Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 04:09

General

  • Target

    60ee1d4114bcb4e97afcab786d7c4abc.html

  • Size

    25KB

  • MD5

    60ee1d4114bcb4e97afcab786d7c4abc

  • SHA1

    1b77865d1da96f02db5eac6d5f6674885cf8dec1

  • SHA256

    a7dd61b5836742af9f7fea8d9775ec5e974cb56ca7928c22e068272db4529e89

  • SHA512

    83b74409469fd9709f021ebe2e3b1c965869ae1eafe1e7b5e47270bc8d6279c0d7f581f46da91ea290cc1f7b1e3ff199179c12ac5553688d1963daa82419cecc

  • SSDEEP

    384:xy1R1QREDBeCliOBs1jBD5hECCa6XYa68ls4K8dXwRcYuo6CPRrMO77OM0TCtxYW:xy1R1DeCUOm1jBD5hECh6XYagLV77OQB

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\60ee1d4114bcb4e97afcab786d7c4abc.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2932
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2932 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2488

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67817c79273895aeb794b3e485c481cc

    SHA1

    6de23ff1228c139625b774d727a7658c00837356

    SHA256

    87ee5419a4a982c240078af6de6663106bc6a0c27c103238646b27b61817c4fb

    SHA512

    2406a599e5aada10d00be162abdc04b94e970af0f618fc37e25f51c84dce42b4584ccb74179e77d7654496c796c8220ffcde70e62ac55469a9a16ce279b731a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19e0119f76f2686f06cbe7fa7f1f1ea5

    SHA1

    dd3f822cf9dc70c1928d27a6fc125c9e66b687a4

    SHA256

    19722404393a3b1dcf6f4a8ed2d5250e57a5126b560dcbcaf8ab8b29d60540dd

    SHA512

    8a0d75e0bed57e74a508b0527335497b707ded4944c3d3f2b937a1b9772b56bcbbe1d560d06b241a2d822ea4bb88eb1f8c2629bda60c1725763886f0b6f967f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    131ceecee2dd2460bbea9075c74371c0

    SHA1

    0f11367c09ff68696b032b1f382d80cddc3ecaca

    SHA256

    1551a53324ee73cd480d4e9bd8e91b124cb97f0aa841fb7d5db45aa1c1c9b530

    SHA512

    ef9418dd384fc933445f4565a1defca8225333f758ca92ccae2ccbbaab3e3e4c56786d65d239ecac299681c41efc1f302624df61bcdc27e4c0b131b899b8501f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5a1c078a05f096f6ea8e8e562255256

    SHA1

    650c0da077e8d3eb9417f4feb8c647a56bcd3aa1

    SHA256

    3d5218baaf3485f424d8a89d4e2e42fe90b2f8c318993d43c18e6c2922dfd45b

    SHA512

    33b1c8de01eb1034dddb3fab27bdd59fbc5994b80e6766dc830669e0ff2410a3fa492324a474d334fbf1edc64ab75ea97180900c3df524a280366f9d6ed1cd2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64e5ad85131de208e11b56512d714982

    SHA1

    f10582466abac6dac50527b2fb380974352833cd

    SHA256

    ba10c364f454b1e75ec338c5bc43216170f8307200308fce5ffd3d7a0a38697a

    SHA512

    e40cead65ac56c08e2c9cd5f4f1855a3cdd543e992f319e820ab68e7bab3f771bc72444659f1ba68a1bbfcfaeec818e50576120b4de23ef08c0ee36ca3fa2b1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9aacd0d2364c084c2df6e4cdfd75e08

    SHA1

    02d0f038ac79638da03ec740f9f6ea15b695d7e6

    SHA256

    15899b81d7f1112cb915146da1702058fc8dd939039475427c02d063e8643b6e

    SHA512

    8e88cb4dfa34da46d923d92afc4a172d156dd76c018a6810d165674188df012b856f7511f4d75fece0bcd6830f5d9298b42ce74e84cfe5eff5832835c3700028

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e3b66734b9b3db07701a55aa01fe363

    SHA1

    ee1f54d89e5da02c08048686700a8bfee07f4762

    SHA256

    1485d774330d0b1bc6c0bd56439238caa3250fe1fb049cdfefff78cb5001d0e3

    SHA512

    907c261a0b2a91917a3246608de773eb81397d430ecbe9becb6d4f11ce617eaad49ea9dfe8dfab7b1fe32675d87145b86b9ac230fa1be12b077238694834bacb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b36073d27771590b64e4b550e3280a1

    SHA1

    018115f25823c54243cf03a9a104b1602cbbdd1a

    SHA256

    4c630855433c93a8166a476a1ce2cbe22642930e843d9e5053e0bc07b57d3760

    SHA512

    bb075db13e50b79f643f63271a7546f8b0f5e8e508467d8450beba2f2a44f439fbd2337b7b04007c9b55b2c59fe85a6292fc3335e73983d5ea9a95d93d4c05b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9984c09677432e95e65e132f49b25588

    SHA1

    c05d71fec3b980c3ba01a6954872123f55885b1e

    SHA256

    cb5170a88b5ea89e060dac0eb81970ae3643351185b824185e7c3250b9998655

    SHA512

    ad3828b4f37ffef55554871654537293cdd90c154c0b4bd4df5acab0b2a3f73f5098f39da5c4f37f118542529b76db5c9e76c3096050d7630beeff7b0228996a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f506e7d10c091611a9e5301ce00905d

