Analysis

  • max time kernel
    0s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 09:44

General

  • Target

    824bbd6faaa2b88bab7beb5c710fa628.html

  • Size

    79KB

  • MD5

    824bbd6faaa2b88bab7beb5c710fa628

  • SHA1

    bba97b5aceb162f024813c39ac5a6b34a9ecd6d4

  • SHA256

    26563df98872c1ab6a6ef88dee7daf8fc726a1d090ea87cd3e7a226f850f8a72

  • SHA512

    7d6f701a04dd429c12d62521bd5b9316df7af9ee99a2e290a38ad0b2269a0a24f454addbae59f5766c641820ea1c12cd02c2e84313c80c5329b3da4c47717d8e

  • SSDEEP

    1536:xbIRIOITIwIgIiKZgNDfIwIGI5IVJ7SqIRIOITIwIgIiKZgNDfIwIGI5IVJ7Sb1U:W1+7GgOtVg17eiLvnN1gA

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 24 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\824bbd6faaa2b88bab7beb5c710fa628.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2348
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2348 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2524

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    21KB

    MD5

    0b31bc6582dadca6555bb2a8b6ad9903

    SHA1

    d566c85d8c4cd9a0fdb732bbfd89e71008796f46

    SHA256

    1392ee1b2e67e18a95ef55709a5966f4907f937276c02abc060ddb883895afd9

    SHA512

    0a039f66109b972b6dff834bf7a86c75279a4b9561fe7c95502387328eaff01afbe9095b85492dbf62f462e3fe642d49d1456eb219a005533b28095be304a9f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ff8cf9f2ca8b5406f1b2085a8f82dde9

    SHA1

    7a53b1e5a602e3461ef7eb5b472fa84c8eef27a1

    SHA256

    4ca858c851147cba39e52f240cd1b4cab6ec0ee05621aaf8ad171ba6d44c7e11

    SHA512

    4d5b682ef6afa58e230428187390fb785918c645e94d24cac07a450d7abaa800a5441888c5a76b12361b68d67c4914d8644e5abe8b62eeeb12600dd123613a0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    491b34c933077e0dbbd0f84766da67e4

    SHA1

    6bc91f0a59cd52fc30fc2456dede7426b6df6788

    SHA256

    f762bdb570ed0f45a58b28d92a730647a21895abd02b8ddf6a6f10310879c358

    SHA512

    5520577fa115c40637568d33f6f81cd5e66e2f2d1e0365358da76b4114606b627ea0c3960f3e69fca57dd7d0066eda95459fcba902e1473c7613dfdb633f1a2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a02cec92d5c9d423bd09df6d8e418dc1

    SHA1

    92b21b5f4366b3e22c4187ee2ea72dc653902b8f

    SHA256

    f01ff68c740839be049eae04cdaf1143da3021718a921491092d79a17459e306

    SHA512

    39f984dfe4ed0331f9b90e4a75883926caa36ea9de8900e42b842469f5242326d83732b89e54240eeadf8b3217d2f19b1592b71d38432edbc70281011a37fa32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edc6c82bd4474cf564a06b223e84a150

    SHA1

    f72233ed333b565262ce88b61cdf2c294e8f13c5

    SHA256

    dd73c3e5ccd65983199f16d96dad223a14626250b124aa7feea0070933c9df65

    SHA512

    f98e82e169e7aeb7455c95fd4fcf3b081bd37ed63140305437ff41a4dcfbed4e9eb1c315e73b1fdb2d2dca90b84a821771a10ac65d1b1a190e81c3d4ca46e707

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc7ce8889cf358806a164dc364ddb5d9

    SHA1

    4c93119cb528f0dd249432d7a0205b484fe2fa88

    SHA256

    99c0d66b8e1c2886bf4e1672e35b20c219498618dd3545371c31634dccb29a61

    SHA512

    0bcefba80a5127b4ea881c354e4071b15cd0c4c8d3749ecce8a4583b5c0eb5c84308720874a8203e6236f2e05f90a516c073c2bc17b0b75dd5da7abc466d989e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8abd02b0b57900ab664e760fccd2c91c

