Analysis

  • max time kernel
    136s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2023, 22:03 UTC

General

  • Target

    sConsole.html

  • Size

    269B

  • MD5

    76cff191be980267fa533e55a9239ab7

  • SHA1

    402d6414f2831b4ca167053a34c47a0c7673d24f

  • SHA256

    864366803cea1cd7ae018366765a30a0a619be881b947a4c5f2fa2af751732a7

  • SHA512

    7c8263eacf5d4a484fdb0e94f175057286055996cde69d6107cc0d5bca87c892a3c05f286d48dfb9ccfc6706a327441ff25248fba11d5e7db7f0762fbfe07d9b

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sConsole.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3024
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3024 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1908

Network

    No results found
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    747 B
    7.8kB
    9
    12
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    747 B
    7.8kB
    9
    12
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    831 B
    7.9kB
    10
    13
No results found

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95469670f8cc9e0ad9657b39e75eec59

    SHA1

    6c087dde60745bb1e4357d702d1c7fcdb716f089

    SHA256

    1228f1c2d067f7f5a2591d99836128143b5b4a0edeb4bc2b1ff0fb8b8ca956e4

    SHA512

    74f8bfe1cdcc0782fd82d411f84b83ed9ae42d93c4348365352aec398aba9b68b3ed958e8408f6e5ece111964ee5e42f3c20654d22e75426681d8ab2141c69b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5dfb9f22d31b2896b57e3914dc6729c

    SHA1

    54994b0bc16f7dc307e4f2fe0203d0db2ac7826a

    SHA256

    e6b69a5a71e420b4c3d70b7bacd2f3409368f42ba58bc4b6f1a91186a7830d56

    SHA512

    230f68389679d486852a0a20b90a0a738644d2eb8f950533b05fbc6a5217434e1f387cd2a3e56e84346bcd969a51ff61d91ac18c788b1dd66537bbced2fd60e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff625ad65e1d18c0a1085f0bf60f12dd

    SHA1

    7847b59679b00a9be95c306cc9b7d942b35abfb2

    SHA256

    b887ffe5c13a6746fa235cb59077ef2f5e7823a2cef779e5c6c229edce6d51b8

    SHA512

    35ddc48b53fef8071ea807f44b45ebb9781e65ea4cc261951b0f02c5c29fa5cabcc110ca5b6eca918ced41260af92b09504ce3ad79711059c24815fde6b991cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3dd4976d9eb6f262b09abc5bdc434efd

    SHA1

    755fddb9387d57fc1c7cf5724a0fc5e4105efee6

    SHA256

    07950a47d07a75797583c91da7e53f5ac9930a6e8a75cd74f50f074a34809673

    SHA512

    036f4bf59a748276d588fb04bf8168fb1a2f59d56c963ba98840f2ca53560f87d13d54d148d671b3628d7bf475412ff036ae469e738b4ae073882e920c9fcb8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7606a8c1f465432343653c5441cabc77

    SHA1

    44027d6d621e5a9e5b8cbfe3c53569a939e4a237

    SHA256

    2d69ad7ee1de98f0b6195f24f2600873e2f4c867b2aeaab619eb7acffc9059b2

    SHA512

    2493d8a65962ce518a30f442f64047df0bc5b641c9923d6e157c71d30895ae2396b22700cc19bfa62b3568491ee270fcb3e3cbfd61088ba48f135e1986c26c12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9139c1069424cf3349b6cc34693e2a82

    SHA1

    189789759496b1a49d914bd9e15ac4076d13c0ad

    SHA256

    20627755a1908a2355ddf719230b652571893d253cc7babf0c25a8ec6ec477f9

    SHA512

    28a281f4e03adf9bb1544ca234f5124641319e84eea24bae6c04cd28b1f450434b5e13cfaeabb0933faebedc794335eb3e94c8036678cffd267d614bc0fdc870

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ba0d078971f48889e90ff2384eeaa47

    SHA1

    cbffeeb368fe9e2dcea87d37dc09bee4e42bdf4c

    SHA256

    d8a2d3491977771ad348ecd0adb98798704d9c2bbd4fd2ceaa8292c3782bc4ed

    SHA512

    f09e8d69f3d72c0443458d335e6b33cbdd13d81936cbaada443da74b3d220aae169e7b755aae1fe2318674ffe16c88e58e8f063e01981ff95b25d157252bf10e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad14b42a54af90a5c9d0fd58228eb377

    SHA1

    7c4e81fd1906013e45ed546a70b4d000c004a608

    SHA256

    7607e19ba0fd4cf6704c03df1342e3b7b80a85574cceb4e7b1e4264bb52b15b8

    SHA512

    9c07dd3f0ce84e5d67d422096be7ae12f42cbec3476cf62edf47da638795bd2e235fd1c06e066b74264fb3e750f3445c4ba1aea0dab24f00978bcd02566954b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11311f0956e825a4253f682d776536dd

    SHA1

    937816d02b91976e5bcfc5c3c289e0e6ebd32dba

    SHA256

    5b406be8c2814a0f50b3217b80346d199c5be698442733cd463d227a352f73a5

    SHA512

    3991d0b2f09b4db69c964c14c7e53e50deef0c0373112809d511f21f5a2af2c6b33ddbfa3ccc23326a1e2781c4733d258653731fb81b8fe04f40d1eaf830a152

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ee401976fddd7a360fe9d7d71fb48fe

