Analysis

  • max time kernel
    122s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 03:37

General

  • Target

    5c71e469f9aa40a47615401abd515298.html

  • Size

    14KB

  • MD5

    5c71e469f9aa40a47615401abd515298

  • SHA1

    5700b77212013bc2ba80edbc40eb2e6e18c2c01c

  • SHA256

    7872ffe3338fb09b80e6c40e821c841072056416f16772c6989086fc8a478976

  • SHA512

    ecbe6b5a8cefee9f2f5f1b9316f0c51da74c979e375046cb0d8424678670ee4bfe8700f246a37ce2f7f93b08d5e2e448ca5c4c21e270b5693e39a3220a6fc5bb

  • SSDEEP

    192:+yEioELD/ZmXg8oWllefMJkZQ3wf1vCmlKt6DvE:aioWD/ZmXg8SZQNmlXrE

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5c71e469f9aa40a47615401abd515298.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2300
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2300 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2380

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ea6e6750c9b8632e3ce24a379168704

    SHA1

    e1a4ea291b0ae52906e3dbece7f1de097ad53189

    SHA256

    ae4e22362a58312bd708c630a8371a9cee00cbc87b8724bcc19549568674b811

    SHA512

    700b28bdb3a71617d5195137a86620aacdacfaf7809460464b0e95153fb8e14b1fde96e63d69294738110cd65778f5a804ce1e470637d3224e13b64aef4fe009

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f80c1e12f2c678f15eaaa850ecad836e

    SHA1

    bb6f0302e745312acc68d28a8e52cec50eab7512

    SHA256

    830f4a88e7c0a7a48715e8c2ab5ca570bafcb9e702be2af6da0b04f19fab9ed5

    SHA512

    9deed6c8d749265c950db041f0d3484d53e0999ac13e73568bc921d84611d2ea460bfe5ea8e26537602490bff47e883afe52d1e2c0f4a0203b6b14641dff06e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fd33cff450285ff52d5ac56baeef25c

    SHA1

    6c8b2712b4b37c8a7a64359a67f85889e557a9a6

    SHA256

    3657e82371fd7520be2c352414ab0246c0d779b03b0f898e898e8057f451b813

    SHA512

    5ddd8538abbec8747ac88317336945ba2683cc6f457e924679e38f19ee6c3852456ae1d4464f40b35c8ee9e6e91fc89e3cd20c3f3f327a05cbf813490c8bc17d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6cf73432f98345c8b2b8c157eb1bf80

    SHA1

    e31d9fd9ea2ff4387a466ef297816366a73263c6

    SHA256

    f8150381684c594c0559d1954470af3d2023e93d438999d750bd7ad014877682

    SHA512

    d6facf097195449c09e1a9de9eea289b31e28b4ac5a8a9281bf0e20b0ea430e3d8d652d31ecbdaa070f42b5d033599355a3ad4c2b392acda1e0147b1ba358ca6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1585f569349e1e4985f36b9890796792

    SHA1

    9bdb51d2dffb72b29127beb4e0ef7edcdccb1a97

    SHA256

    bb19984abf4af2855fb757cfa76612b0dc1df383c7d051a41fb0a4ede1369468

    SHA512

    4636335ff9d62ae86c12b5f282d70e6ed81a2ca65c70024baebe98fdb37a5fa1301b9a58a21e55fdd769dc9b2bda8aaba1c9e4ff481db5398c6c89dd24754746

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6fbc518ffae8f893577d2a7c3582d38

    SHA1

    23081d17fb9a3e18084c305330ad7c18e99d5ecf

    SHA256

    1867614bbb886a8420db33d34b2f27f6391a8e9da9c68da51c293d7c7fc4c708

    SHA512

    6267c57af9d64c6a999553df859c22f3775b1c87e06b5166981e81a5c956694406ca84673dbaa2b2f3092996f7a00486e34975f9d93119113572b9d4dbee3639

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c5511dc930bb18268bf342636d22f06

    SHA1

    c4ab06d2fe7c2521ff0840bfb0d2a024d1927fd5

    SHA256

    d12441234fc491b4ad3d5f78e49cd8c94d8d0480f1c62e4a1a751aff80bc064d

    SHA512

    faaef090bd7d6f1d70e87ce239a494f928a3deabbed01acdcb4ff388637b3906f2924f1773a954f3160197eda09a0f24816c11d8a81a4b39015acfc16864fd71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    141a7a27386a73810ce34503d48d4a91

    SHA1

    65d03bdc38d165fe989bb4e21172fe3395638e1d

    SHA256

    f1e30f80f768d0ef1b7ca40866ace2b40d2ad56247751d33675a9929085219d4

    SHA512

    78d13b286c9d3daf58d428572f70efc8d573d77650820ddc97d71e31d370996c540c13fe166120b01ce89a1a6408c994a3ec70aceb9ae485e52352add82c0c51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d566519a592fd4f026cc9206ae59845

    SHA1

    3ff5916d4ba317e6655cfcefe1c7de5e8f6ae0b7

    SHA256

    328d5d90ba5b28f4e938c68cdebd769358d2f7ea7f7fb0c97559cbc9c9a1c98e

    SHA512

    b33464978dee5552011f5ac1e90f830ceea2649b74639b8cc40dcec91fc05c90377ef3eaa3f0f32695591c946bced5d3bb4e676c9ad634c4d61b4cee8d0cc4eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9665056d98dd651b4cfc63a8ffc8a1f3

