81aae04aa13719238c42d24adc5258b95246b3df0b32a1bf7676b51
        • MD5 SHA1 SHA512

        7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776
        • Size 404B
        • SHA256 045653a59970cfd986adaa3a6636f7abe7585107ac04619c85863e56635dab70
        • MD5 SHA1 SHA512

        cb=gapi[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\L3T8W3B4\cb=gapi[1].js
        • Size 133KB
        • SHA256 c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52
        • MD5 SHA1 SHA512 SSDEEP

        suggestions[1].en-US

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\L3T8W3B4\suggestions[1].en-US
        • Size 17KB
        • SHA256 c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
        • MD5 SHA1 SHA512 SSDEEP

        55013136-widget_css_bundle[1].css

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\55013136-widget_css_bundle[1].css
        • Size 29KB
        • SHA256 1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
        • MD5 SHA1 SHA512 SSDEEP

        cookienotice[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\cookienotice[1].js
        • Size 6KB
        • SHA256 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
        • MD5 SHA1 SHA512 SSDEEP

        css[2].css

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\css[2].css
        • Size 230B
        • SHA256 5f76b4459b4391e5a30677a87065c7775d9b085b6b3652e1146b03f1b6b8c306
        • MD5 SHA1 SHA512

        m=el_main[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\m=el_main[1].js
        • Size 207KB
        • SHA256 58a76a7040cdaabc480727486b980877195fd6b6bf819313b1425271ce04dfa1
        • MD5 SHA1 SHA512 SSDEEP

        0[2].htm

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WHUIQOC9\0[2].htm
        • Size 49B
        • SHA256 8038e245a067855963604ce13ccb15f5048f52452d438be53f8244af19642971
        • MD5 SHA1 SHA512

        2572602432-widgets[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WHUIQOC9\2572602432-widgets[1].js
        • Size 160KB
        • SHA256 9280547cd3ca5b942fa8e00de6dd0d3524b986f59aa0a0d3f1140c01cb255c25
        • MD5 SHA1 SHA512 SSDEEP

        css[2].css

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WHUIQOC9\css[2].css
        • Size 217B
        • SHA256 e2ee45552145cf81c35e596d9b6cb6cf60d768675a1e4521ad265d41b9cc7cf5
        • MD5 SHA1 SHA512

        e[1].htm

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WHUIQOC9\e[1].htm
        • Size 49B
        • SHA256 1e1cbcade756228bf3f8ca0bbe161edf54bbc29b7c97645636407af85d41a164
        • MD5 SHA1 SHA512

        platform[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WHUIQOC9\platform[1].js
        • Size 56KB
        • SHA256 0bcb6531cb0967359e17b655d4142b55d1eac2aed3fe5340f8ce930a7000e5d3
        • MD5 SHA1 SHA512 SSDEEP

        authorization[1].css

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Z0UNWU5J\authorization[1].css
        • Size 1B
        • SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
        • MD5 SHA1 SHA512

        element[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Z0UNWU5J\element[1].js
        • Size 87KB
        • SHA256 d25629e9e93d0604f9ce55747fd762c268a699653599808a8bdecdaef5b3a299
        • MD5 SHA1 SHA512 SSDEEP

        f[1].txt

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Z0UNWU5J\f[1].txt
        • Size 36KB
        • SHA256 8fc9d281f6aeee3a0b93a54b2dc06c36733abd645cb25b1688a28a912fbf39e0
        • MD5 SHA1 SHA512 SSDEEP

        js15[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Z0UNWU5J\js15[1].js
        • Size 10KB
        • SHA256 429e7004f3f8fbe42cacb984c36a9cda33efdacc100a276b12e82c6ab78bf7ec
        • MD5 SHA1 SHA512 SSDEEP