Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 18:32

General

  • Target

    run.hta

  • Size

    1KB

  • MD5

    7d2c494778be2b7a3a1d3b780b058ddd

  • SHA1

    32009f732f3fee3a3c91326f3815df8f43375790

  • SHA256

    006693ec698c4c3c7410fcbeba07c0cb7ab638f17e74786db0b6e72ba7d8b4b7

  • SHA512

    b33f0cc32fd200d4f91d1af931c72ba388c0711b60df07f4fd94924d7d863199d4cbc60fcead95d94bcb6d2da77f05bc742262371305364966912bc4e64070b2

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 11 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs

Processes

  • C:\Windows\SysWOW64\mshta.exe
    C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\run.hta"
    1⤵
    • Blocklisted process makes network request
    • Modifies Internet Explorer settings
    • Modifies system certificate store
    PID:2424

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\Cab8C9.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\TarA04.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

        • memory/2424-41-0x0000000004A10000-0x0000000004A30000-memory.dmp

          Filesize

          128KB

        • memory/2424-91-0x0000000004A10000-0x0000000004A30000-memory.dmp

          Filesize

          128KB

        • memory/2424-92-0x0000000004A10000-0x0000000004A30000-memory.dmp

          Filesize

          128KB

        • memory/2424-93-0x0000000004A10000-0x0000000004A30000-memory.dmp

          Filesize

          128KB