Analysis

  • max time kernel
    121s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 07:43

General

  • Target

    7a824d30593c441fc4f980f7f351dc01.html

  • Size

    601B

  • MD5

    7a824d30593c441fc4f980f7f351dc01

  • SHA1

    0a6a17d5f2ea489d7bd924ddfdd2d09a397c6c11

  • SHA256

    eb6842f425181c5946823bb74c22fcc2e8ac2e546f334319534b63441c4a8c20

  • SHA512

    3e2a1359ee81542f6abaebea621ba3405a304c5670bd3bf24c6e0f5222cbab937b6e171ecf539009302d84e645e7cc3e4a3ccd432618784e1c4008486706fc06

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7a824d30593c441fc4f980f7f351dc01.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1340
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1340 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2388

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f1bb91a46a631e372ae40be7c96c860

    SHA1

    98182257fe1a9ad5109a1939379fd6ef41b592a1

    SHA256

    b20138867782bb55acb0fd1893a70aabc49f091da9748c28f394f0e66282422a

    SHA512

    5540cdc0ff750f64a06e9c46ce4409833d7579ae1b3d6ac4b9353dc9fb37fcd2b1762a92775e68de7fc907137d9c110ad295c39d364b7b5d971323610e149d23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d31398b0ca415034878c064274dc5c13

    SHA1

    caafe44f57bfc7e688de608af0a9b9ec4adf2cea

    SHA256

    1fbb67038b7e963380ceb53fc350044047a272631c5ecf6dbc254d550872cd5c

    SHA512

    27f6964b3efb453485d4cfe13f5a866b8ba50bfcff6a3bf5c7d085fcba5157cff425979803232a4dfd24f069c2617deb355b31150009071ad905fb8db1b0c9cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d6b378ae9285f98675a82db6e9e60e0

    SHA1

    7d4bbe47abf503970deb55fbbe44ea13d4c20957

    SHA256

    c5eb9e77888cb714c7ec0deea42f76161cf15aeb99592cd3cd0eb6e982200a0f

    SHA512

    d34ee0d5dd38ac4985e78ff7b55028e31331a774616fd5aecaa43e967c60b7904415f66d56a7d639c7cd2c88c76b70a59d60b55a8b27fb2e02ef7a126373580b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60c3d5fa226a3de588abc24e9c587e1f

    SHA1

    b104cdb772dd9b4d17a832c6a7be61cd1f6750c6

    SHA256

    bef484413b033b7f047fc991f312e8e18b926c553d65b13e16a3843abafaad09

    SHA512

    114cbfe2da18922cf5f128bd9651783de3d9e395aa7ea47ec9238bcdc8aeb038d237cb146dd1df7acf62b6a1bcf3f4473270fb2056af1bd6d1cd742feaa8ce90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8e2f996d58a3d827c57160f9968822e

    SHA1

    45c1b5c85fe2365fed05bb5962a67e7ed57c04b0

    SHA256

    c1b97504ef1f37f2de8ff2aa3f208258b242a4593fe10ce80835f160a2c43424

    SHA512

    8d029588c682fd2890d46aeb8d55317f9e2e6e71a53a884b9ebdeaf6728f2df19e4de3e5322566273e8dd7c1076688edaa6b49ca9a61caa95c81165529220e10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e848fbddcaee0fbe8c77292f5f594d76

    SHA1

    c654684573ff7d308c09675845151ed215d5e586

    SHA256

    027dda5234707c0a521c3103e21a20d84116dd6bd4974e1c02e7a79001f1a919

    SHA512

    f1c1e062aadaff6a741447ef7bd46bb9c76b36c6413368e742a3dbb31f002aa36eb228e0463f1a7697130f870e70166b0f8599fff0a0d38c8966287794629a49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b26a5a1e8ca025a8aab5db3368658a5

    SHA1

    d1e9e9068c74737a9efa8539c083dd02712070ca

    SHA256

    c4dac2e471ec027de10bffda1c3d50f51d9c76f20c0ed637619ef8ceb169e816

    SHA512

    29184c13cf8fad414a396980f2a075796ae233410f5c16057d55858478c147d0ea25c9d395538ca699669cbcb0b5345c5fd95c60063c66aa7cdaea6898b30567

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6be540415fd96e21c215d3a1025f6c4a

    SHA1

    84acefc18f8290fa27d6b9a21571c0f0daaed1e1

    SHA256

    b765444afea0e8f2fb5c389553b1a7200ddf69632eb89630e2e350ddf6042770

    SHA512

    75167a145a9874f862085cc1b3b45b30150a41d0da1a2e112cf74ce98e3bd16fd28e49bc77cb2bab8bd79e7163952a8e79ca834c3beeaf89fc2b54f6744fc0c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b288963096cd04576baebd4403090a0c

    SHA1

    007c5f5ff824aeefe698b46eb81c82dd3748b822

    SHA256

    c8c97b6cbf7bfb8cd8185200daaec79f2264793fe09ea8d92947f740a19e6b68

    SHA512

    0b1936b764bfe2ac2776412a43a171c14229a5742b8a631f6b30180225c846d555a8f109b7118c4844c25b7ad2a0aefd4b07fa58e63eb9c6ef83a2f84f3d62b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11a29d76d9247abb5f0d341eb60cbec9