    SHA1

    549de8b541963d3ff113a7dfd030fd2efdc2f3a2

    SHA256

    cd8c3f46a2745b9334f233237ae49158527788b44fb8d9c007d53e967fad83c2

    SHA512

    67a8df7a8298146df6b2f7da84a3e28f5f419b9ae0eae6f584689884255982640a198ae9ee49cf2bfc250c2907271b9a158302051592260c6399e001e97e6edc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    110089d7b1a71b67879956b375e905aa

    SHA1

    c70980e31ad8c94d8b3a6ec4b98c98a0f05aa7dc

    SHA256

    1768cf4b43831c0535b5e2d790e338a1659103f6de5abad1028549091cf2164f

    SHA512

    4ca79e3e8bfe5109416011c223eb582d491ba485306c73190ea8c5730e9f6cc1ef6192bec1e82a2b827cd1ce4ebdb0e4da629fa0f382cf15dd390e99dbd2e818

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b401a2ad63ff0545ef47624bec61263

    SHA1

    349f0bf8b65f411ed6fec53eade950174a244081

    SHA256

    a3d350cc47c573b0220195891e4bf4a496b8e5c8eac07beaf1d598e16cff3de1

    SHA512

    b523aab4eb5e81564a39da081a1ad513f2ef68c4a2a162ecf410b1199f282e2afb066fa0cc8bbcca3384da4295760e288e84e02bb08886a8abee89f63f64c436

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0cfb898782e055ad9f76539ad2bb707

    SHA1

    88110a1a7d38e89f94a3d67046cadff9d9d7d0e8

    SHA256

    259b36c61bfdc914a83e702b4253848e2dde11091beb187611d95823b39dc708

    SHA512

    05351c07daeb4f75f39c6ab6f5fffe0b7c0ddde3883e4a6a2d7b0ff0f3e1cb6cffdfc69957bc7e621ec26a2133437de98d3d444075f6b01e6134d484049e280f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    794210c204bfe92f67911e9743df428d

    SHA1

    1d049017597dca3444fde40036ae160299224a1e

    SHA256

    c16798208bd9408da94f60a87a7892ad13a3e84383e46cb3658e3eb649976a30

    SHA512

    ecf1a588633fb0bacb000952191aca3b266fbcbb0403667a8fe06f4e0c5ba32d2330bb4b33079ce4d698d24d9636ba3f53f0c5fb68871ec89d12ca782317b51b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb6e8de638c4f4c1de55439f0058b90f

    SHA1

    9edf9c59fb72d1dfb978ae8bd168334473ef431e

    SHA256

    949ff54286eae95028090a88c8b1cd1705d7d6438a3c13a05f56b54a0acbba0f

    SHA512

    806ec95b6c3969cfacbaffcdb9bfe0756a478dad4fced24cb2670ba24980a8f1aa9080d28ec4798087c786794b6bafd36d84b7a3e55c3809e7946c5a9703a3cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd11b0eea617a5091f330d8f913a3a59

    SHA1

    027d82d2109e53613bba0debee10c5d8da0f80ae

    SHA256

    cfe19b55ee3bf2fc30ddf3cfc1e8d4988fd0cfb5749e92358cda432c7eaf30dc

    SHA512

    e9af7a63388d8be33bc514153a7100c4460dfb123288df525f71d8563f43a8d14d76c19d5beef99734e09b851c3b94143b0fe83237f82b56ba629e913e43599c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7a3fc908b04a642f8f50e407ab200ee

    SHA1

    08e7438d8fab76b5279231ff132d5899964dd838

    SHA256

    b951f75e48b8f458c192a0c7b15a9d3cdeee7d8a82dd938baaf3fde4a1f6ffc4

    SHA512

    df1eada45b5f0ad8763434dd632bf02d6b20d58b64c7c0cd313f2a04e622a9fce127e6398c6aec924c97058fe60b83deabd80641de3fbb5ab61190d3034ce31a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1de9136a23689f041123db146d2e2eb

