Analysis

  • max time kernel
    0s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 04:26

General

  • Target

    639b7bf00b6141af10ca737861c05908.html

  • Size

    842B

  • MD5

    639b7bf00b6141af10ca737861c05908

  • SHA1

    255281c2c07a040dc5fbc6fc979a3aee02e08506

  • SHA256

    38ce412d35c9122054c31450616f68547b80e0323855d9f8c5135945bb05a713

  • SHA512

    22c223efd73ebe4686c9bb7d3486468b6df94a2ac3b53aea6a57f3c956ad62cb8b30f7338a97dbbd4c2a574453b064334eacd60830d99dab9624c74149f39c4e

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\639b7bf00b6141af10ca737861c05908.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1404
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1404 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ef23ac7b0df02c035986676080ef6b15

    SHA1

    ee88207200949af227c990439d573b7e1a24ed91

    SHA256

    aabff221d2eea6e1507f30f18c7e86d41d04fa0840d0de93c1a19995ae49add0

    SHA512

    8b9501e0c09d324e32463c3d5c0d179eccfb74b5c374569df686cd3f4dd286b7875c6ba4b5fc2d72a6b5cab6c99bf80e0b42afa9dccaac4094c945197041bd70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50f2f97e65cf01e2c6f30f25691a4988

    SHA1

    f600a955b66175f78614074281463a0cbe43d777

    SHA256

    0f05831855115d1faaf775f043719ac024b844ed626d17e1187537062e1b4737

    SHA512

    02f3df5c13dc16479362b7dbe9a269ebc8706cbafa8aaaeace661c674d1fea1a44e75b77f1d85ad651f4338d533225cd7d5a99704b795fd5bcb43835855e1d94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e64e91b2f345193cbbb0befc01276d8b

    SHA1

    81a7ae98da5300c6503c22cbee732bd633875c43

    SHA256

    d5379d2d9b4de2ef3b9430159d17f85ea9e8699f65c21f05e71ca54d00af1a02

    SHA512

    8e5d8f8f85a02a05c6b8dbd427ec4f79b26921c4cdb577a5fd5d59e591416ddb84ba6a5445061b7c1939a54fa68091408e572cc8f954d715c3bfe26ee1b17c7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    234ad98bb89298e8e2a34c9b1078f935

    SHA1

    b3fa66cee8a0d8f65d292062064f775ed401e4f0

    SHA256

    0ed45f95b1ba2ed5306abd0e0ca7c55558241db4735fc8435153df2b8a376150

    SHA512

    83389332a4e53d021dba6c669cbf50b1e51a49420c5b88e9227f6c7f505725a30d29eb438960fb9278b7ecac3d496eb8152683376215f9981ba5d71bedfffae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a503cd5de873a145756dc70128b17f1a

    SHA1

    15b6a49d4a96bc71a2507f7f1b9bbe9903a06ba2

    SHA256

    30be1abd2eacba223ef48c36fc2f36c5bed9a1a3920f2d8fe00bcac81ebf889d

    SHA512

    10a4ea55951b634fc8f533da60459e2acad22ee97b1663410a5734c41712615ec727f78f84f435678f30bc1df382d87f6e9184fa4a205e24c6e2f3d2fcb1b822

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ba59175ee61c160427b156a3211910f

    SHA1

    70a91f1f29c06fd714dafbda95afe30decdcf0a6

    SHA256

    204738fa70bd91003e83092bb3e129946f85699b0edd4c7e738bcc7d59c3c00f

    SHA512

    306af659071612a0f3a6ada7e7a147229d4f92baea7e7e61c648d9c55e5e380e4eace3811bb700d615761992c289767f1b608c905c19ae2128d91842b774a60b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bcaa2054bb2c5f9553c748b5ce01ccc

    SHA1

    4a67b60046b6ea245b1e1769f8682b4bccb840f4

    SHA256

    11ef39d71b407ff0734f183ff9a89a1db36f322334bed767c8fadfa2e075c6bc

    SHA512

    6fe791f36fe213fdbe88cc3abe93a912dc1eb2a8b5853dd62eb614fd3d7dcc6e2c7425809ccc94b63dad803402535fc30bed368b3778b10449dd86769cd242d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7328df79f485ff07ae89e09b6cee65ff