    SHA1

    7789e4328b1c06e15f156d000f6e0d395f414fdd

    SHA256

    fead9c26c9d141821386789ad3447133a6bea50e80a1519bd0cbf422993f99d7

    SHA512

    e1e970eee16258626e2831dbb85ef057856c721968bcfc88bd20b5f7d93a1cccb376b9e7e70ab33bfb1211b2892a651171938c7636b5129fcd17ce8ed55949c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69e00ea3a8f88578cb03b2c17d7a15b6

    SHA1

    dfae29a4bd8933b96b36f98f494759cbd0080a97

    SHA256

    01de69cdba9f6fadbf8a299cd490c37e22ac12f3ff0fe851539a2f73f7353d14

    SHA512

    6b1677364593079cf3358625580fed6578b54855e208f4065b4dabc41755c5db16b1dc2cbcd98f4455376c3904e059a58f05b106514f774acdd9a95265bf1cc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a16ddd165c405bde21ce5c409b51194

    SHA1

    fb5894b870d2bdade9cf7daccbd15bf921e1741b

    SHA256

    70c8f9c39c5b79a43f6a0f9c2c2fc8ea2bb2e8ee24c36dfc759711c0f054e5ab

    SHA512

    03e04e2f261ec11bc182bf7bcc38bea7646c096d4880ea2a23f5c2bee01ce6818b38ac2291da28353db0dcb3e594c73bb7644c6b6a8d4d1685320ee718edecff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d253be36df56589eddb71e308694955

    SHA1

    707f451cd06b597c73fb6c3e40431ecea0684452

    SHA256

    4e66255160b782385adc55550300b95cf3db21d986eac0d45c12a859abfd85ff

    SHA512

    d509d21cbf2a69f99ae538f987e99be5b5b0f761c33a9dd904c1db407d574fa2b9aff9306088ebe5de84739bd33896c9092043b6077833694f344d6df8a3ad62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e7e946cae96750c070cce3cc1c8a962

    SHA1

    39151a5eea7cd5c221fab0950e0a540903c61362

    SHA256

    ecb6ecdc3e6ea72097153c0cd3250c98b597b1dfa2c109c8f61e5acdc985dac2

    SHA512

    9ce4524abd1f70d4fcb1fcc14cb789d6586894052283a7de4c8852df6d0f445c520a6a016a9df7373ab7efc632f9c16733b6e66160ed9c5a0355b56c06f6dfe9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ba3355a56cae620615c2a43054d8ca8

    SHA1

    b82e989b0092d86b95307a0068f6571c174c21ec

    SHA256

    840ca24225a475a1feaa22e422519506d3dd7e63e85fca0467958f977bbd10fe

    SHA512

    2623f394ac0ba570b7103e8d892fa81495ff6ad2d134d8355c48f400d3dfe6a82fd0dd40524f269f9e3efd20580b77fbca4451f5b657045ce558f37b6fb3a212

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14c868e58780afa67eb22aee7b3b8b9f

    SHA1

    d72aa7389dd535701eccc77818c31fe1cd268db0

    SHA256

    a6d2d8e73689d52842b8095284b6eedc09b4e36e5fab437bf44f6b3b5e003fd2

    SHA512

    75e2d34b6a56f6a0b52e99548ac63c4722a62bfa19edd2ce268fbc5aa45d804eb6e2ca8a7da0f9a5b6b50f8b2d5388575a35fcfb050e7c224afa950df7387a20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    272aae917cf3009ca61ac64051f9c677

    SHA1

    86ee6feb4095328b237d7982c2a502a638f6ffc4

    SHA256

    88851aeb1b4f5607b1bad1ab505817be3c4be0788e9d7349a11cf8d42a1c0dc6

    SHA512

    fea45fb54b1eb9d914a80b519d7b227974c7aec2cd4753f6256b3df8759f679e360a0fe1f2789e25b17a41c3c20554d19b7547cd6c79a67a8e8474915df07874

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cccdac41177a6b5b294f06d7eb4c47fd

    SHA1

    5238f5d95819b4fa3988c5f188dac4502ace018f

    SHA256

    af4a1657a06035b653d7d957acd4bbb18d16fd63447fc7e9295b1b6bfdc7a165

    SHA512

    1ec438031299d3d07e481b03f6161d67944e3392d11d9a37e1ce798f8cfe2c0347fb9c7fd942ec86cfb6ebb24eca0852a352dd5ebaffe28ecd568667e080f8e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a912bb5833c7809ca09456929651c4e

    SHA1

    3a2474f26f663a778e14114e9a59bf04ba6aa3c7

    SHA256

    198bc6f13a95edb698c76a8c1d528ca772e5e6c468b5d78edcc775523aaaf00a

    SHA512

    fbd7bf14e46f4e612c3e5d752eb3c76097612e9071c79fd8f252f5b3c1369d4713d6e919d846c8a9797ef9a990fcbacb3816bdee080c55fcc0c96fd01e443560

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24c3ee47371c7bf5f77e25652ad3adc9

    SHA1

    3a3420e40bb304aba989bc8acaf6a8e964b51ed4

    SHA256

    0e571087fba81ada95ea437586cec1a212c878732b3f8f8edcc2de7ba93ab3ec

    SHA512

    10d752cfdae197773faf11cac5fff4805b475d5044016b7d89a515735a8a0a51ecd50ebaa2b307273c5f44978e65fb0bbab52a9694ee89885b8f5336c063cd66

  • C:\Users\Admin\AppData\Local\Temp\Cab5E78.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar5F17.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.