Analysis

  • max time kernel
    120s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 11:25

General

  • Target

    88663bea694f3b08f1447fc512d72533.html

  • Size

    25KB

  • MD5

    88663bea694f3b08f1447fc512d72533

  • SHA1

    35b291b55f4cdc4895168216149d1f5fd720ce1f

  • SHA256

    4f11b168d43ff3b13bbda7cf920cd8be3c8176ad06ddad242ef7fb5de59b2400

  • SHA512

    d882e7f4fd7e3f897f78a8370776523ee7cb7ed1a7c21c227ee3b02beb48e897ba3c6ffc21bfb3869906154439d89e152c7eca1c00c5a12d9b10b16149eab0c9

  • SSDEEP

    384:8onA4ywu52pY/hGztvukeKXXTukwNmwfdgSLIWQQ/U4cR1LeeIYECdG55LkuxOkj:B1EatWkek7+P+S1k90t

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\88663bea694f3b08f1447fc512d72533.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1032

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c9e99fef9ab1f0c82963c20f7d1d456

    SHA1

    84528313a887d6c53835cb15726e8b81d00e38cd

    SHA256

    a93a74d2f0289b6730b7bcc5317a57e536fdf3d3b8704e02631ca8b4cbece442

    SHA512

    f92c198e10f1acc7b830124e3940e466a03ec76d2ec05353d7efd079a59c48fbc83f77c7a383ead44f23a2d9ce5bbf7cf28f162d82fe6dfcfcb95ba898863e74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aadb8f48fe205a92a41ee15727feede9

    SHA1

    b35f10fe534c6cc053af6c97d82483ce861e4caa

    SHA256

    b7604bd7ea86b547c94869429485ac65110597c7946ccaa500c26d533fbcd888

    SHA512

    e98543c1ccb006281c289b48f85bf3d27a7faf46035ce32ac9c5576e835bb0cca9cfe665f64a77aeb4fdc533611c9f4e23717013bdce4df07063cb0530fd17f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6956a7216f4d8d0da2348831bd07627a

    SHA1

    8eb08d6838ffc7b605fa76486a09dc1baebd2d6a

    SHA256

    ffd3cbbe685276a2dd2d37b0243cf9e28e0d635ceef5d7f1c62ad1a5322973d6

    SHA512

    52ef146879d21e4662a770a92e89ab090cbd97abed2767c4ad6d8b6d5395d7d5a2f24db9256e32fcc44dce37827f4799bb1e21f678246e11fed163bf3176b7c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4df50cfed39059a4ee2adb202dadafa7

    SHA1

    11755426ac1f48124cce3b1552891df077961558

    SHA256

    dedf71f204765a8a06e19012ce7ea69676ad6b0fa3d54c202544c43e735d6623

    SHA512

    94c7fc2a7526fd84777997698e2fa3ff031c10c759d42475f9de428f9ade4fc49c2b1f5eb689325683f974309818d7d88df394dcd560c50cfe0633e85d1670e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6153a52df6caedb254a1005ed930078c

    SHA1

    838163c6b712117707b0e546b3f35ad28f725aa7

    SHA256

    82ea0ecd12f69199cac6e5b10f4da92f32e83a2a49a20c79413dff7524442ad5

    SHA512

    49083186e18a9cfd97f0c00be2da64891d62f9cbdc36139b1b33dd96e174aada26cb5f3a61de5a8d9f521361f871b22465437b59f45ce00028ee8ee9381a243e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ef0095b359bb14631590895b4d8ef2a

    SHA1

    aef4989c26b8279e0dfaf56024b336dc425d57b5

    SHA256

    e7a17b64bad8d5555aa2a2786208c8e6b0d16087aa50ebe868f3446b8b537be2

    SHA512

    8e573252a511dae92ef1760778389e5fa0c140ceb2d96e6dbeda3b80624353f538210293b719259921a0d8b49ebd529d02cedfa718c3f370b928cb3e078c3aee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c9b1960c1ea6e7ff6a39dd476750add