    SHA1

    f5889b16b7c237c8510b623ded2c089d8753f0d8

    SHA256

    83715c38041cd665eda3945651a3e95b3198646610e92228ac8ff078c0ce0b18

    SHA512

    66b3542f8320849c31aeb5f2ec255773bd1bf27daffb35438f5c742a31e5cce758de9ac48959427ff61846fbc5feb938fd6287501d7391b666aff28d386af666

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfcd9686f4cb35d2e8c08bc566f4cc8a

    SHA1

    d42e2307d8943fc31531b6ea8fa1bf2b75d64fcb

    SHA256

    8a6f1d86cedc882a762e0a70d78c048ef8743b34f77802d85bdd4981d3335faf

    SHA512

    8e9bbe69efac558f7cf336a299dd15ab72016d56294bfaa28b514031bafa8dafa6afda5a2e4cb18d2a241d2303a5d613b9712243bf84139406bf8198d5c4eec8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48e822d617a69cd4f9410b7d0fca2aca

    SHA1

    322f6dc9911d62648dfc08c5441798372bfacf96

    SHA256

    92c59a3a3ef0edeaabaa6483f5150ef6b11c16aed8f9654bb7fb3105daa596ab

    SHA512

    9e7c115ce2d02ca5d4ad0287212eafd024d2b8f79b90790aaee08357513a2a828119b7941036cf02adc7b486ccc183119655f186940fae5bfce590f2609e09e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7f977c953be91ddb6e7c3f44fa00fdf

    SHA1

    93e6d7a1abcba498b940ba168efe9901062d7d94

    SHA256

    97c4c07d028a264f4fc999ea46cb0ad758b915229c6332bcee2b283a197c28c4

    SHA512

    6204694966db64dad8c5d3956acfdf0d679b5a48e8c6fa1e2aede4abee03f8160f01696a5e15f17d6271c520d73e845008133c5430ddf8dc560a800b41edbf76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf2018f158f690cd6aea84c6cef79055

    SHA1

    1b53ce625595ec944cdf12db35edd07188c196fe

    SHA256

    d624617972e0c2c7a4fcd768d0a78a64014987eb4062ee426eae1367391c124b

    SHA512

    24a1359fe417e8c2a193a8b4306ab686d259fcd56888a4132c26ace247c17fdd57ef39947aab0b82b8d43e97bbafda8c84c3f3484f6d4837cab36a857da5d910

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24fed39c0c6316ef26ff4cd0a239d384

    SHA1

    d85536d21e306f770e6a43bd415358d6ab2e7a90

    SHA256

    4b93b26f03e7a9fe95c2e95ba3225f5269bca023bb71498dc4a608d5bfead654

    SHA512

    e2fc83c0ea7f5b10b80a78a0f5ea6b98f8315d450ef1fe43dbd6d56b128e4cbde8008de1602588f3a3339329d60003cd9c5da513a18f9824eefe022117dca35d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69ea2fc8822d81d87622a33c2e7effbf

    SHA1

    df67f71cf2aae5216ec19f7b6743dc7311afd53e

    SHA256

    c933cc611bf57c42327a9248ffb6bf35704cfe7a1373abc55fef4e302109194e

    SHA512

    785d666c14b74acfb0963873bfbe19ab9a3e9ef81e577ac3dc3425144b23298478b6a1cc7aa888afd73ed6480b39aec7ba53f765399edd410f92fc2528bd32c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef35a17d5277f2e1b9bc4e6c00b676d2

    SHA1

    14e7ea664b09e1c820ab4b82aebd532cff43f32a

    SHA256

    051fbec0a24645bcb560daaafa55f9cecea71121b633c381ee592054e964e607

    SHA512

    3b6cabcf9e0f217470a617f5c2512f75fcacfe9f7a999780170d7048ef769f67c0c0fd1438f6334029ce0a73f717eceb2d6ca2a5a7b611d64f7f326b721d42cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4cb37dadeafae673874036a4d702e7a

    SHA1

    6375ad91d6b4cd29d892721debc706ce3a2a88a5

    SHA256

    25098809a912e9ee141d6f228cff5fc3ae2e1eb0be3315f27d7bf34bc965a251

    SHA512

    1ee7c584a4ac8ab08b5966dbf43106ad84a477d908cfa8fcb4e868a3ca748313979478c41fe78beaa2b6c4cd79e75280f42fb5d5327587714c298105d9e53883

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da89647f75d8fd77b820a8d13aec7301