    SHA1

    8188854a9580b376409cd07a271382fdf364e3ea

    SHA256

    45da457f4acf45c170cb09fecc793432b14702fe70251638fe245aa34fe3c011

    SHA512

    7e2cb339b3b761e10bd7353089abcff59ccfbf1ec8c7c2723d4e1fbda2a0db20c25553e5c957dbbcb458c21ff323608f785835542951c8fff1a3ee7fcf9e2e08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fc85b3781dec0bee0aa437e09823117

    SHA1

    4a01f6b50d13b4800f080be5d32904620650a40d

    SHA256

    e79fb4a51f3b9ebacba14e7f3ed0591d04cfc8f2a141362c9d90f0b06c398f6e

    SHA512

    5ae98ebaf566e3421ff71cedea51f95810da56e94c7e2b88111dcecc3c5b9c5bd4b1f5beb6ff4dbdd7cb8324201ba4748e149c0bfca7276ca1f4728397a19d56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d4a9aa68f58adf121dfaddeb28dd418

    SHA1

    7bff019f5f8204e75b999f2a5ad4e4d4dd9e73f8

    SHA256

    f46a012da64848fd3476ef8dd2aac77efbe9322dd45dd9142cd8509dbf3ce8c6

    SHA512

    f8bc6dd0832c8e2db410988bb950e37602957d1779107de4fe75927ffe1242b88731550d710a48469df432a9a6bc4936392fbedf3e8e2c786e3e9bc8db65f506

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10a75616e8b667fd07d907ebc714f30c

    SHA1

    d68a1deca82ce9d68192ee60b6fc4f4d8c1bc7eb

    SHA256

    e51050d9b97d767bb06b973948df61b82c84d3fa4cc4c6b589fb69816b635b33

    SHA512

    7e2a5f7bd23a5430eef916d706f76877ce574c0adf77d951cea11abf6c8eeb9c7f589234c9e13620d1bafa5cad42495e12c7c9f9ac9c9229a1b707f3adb8316c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8ed3234d7017435e37411139bb2ca27

    SHA1

    351264a3af344e436335948e5898e3061441c782

    SHA256

    62ba2876b5e5c82d959a3df3d06d59d3e3282e520622a14a706da4c63f9bbeef

    SHA512

    7386e6a1ef4498c298641b48346cd02ad1968acfcedb7ba7b6ee3e9ee72e5523f717b86e2336984d864e59fd5f3fd451ec57414bdb592b2a5812db51a3cc2f34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e239b67ed11d74197dbaaaa7cd808638

    SHA1

    21d57e13494bd51f7f7603f9e92736346a548a15

    SHA256

    5afcc32816ba029d8c90f1ab393b6004408c53748072cfdb3b4c9bc63f04a85d

    SHA512

    61fa8fbe310892a40b773ac8433195727a174cb0a24f8e9b690063d1b1360c731f658b53c37eee4b26913c57fcab5f4a346648cc124fbd7c0384b706e666a0ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38870b5f348a3d7a4d0a2b660b53cdec

    SHA1

    3feea1d38ee1bd41792592c65c80a5ee530ea90a

    SHA256

    d2b3c4e190bf4026e5d3f7d78d63acf259caa4de5f30a2c687a63fd8886b01fb

    SHA512

    99a8d3f27fce3b0a742397e2a25a2db7a0a7b395bfa2d9347715d411ba49d574ea6997697e99528cec97a8e86f2b05e862dc4d798185d006260a1b6928bafb16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    df9c6de395c023e4d5980754dd683d7d

    SHA1

    75f25a138069f2c9435efc9d7970494f5df0062e

    SHA256

    c0b7962c2263268b22f6c1528f0bfa0c3a4fd4817af5d679c89b1eee7ed431f0

    SHA512

    014a4c3ac681ded733974eac9894ab0a4a80c405f99fa57eff78897472e0b9d5ae1c403914c78f6a6d2ccf3deeb52e7e7234326f3d237a7c3465c2b6c9fead2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar1E3F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06