Analysis

  • max time kernel
    135s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/01/2024, 07:46

General

  • Target

    7f48b4e67933a858d62d88f349714c5f.html

  • Size

    428B

  • MD5

    7f48b4e67933a858d62d88f349714c5f

  • SHA1

    1dc669d3286c5aca25742be7a5764c1fd7d0dbd2

  • SHA256

    f75174c1ce3c2c689a1aba40df7e3bc2efd1f72ad692332dca75b44a0089a098

  • SHA512

    be9453c1455360d0e70dcd22857386daa122ef6d5ac597d7194fec4c68b09254bed4ada3177f86e0fe2c069d27f0d9c6ff6b04419b4ae5d5035abe81a22901ee

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7f48b4e67933a858d62d88f349714c5f.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:5116
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5116 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1728

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    23c885d47568a0c8ec78d6dcc163d3e6

    SHA1

    5784bd843fecdfcdfdd6c213c092c65613d1f6b4

    SHA256

    c682f97f831992d9fc18392f30e050457a49b6e15de26a1af4459541c2866d80

    SHA512

    329f656e73d533712901b9dd168555670fa8ca2d89aaffbc5e446f734af2eb409c54cbbcfc72b9173a65d413bafc4f74c47d6985ce15767890719c36f6e15fa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_C0427F5F77D9B3A439FC620EDAAB6177

    Filesize

    471B

    MD5

    33fe76c8182be8370090a738f3a44a95

    SHA1

    0083383f10c5643f4b36ae9a7d1868d99a0fe5b6

    SHA256

    cffec10bd7de25e2e5cc4e1470ca8991a9dbb2a2ff607dc042d694a0f4b37fa9

    SHA512

    7f04fa9e09ec5f03665dee9ac025d973605164a6ca48426b1f499bfb2704ed448723cab4cf9c19972212933ced19607b6238c80baf66ea05636ecc445457b3f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    bfc326e9045b9ebda7b0895f29345941

    SHA1

    d40169981fca95f3c8b76c781f0b438eea5f08bd

    SHA256

    35ad81f286ee46ada33ec4c0d36783e0477cf3a2a597b6b7a6553619cef55005

    SHA512

    7ccc21a4ec1ab8f11e736933cc11ff90142a9e2c799a2d9e64be93efe9f09d241c5e60b36a672704301978e5a4b32779be69b1cdbdd420f8eb20591c0af19a01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_C0427F5F77D9B3A439FC620EDAAB6177

    Filesize

    412B

    MD5

    649531c8f9d7e9092b14e0c66b57864a

    SHA1

    1ebee880a837dc4a794ba745abb2ed055569135f

    SHA256

    9c88d84e8f4731db1a05f360ad0713bf1171f211d56dbfc16ba35a6cfe2944f8

    SHA512

    198eeadda86b8832aa9eeeb30cd40852d8b0812043787ec4d6d0c798a234bd517156d9ea3456a571971d6767781b5a5e73246fedb6039384c73f7a1a545096e5

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\DEP3DMOL\www.opera[1].xml

    Filesize

    415B

    MD5

    27f69806b30882ecd4ee92bd8525cc85

    SHA1

    17ea08fff537d80ebce743065704d2a9235ebdfe

    SHA256

    573deeee41301c3a3a3f0f5605a199c41e63f5b179927e96bebc63a26efe2489

    SHA512

    c4a902be3fe5dbafe7441d3e7109ffaf2adcc5352721790377d905ccc75a17328de06c0ef3aa190aacef5bde9a18e638d01746dfbab48e3ec129ff028a27005b

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\ccxtump\imagestore.dat

    Filesize

    6KB

    MD5

    78201138a94c1092824ea7ebf2d37d9c

    SHA1

    a27ea7af89b4ade62b5fcf839ad7722918739eb2

    SHA256

    3bad089f7ddd3327a7515c9a615085a54e409eba3f08e22d978fb7421a60a9dc

    SHA512

    0cd2e06c89a1d1c53970e4154e415231e1401ebc3fc5c5d1b06e74da4023c6baeb6811c87c8c2c3a940afb2d75e736d96a412ee37c9d4103823db032eed8e4b6

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\ccxtump\imagestore.dat

    Filesize

    1KB

    MD5

    20f7a0fd6bcb428556c776b0b8efc0d9

    SHA1

    9d55324e7b7100b2ddb4bfc4a91e9c209c30f14c

    SHA256

    e8c0e6fc9d0a4832a3d7b7756a9c278341e64e143a29758d2ff28eeacd878750

    SHA512

    19c5af2cbda5f20763d3ba21fa9380dceb9047b4f0947d93ecb4d04cc6b112a9e3d19a31903f73fa1fb3f3c8341e0a2ffab5c0ea9a003a927e3eb0aed728b3f6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\opera[1].ico

    Filesize

    5KB

    MD5

    94e3b24366e3faaceae2583c84668c09

    SHA1

    ea70800d14a0d3c15fc98ac0c4b1568226d637d8

    SHA256

    07e8d69985547e670f5752809928fb887516ddd67e56d24c1323b4abc88723b3

    SHA512

    5bb08351d4e875d929aaf216af2a9a39277fdb455d7ecef7f3a68bdcd4de977ce782e59ca85a4f5406fc68b30b4c879bc949bc44ab271b61ea75c70ccf6838d6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RVXHSNZG\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RVXHSNZG\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee