Analysis

  • max time kernel
    122s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 04:02

General

  • Target

    5faeea7ea148c274ae9d3447418cfed8.html

  • Size

    601B

  • MD5

    5faeea7ea148c274ae9d3447418cfed8

  • SHA1

    b4148b8ee491327b1164b6722340de8dd4ec761d

  • SHA256

    1f650b23c6dec0ebbeb16bff80e1d530f0b7ec9eff9b348a466b81d9b4d4860d

  • SHA512

    02aecbe4a1def41038ef9599924c8382dba20b45abd0e8cf2064fe6da22335feaac8e0e64f44feb419f597f34968f5fb139c035199c5463259d5f344f57a371c

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5faeea7ea148c274ae9d3447418cfed8.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2108
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2108 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1768

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8769fb7d0ddb283d9dce8312f68cd1b4

    SHA1

    b390b78ad62c7f8f4879ab3ed661a9459f1f092a

    SHA256

    8f0df1035c38ad1a45f67d5127ba199c704565abf2de576a2fd45492a2b9694d

    SHA512

    9a768d87bb052db774d860b91fe07009baa5008f975cd9ec01f547222762b3aa16faf54451603b2e3f8949144c2071b68f10a71559d399a8bb5b135955420da3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e238754120765920a44d8a151e352662

    SHA1

    be0a1e374583b81f8304f6821944326e5d4a5a6a

    SHA256

    2bc4c9f9aa749e30bf19b6e06d4b2d4f9a217a699606868194f8aaa07ed2428b

    SHA512

    9675d833e3f0219e2d15435118f93933a7dad3ee9c71d14d462c03e927390818e3de559e28e93f208451fe730ce0e6c0854001046b354639483b2a31d970571c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d452e658aac4feb77763bbf2bee514d

    SHA1

    bd47ae533e971e936efdb229d4505e91814bee7f

    SHA256

    5b30857b8b697baffc7fadc329389a311a19e63d8e75be6ab6b50c7ad9021601

    SHA512

    c9f1f44268c4cc4b82165b91edb9c20e701c193f3513812bd28b6b15e03b8ce2b54a5361f3c2d8b7d8b07aa03841091cbe497a5bb923009b9dc120907ce0205e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e7e9b59cd6e2f5fd1301653e64f65cb

    SHA1

    24c6cf68c6df3d78c030dea756d128bf0f0cf034

    SHA256

    a1ac415b90f81e87e5c8ea353e5e0e277c3e4e57a2d6c5b0771ff6b67eb42f84

    SHA512

    f88d7979020bc55ab269f5dba8f59d6b662b1144910a10bc312d2e812a8ec973a357842228fea3e99d0b11a337fab8cf1fc1c1ac007ccd89b5e824b6c3dbe858

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ad47338a4f3cc28ff311454a106d987

    SHA1

    d1686866d12a2f86aeb74cbda88f461e5f180ca2

    SHA256

    25665e1e09fe85852706179a2c07acdff1599633a3441507ed6f7862943bdaec

    SHA512

    525bab761ea65f00ac3a60e296c84c0ed00230ea455bd4ad77dce48265d578350881343284c461ea1d76ae3c2e4b2738c3707bf690d4d31068b896e7029b4948

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17c4ae823a7fbc79801aed1741668c75

    SHA1

    51ef80715d4ea89d642551704a7b8234932bcea7

    SHA256

    d1c515ce95dd01af2e3eef6edf2b74568b603030380852f727e3f3b13bc51cc5

    SHA512

    74a2b113106617abe06c8b21ffb2b85928150c0ac17433bb5dec3381a1769c3dee0a6ac2255e6656b352ee16010a4de699a177a09cfa696eb3938bc32f29ca5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ee70113a868fdd0056001cc7f7cfdb4

    SHA1

    b6184e3b104d0bd446718431f351edea2d225520

    SHA256

    eee6920ae05a4981e0044172734e47c90d71b09c7f49e5a26b0f3bbf44a9a6ff

    SHA512

    308e79fa5997c36e489cbd8dde79b686fc8ad46fc19bf01f8e2dd77a576a21edc7ac95007479374c03bc48872ac818388d42ba1841459e0642246ed76821f05d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc83ddbc5dcbb7e6ed2888f6d6653537

    SHA1

    75532914a4b9828ba6833934e2fb4fe3014d0cfc

    SHA256

    e7969695ce06552eb7bd8e668d1e9617080f7b1bc02c8b96c18b71a82230b61b

    SHA512

    2987dd1ea5b09c1830197c16a45cacdeef86b95a0b3393abdde07a138b416c90a80d5a3c5ac11e41dc07d91b5a53bcb2dd9325fae0c166c06d359363e6ebd836

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d3c22f1181a5fd5ca4aaad0988e883e

    SHA1

    2afed367ff937a6a4fd77c4486a9a96a8db13c12

    SHA256

    1fdb54c8d7c472e318d831a148826808c0999316a641bd4d8f58a80a7f922d72

    SHA512

    8179131c5d2d66359db77758960f8a0dbfdd3893e77fbe6c6cfea881381a901921d94b2a1bcaf27de18d2da0f79368bb2e7e7baedf1476c2967b174af5d7790f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b7b82d22ffa8f94ae035b2d92a8813a