    SHA1

    220747ae197530487685287a6f31c2e3955e23e0

    SHA256

    2bab9432e1242295bd39247a7298684ec244872069acda9cc2258486a1c8a882

    SHA512

    5dbef2d3c4122561e52370941199ed3c20a67ea6ea748493db5a08b1c924d856ff31507cc14087e0fab446a7d8e14e6d09bc5525312fb0688197afd599f93372

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    684255e1eb3ab582afbdb972d2c8695e

    SHA1

    fb75ce85473123a229b55291204dfd2c25b667d4

    SHA256

    1dbd95ec3784656e72ab6a722f7de0a8030c99d1f9dbcada93d15462c70fc2f7

    SHA512

    221937886c6cbb3329c9a8903fec3e9ee9117f429ee9bf299eaaada8839ae5cc89a4bfda59f4ffe98c85e91fd776cb1a76936678a6f8c8072c6e5b6258a7411f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5053c86d39a0ed22f142fa97f564e68

    SHA1

    c92d7e3203132980688885d27429e9f24f4beeb0

    SHA256

    54ae9766ab4c2c8f31fbb30e9d1687b2037211bf95dabcedf8d33fbe62ac94a4

    SHA512

    1b8fe83ca9205644f3314cd9e7a7e3319dfd59e4e0dd93afc5daf4c41274c81fb2a7b127ba0dc3bd490cb7f221760cc16ac80711bbfc7e1ae1f6099e5f6edf20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fe941fa4e708974b354a9ee69612d80

    SHA1

    b3c833424f71da544cef98d554cb97a71cb54057

    SHA256

    4a5cf628b9b1301d03356155b4461340ae72082c3696ea0028d3c90d7dc7a6eb

    SHA512

    7ddae9d02de7a2c213176a0a418db7a2f2cc0a2c3939b73823823fcbf173c5a9748992ed1acf03daa0951c47d037f71b32e23b1d316eeeaed4bac9b5d7f579f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    690f43fcf96d700d0e7f8fa513000fce

    SHA1

    707c8d40eefe404ad90621203619107174a92278

    SHA256

    ac2ac456ff3cc939eae733a024a2bf5b527d2fe81598c438df8a5fa862d6e841

    SHA512

    5d6d245901f85cff18a2b847ce6ddf877bd4ba698102014f918f317015180949bf13003a5af0b5fe373b08d11df8063b437c4025a59b6d7aba10b0f71a002e96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b74c986b573472746e6a30aa752db19e

    SHA1

    f349b26a3752c6252f7168e0e2202dac3f97cb3a

    SHA256

    8b6d55a551652ed2f13016eb6624461ccb66c9747b2517a51ea0e044338bebf1

    SHA512

    689c9f83fa710f16019afdc891a32a00ca6f66e09d10c24ed9c192fa16d870d99675e7b2109071be0c4bd696e1b52496ce67fa37cb13d21e5bb01d7950f07010

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23da840974388a18113d9086541b78d2

    SHA1

    0a9a67f700503f47a3f5662915744e3fc82435b6

    SHA256

    14628c163dc6818ae5280241b79c8cf04996586b6804d89c3c457f8779c07bb2

    SHA512

    b0331b21fe406d3a23f65c6a3a18cfa3de55a75e0e444e9873807e3efd64077fab935465850c59cc26b78c6d335e9badd3b780629806288e6bd87065173b4ea5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    412a4935a5350ec3c4abd19fc299070b

    SHA1

    5e692cf6f89814d7c923e6dfa375e96ca2f34412

    SHA256

    dc6efe2cb197a92af862e039fd28c167b07176d5290bba18231500d929cdbf27

    SHA512

    ba46feedc65d4089676a33b3ee5265a24ec69cf11395b7ff6262f9b9446e0b9ca75f867c3debc56ef4d070a92c98305ba1b8daea86b878381ad276462f9f6f50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar107B.tmp

    Filesize

    30KB

    MD5

    83e2a8a45fbc9c43b2b6b09a9449876d

    SHA1

    a96614e18360de17e68b08d82dff8d255e0669fa

    SHA256

    9334b624fd0af47c7bbdda5ec466376ed752a3224907120e4abe2e967b57e3cc

    SHA512

    e9acba980741a26584d51d08fada4c79a42853b343e01937d4204c1a630ea31013dab60b7f7b219327c2a6c13fa6e834905e3eb8231674019f8436fc595d822d