    SHA1

    aca711672676850ea8a2268d282e275ffb06797b

    SHA256

    9a817af5929e5d243faceb21ec4807301ab701c43a5f6bd0bb28ca620e413c68

    SHA512

    14651dc858b24d3f75f96b472d50ddcc6eda01c5f409755ee06163e4d743250eb1341b5b837d117b7d225ea68bf61e9cc5d057bb5993b9afe481de8f61875606

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c9215c94e3ad29128c6f2ad64a7acd9

    SHA1

    9a5551bc7e8d646b9e4f7131b6b00fb051911d07

    SHA256

    9102f5351fe65f067aedb063ffbbd5770793a1e2ee5ad32cf91a6eb18f5590fd

    SHA512

    7295721f5ce84c330180c72d9deaf890cd3d1516dd1596deba4bb4ae4d7fa083b52cb728c9ba1d17bfa30e5b90b9d01a4fdff3d2f03884999d7103ed1177fc67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cdd8d6c33e46e5194cb4960619cbf73d

    SHA1

    96ea90bc8d21bed6900e5891ddecd010e0ae55ae

    SHA256

    453607b42f762bab3ae8ecd2103777c1e96a1a475acc82b60585ede9533f9c4a

    SHA512

    4e100711ef0f384450113701f889286513f1557b25e031105702904baf66efb4554caeddd34e122c6e4dc8fb8fdc2a906693f733bc757698dd887098ce2f3990

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b207006ddf97431c0bd427e732148b2

    SHA1

    205ad6c1a1d3875683144ecacf99b6b8fd3013d9

    SHA256

    e55172205b7ec7df8cd4e87bf990bf3b968ebe9c542396033a5351b3aae977bb

    SHA512

    2a852884dc5b029197890c56fa71121f5d05b89100fd00041f44b6f2bec9e0fa8a0919bfb03beb989209b4b6fa4417b80f3063176acefbba14dfc9a28ad331c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3da0fb956e7984eb8442f04159d497b9

    SHA1

    d0da0a444a94d063f327e47a9d1f1fe7e438ea0d

    SHA256

    3c6770fd845659311dcbd1704dfee35de16ca6e6844fa51a05ce2bfebe7a11fa

    SHA512

    27dfa43c41df889b6ccd4ffde791b316f4ab487869ccd30c4ab177c149ae6b13a6f18f1b38aaca233a58c5573a04f79b546a570c481a91cc818371fd7c6ae29f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f54443ce361b0e03599b40173a78cc3

    SHA1

    e6368d161bdaf84ca19f4f3cbd3e60f2a7c55967

    SHA256

    851785458715dbea1d115c55703345234a8d92fd9cfe1287625af5e38a3cf2bd

    SHA512

    8e874664af01b7b494fc0c45f5d916af5389b2d12e9d4b27962524f68e37a5f64ae1325a930c8975a4af28309daa8b70321d31c0382f872d05d5136024e93751

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9b4cb8883e19391e759f9b961fc5d8e

    SHA1

    e947b51e8832f3aea5b14df9d6e90ebb32b982f8

    SHA256

    8416c38b6c2c6bbe9b3ace93f32487bfb291281d027ff2a31820511516b9e14f

    SHA512

    7023506aa83745e84c0ad09cbe2d55a5aa159960793163ca711c9e1c914dfb59b7b01f8c90e440a728c0177191bb0fbd1c7889f1ea1b96a0c088717fb12e25b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ecba4cae6b5baf96d073c1bac5ab18e

    SHA1

    fd0cacecce79dc691612b7fe9c9dcef31353d361

    SHA256

    8033e42e3cf1f867fa1a9f54cc87e544f5fd124e49cd53e2fdf7867c420bd8b9

    SHA512

    0dd034e49aa218e8f48088e47fb29167d0ccade5c35415d419363002368097862ab6f68dd61d0d33776a1db553b1c99744fa0ed1b6a2b8a3d85af34beb8b54f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19f0a805f50dc37e35a5eb3f987ca4a8

    SHA1

    f69546e19a3c63016aadce44f4101083eb20d911

    SHA256

    d9f0e082df074bd7d587635fe7cc2775e34eb280c4e35d5c15a1766a0a8a3590

    SHA512

    13f8cd56609b3ab23c210923e019afff2ec51780972ab7adebfdbe914273285c0451a2ca0a03931cff6ccc6b1654d40278d0e3720c0e9cf655024158e6e32439

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d2d18c8f712c34277a4602188951646

    SHA1

    62c8e537dacefcf1bd376002d888195d5dad49db

    SHA256

    92362df7506022340d58b33b874c5c301c991a3a1375732d30a9f9c05682b8b8

    SHA512

    5169127b7f61bdb4e3beb18a42ac17e29500454413ac75149fb6382cf6776bcc3627271dc2551291b3bce1e1bd2614a1ceb55728b120c97c6b7ac668d92f98a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c3ecac40bdd5c4ed216a79ef89a6d70

    SHA1

    b3e0072637c32dff2e0d4758f267b49873da07ec

    SHA256

    91596755ada4c6dd17ad28c293d4838e5dc1b1ca60411c66d413213d40613343

    SHA512

    07d2e1328a690f6465009ef33d566c36ddb3f5c2c5b77fe4e68228f0e566e6b6bb6ef36d31b45374a34ed4ce6941335d3f53de38e17150a78c4e74218b6c9ba2

  • C:\Users\Admin\AppData\Local\Temp\Cab9291.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar92E2.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06