    SHA1

    0ba0dc4a58717127362c6e7ee5e76d316ca8d96b

    SHA256

    618e94e753067b505cd3e65acf4684d3bd9cafa9aa74b7e2ff3c6188521d2585

    SHA512

    280f5500259a9b3197a72c6dac68ff634e9645a3c6005ff4531262977aed477ec4cbfa7e9263630e9e9fbc64a2b8fc2504c620f7b3ee3b4be7b4cd816b8df7f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75f2f83c1437ce15ac72ff9e7dcf02f6

    SHA1

    86d85b4d2fa20e6837655d44014e3e47fa1b831c

    SHA256

    850ed0e4939cf680ed1d8851fd418caafe28c0dc31e628652377f2255c892b99

    SHA512

    62a0fadf0aeb7ea8a781a00a299b68b8c08f71693aaf1ebc0c4c72601c162ee1ee51fee58a33875a6a588162094d09f09d9745afcd7ef2d63bed62720aeaa020

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2efea479329fb37bad37c3abb55de291

    SHA1

    b6170cb97ea1f4662ccfa58140e9830bf63802dc

    SHA256

    712f1755930191fff4eb003958acc1e859d8c173a917af4cf40826f5643bcba0

    SHA512

    5e4d140687c7f13a8ec941b0f554a2d2ad72fdf051c4342dd85634b4dac9a557b938764310e7d77c455e518eeea9fa37cca4557be6ac05d8bfadc19e0fb25cac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3dfb99d0896c25369beda2c12aa9cfc

    SHA1

    0cca9264154a1ab43463b4d6e6de7c160e5dfb46

    SHA256

    0d672e5fcba387d588f79191b909ec2faa54d43a0a6aa73481b2e98c2c35794b

    SHA512

    aabe9a082cfbd7fb21107f7fbbf40244fc34bd7838d40a8837015851145e9e0552890ad192c3ed918e578c828f48b45518f29baf4be36f470f8147f9a7d69d9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45361e1bff03f0170bb52a45bbf688a9

    SHA1

    785f4d4984dc0335f002d1fd0dd10e5723a08720

    SHA256

    4dfdde1221e52129b36f6432b9ab97f5bff9a0da1a695b4a4b31d70585dfb4ad

    SHA512

    3f2589a73fa044a988788f959b8f7fcc97f411d53bb29abe8ec1bd5068cac6410c6a59a7ff6fe933761f6ee6fd289f73ddb7302a7bc386263e15e93976b9384e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba1b54e721b582eabd03472ab41693b2

    SHA1

    b75cf8e40424798c5b8a2f677a528896eee316bb

    SHA256

    1ed2912ed0130398a95a521b115470d8067445782fd632e2d66d41fc01c5f147

    SHA512

    564edd66b194dd7790a26c1babf33dc6ffa80e7347c54251016efaaf9c208fa1a2a71eebcd82a7af34b3424ee9000450363c681742a1cc8022368e6c284bee94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    937feeb68d9beb4d60d6ae59b5b16361

    SHA1

    19596a045b6a7a94a0f24fc302a28a64c03ec522

    SHA256

    d76c4b8935c114d33517825a7194a41d3b8826043ed98ea8df4485db8678e976

    SHA512

    636967dbde78071369e36c062ab3b2b53a075d092c87c46761e7e29754a8f2febdb90e48cdfeca78b99af1965af1754a1727da25c3615235e214fe104810cdb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8daf100693ee44442748fa121d3d5d9b

    SHA1

    ca84c23193fa98117ed3488eb68b80e8f53547a2

    SHA256

    8cf7e63da77a6a85b161b625bcb36fa83affe93b1e7d5e6fdbba399a20356681

    SHA512

    50eb1eebf1f276c770af4cc0c7d927935b2742ec73932b6ca7031e07c62fe27c8b10e47db086a2c17e300f74b95eeb26c35273161cd5fcf39085cab91fa09c6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c22ebe5c536e93212cfe18b979796cb4

    SHA1

    21794b60c0a430f1cb5da00fded872d5a08a1d12

    SHA256

    af71c5e908f4184041bf4126876bad65f4bff70263d197a2e7fb802d47262bd6

    SHA512

    f0a4a33435cd2b1ab2ed67ee69029d0bd6cb77e3969fcc446dbff6ff28962f52e6e6533d52bda63098e4f5e0679ab9d75cb7f4401642bb954bd3edbb3b314d1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58bd30f104daff7e40be94cbd3ce777c

    SHA1

    92670e6c15254fab38228b6711aac94b165b019c

    SHA256

    08e08566ca3f56b3f6184554fab7e8c528d6143a0a061ab0bba67b5006f2c416

    SHA512

    2cc664e0097a13f48ad490fd11b7bd0d6a101cfeb3d8fe57eb5fd8091d3536cfd5174b7207d869c76501afff6d1f5433d7c2279f5f9f9a6e835194140daec753

  • C:\Users\Admin\AppData\Local\Temp\Cab76E7.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar77B5.tmp

    Filesize

    136KB

    MD5

    0255399f2a5df307a42c446b66a98d1b

    SHA1

    11fe04483fe8aaf002f2b2843bbf4119bdb51292

    SHA256

    67da38fd5ad216ce037504895586472650b1460aaf53ab0590ee253c119e110b

    SHA512

    6a0956806f98a781df6124a34c3967237c59cf245b07cb9e55befc049ab3182d4ae819c97eb85bc0f8ca88142b2ad4ba81c73f8c4a773c20262dabea09c4119f