    SHA1

    58c597628dccacca09f641927bdd1021f7f9e123

    SHA256

    facd28635cafd8396a62e726cfcfd9c379e34090eb6281c62c11514ea86e34f2

    SHA512

    e509b68b5550715127d8acbc6cba50f99ddf6bc6e958267ee12434c6386d10059441586f40e9ce602ab90e4a26422fdd581ff65601da0eb913ea4fb1b317372c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e2e8af646565d90fb1449b8208e52ae

    SHA1

    092e1e45e381ede0b5af5a978a69f6b08ea647fb

    SHA256

    9c4cde21d91b16b01ea7853f1fa5836f63af7b2836d93714762351cb7b03c5a2

    SHA512

    6d930c3e27e65bed4eab57dc3f05db683ba7fe83b55eba290f62951662a7050cd2ac87d80256361b87f112bf94cd3035ba0b4f98d7402644e3cdc04b0b9bd0e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb185cbce3eb95e794b3ecb37ffa2c50

    SHA1

    68bd617e9bccdcab87da37455b498764af04b829

    SHA256

    d31f19e0b8e68c001dc0679f85c051569f6ff88b778feaf44ead61758f6d47f8

    SHA512

    a19a0252ca9c99d365152200e9544395945ccb0c5e7aa8549299681c9b45aa54ac286217e9f5fe9867c8aa795ff2e1e7520160de17a2c9d0b80344e0b52fe939

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1975a96c4e22d6e05b7cdf3e814fdd39

    SHA1

    a82fb0c56f449c860c03b7e1d714addf1ece9f58

    SHA256

    e48e79f4d543d63397ee45b07bedd83d4f67b08f2f084c8e8c3e0acc8628b6d0

    SHA512

    8aef61790d9be0ff3b6ac364264ed20f106a74f3123543a2906069b191a0cdac1cc0913c77c2f924f40badf580599d268485177539569f4c0273f8c144cb2415

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    080f778d82a01b00eaee12b90dfb9491

    SHA1

    db4584b7dd4cef8ee474192675ff73f14c8035e1

    SHA256

    880a36ab468cfbd79036370aae3f4689cbad838802bb3d8bf55e0cafaf2d0f29

    SHA512

    71735a0c2ae8f5565fbcc7f88b2b1075decb539e74004261540699efb0e968344b0c5b74550f59b30fb5aa4787b7543248fac0383ecadf35ae854876a1c01277

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc04f2f2e51a1b06b77cbafabf167600

    SHA1

    d5fda00fa6380b4ae221d26307782eae02972cc3

    SHA256

    4e3f651c993d31fcc7c570de182773f60e13a0ac713df5cb75c90b522d1c15a0

    SHA512

    854eafd42ee357cbdacf9355e7bfdf29e40659078346bb40ea152570a1072b1953a3caffb6479f6ade14ddc1d2a4887354f4df9bf9f77d4230ba2fbb8645f428

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a63d5bdd36ffad429f02a8399f6a592e

    SHA1

    df337fd911644056bda76ee6f9d62845cd2cc149

    SHA256

    3ef18a2206b4fd1bc9e0b2de489894459ee26bd9b55d38e023f8ca09b9f230b6

    SHA512

    a1889e43f306de8e3a61332ebd6215162f14226cd8e21f9595b4cbb2a80e96f97981ba4d81f50d71b3ac099d42748b9e714b24b8dd51e3822ecfd5ef7e1b7140

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a24b39c5387b0e1f67fb2b7e4d98246

    SHA1

    a63e8bc71711d2d367d67d6a1e187cb9fb158323

    SHA256

    3ec00ed86276d8ec8c1cce26edd790e99d19dcd456f7bb7548910a84a5a4257b

    SHA512

    f5d6c2a4310c667192ea7a8e793217397cc68bc6db2ac27202eb35d40b098968d863ce5568f89ed7218144f9f01e5f017b6c5db72705d5f8166608365d541cc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2f0742cfc5f99667d1ab6922f26a246

    SHA1

    862ed878c6ef2ea813a2dfebcd620667b3424f6e

    SHA256

    125ad670d21fc0815d94d45242c1d5ce2475ad735abab0adc75cdc20d6701a0d

    SHA512

    eacd1e5aff5d1f4a8985bc82515348c137777c5738adefa2ef5680c54a2b225f423409f8e5fbed2341156af7bfb86febd0425d15f584f1819807b6930c6556a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5364a7380e9384d3d7cf92f8127ad296

    SHA1

    fa2aeb2598176d5fd0470ec0620d4f8c12d3bbe6

    SHA256

    b9b82f4ba55e931d08e36dc979237490fc07b29b4cd031315221464af49c1ffe

    SHA512

    19c06dd834e9bc50eaaaef4982bb5c53a838cb6458577243dea32f829cbd2a79413b33ddcaa831d06547ff2574635123cbf3ce8cf22b6fddabf8851ffbce0f3c

  • C:\Users\Admin\AppData\Local\Temp\Cab94A3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9563.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06