    SHA1

    538769a9aff3481b4965143bcbe71dcbfdf73150

    SHA256

    cf73e5d486f15ba583ab24b1e279d891f91f48fa52a9d854575acb9b183ce4e8

    SHA512

    6cc24ac3d4915e3d11385b34e7ec5d8e59c5792420dbfec0dd377d0ed462febb0ee08f18a14e04395d85e4fd2cac4e5a24e2729d21e6b34958caad681009405e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d2c785c05a4f33028a7ee99a6c4f496

    SHA1

    75d9b45bf73d917ab487deb1262590b3444e7d50

    SHA256

    bbf818e77387aaaeaa230d5bf4ee95ad537a4fc10fe519eaea72c9add4cda67f

    SHA512

    263441746887ccc2d64d4bfc361ab739480653c3ead3756822c19d4fea09b26729e4393324b42c5dc2af3c0610a88e3c7525e659b1edc2c04aee8e412dd82e39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5f644fb36b7551742888cfb49662690

    SHA1

    684af17d5818d9c0e936b445ea74b0e4288b02a1

    SHA256

    04a9b6cab48af0ca2f3ea2acaffeab1a0ab50a9751da3ba730d222c56c76754c

    SHA512

    54c741bd8d11efa3d96d8084ded07c569d760bc2414e148c3a43b09270cd7fb3c6103f03b0d479ffccec4e6e95fb5a33b8a9eb9255b2d94ca974da55c3469029

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de6b0eb4e623e4dade8cb1af77956259

    SHA1

    34c28bff95219b2f341f93288f58451c63d26f88

    SHA256

    4a0d564e5f9fdd9ebf85635de8e6d33a8a1c058928c27b198ef1b14deb3dbb0b

    SHA512

    7bdfd34d214aab94c54f20a22c75fe01b781a3bec350f4be0e2ad353db8722cf5f5f3e099b615bdd82dc89d4c8cecdf6d19d5b35ee3a9883c7cad99e165339a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3cc2193a53535e4d2ae4284b849d5c8

    SHA1

    114d2c11e986606b49f6922d86330510c67b5db5

    SHA256

    e5582cedf65fb5452961c110a9c4f6b273b2d01b088ac997b482fe95bcf8a16d

    SHA512

    930724b94c7db2de576b206cc120efd0a542026875eabf04fbc3f6386978b482ab1859327b123f575b33010ac0d512aa17a16242f6d72f494e16d9366b5e93d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f44564ad07699b5101be8deea707014

    SHA1

    146c330fc512a8247a3eb87a2856e87b6c456298

    SHA256

    f3a44005b3551b17acb6dae1b33faae035299277492203b266e72b8bcd65cdc0

    SHA512

    e083331ce49972b21d926180a8a65798f4347b02b4b8e197baada181b469a66567f95f2b21f5fd82c6a24613d126ab07d5cf17891ddbad3f32b3d4bd58ac3640

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2dc5fffff642e3f235fa66d793408153

    SHA1

    e170dd641f358a167d77d5f68e5e49a7b340938d

    SHA256

    61d36a342a5417ca156854d91b23c7389e10865074e49871d261fd636d67c717

    SHA512

    390200b085fd174d20b10189e0f4db131b5a26209956e8b4cfaae4423850668c43168e78db0cb5fd2ee78b4cee24cd3bf6152ae59d5ea5e6a0a8cc86bd3defb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6edba05aa5acfa008b360be59279db3

    SHA1

    c58b636f904c27336bd0d8e13a20beeaa83234ff

    SHA256

    489134ce759b23fa76f19f0a3b20f8d038baf21bd19add82c3d4e90573be042e

    SHA512

    0eda9b4a4719be15b3daef958327486e4ab8b1ebcced5829b30e58cf70f13162d9d33edb7a5cecde07b62d6c5aab902e15711466169771ca0e378bad526aae9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d435db0742d33591f99f3ac89fbf8fde

    SHA1

    83dd2cb1ef1bb64016139aa30d7a4dc210815154

    SHA256

    83884774dee1b2195c21ef6a602c95be14cc86532d53e6025d5b90d146c4f84d

    SHA512

    352909d2b2dd93d413b988869e4caf7e96e2e665bb8b151a8f127a2d1462bd5d7e4f054293740206821b4b13362118ef11a1b1243dac0b2c7f7e4b310c0672ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    376ea22a347b3481eefdb4a19842b515

    SHA1

    b9e085bc52d742a18f00d05f2dafbb8ed01d1837

    SHA256

    106621fc80b123b69f7c8b1b142269b4ceed11f6691fadbd2a506a928d574db6

    SHA512

    b7d73792190ba4b11b1941665569a45a28bb5b08a1648f85858a909cf9bf0e4a9f1d9f9d6d31670e0a5d4df8a1b4243929fb29f203a3638b40ea1123f120c545

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cdda5e7fa10178b47739d287af1e5b3

    SHA1

    8fe8cfdb32e413a3ceed4b2d5ba090234c9c1667

    SHA256

    82850ba19806b2ca6eb491157c5e77520b797f5f41933a46e44d9479215aa742

    SHA512

    7d339761f91f4085b0d5f19aa99c1a35340fdd9538da07a0d50460d2aaeb9938db75f61f37469ca3a461255d135120b271e789bda94b3a96b00a76c9e51e821a

  • C:\Users\Admin\AppData\Local\Temp\Cab8BFC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8CAB.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06