    SHA1

    b9014e9e6b43f8d6cf400212dac1be36b59882ac

    SHA256

    2a9d9bee18f5a554ab4d9ac4cee634d40508a7e8709f81bfa71adea9f13cee8a

    SHA512

    1d154a95a3c48395ba9dc5f33c3e2c7c281f6cf984a820a3d1e34edcea08f69a12c040a9197a94aebb39a5f4cf03bba7b499d31aada102ea01d5bec9e9cfa590

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6429342a6cfc1b902411a154860d1a36

    SHA1

    d72042051860e9e1c4438f806ef90f6e65ee769b

    SHA256

    411de881225b1a0403a322b285d07748db30ef11a16f6418a0ae8654d9635b52

    SHA512

    60d8dccd75a3a99e3368b71396767551f55b00a2b80c78c43124cc42ed1e2af6fec6126f18db628e67a46ca5015c024c9e6c4c0f8c5a6a8a88c22b61608ece95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77b08c0964565467a89ffb99c0423a32

    SHA1

    f4be12b8c5afc48768f0a890395e7c8f7fab2051

    SHA256

    3cb6e80995960b63c3c193465247a5136aa7c538f00fdfec115fe6f69e713020

    SHA512

    1759b9cba47fcb7776236e28ec29878587ebf7f5a4f47b710c302a71ca495d4789b6c28863285304984778f3b7e7eeaeaed6c87fca78a1018e163cc69bd8fda1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c433277db5faf93dd43ff55926522f7e

    SHA1

    1ce02934ba717dc098687191a0ec9a9b1dc442e8

    SHA256

    febb0d9c9297b3fe4f03aac4fc521b92c124c8bd0435b20c402a6674bcc4083f

    SHA512

    8fb2e6ed48022c434eef268f862bb5f2eff9981359b67521ed79e510289cbfd6d32927fe3ddc23be30fc73cb4e1e244944150e073762f5589fa30bfb0d7d118d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6bf60e3d19c120cd348ae4f74625d78

    SHA1

    0a29f2dc155cafa5492a8a3d313714a05d5c4143

    SHA256

    6498b363c4b2049eb4593f243a814cd5c13cc04feff221863666fd0364dd3381

    SHA512

    b24ba9058dfe3f3e12afa37de82e643c2f1d43d56f23fec692bd2515c0c9fd66f5d3a9080b4dbd5cffa98b78b443bd2797a790149ac858eeb5153e16b50cf662

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2eac682a0b52c37ccf72cb45d454be8

    SHA1

    cb16637e8681b5dad7ba70e23840e7df3379aad1

    SHA256

    e89f985abf38094b7bc12bc0801197103cf5c01e7196e712e12fea28ec303a6f

    SHA512

    04d40cb63a6556837c2f6793d7056cf347d6170ff149f356dd79978019feb95d4d0dd151af6301dfcb05f625bc339f865e7ff9f0af9a7444b331f8fec3a1b4f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0252f613a524a8ae5f83fc980fae6cae

    SHA1

    c06949e3bab5da670859736d7070e754a9adfe97

    SHA256

    e0e30780c0f7ddc750514e0f6081eb236f8b54ce6cb2cae5dc0ae6d3e561afa5

    SHA512

    7332a9411607049bc1b52d2f1867b4c9a21e1f8116fceed75e7cdc86fc9db29df7a16d6b1c2d707dd59ead4e713b0ab14c54ab4b9f326175512c73141df99265

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9ad9a77efe5a7280ff5f9fc80ac5559

    SHA1

    c5b16665c4a7193f3f90a1848cd2202da904ff58

    SHA256

    bbcbf8bc406d9c433586a4f3e0e399ee9191cbb79ca23f168ee0cc3f2c015830

    SHA512

    b354b7875f601c3582b55213a566309d08daacac626f449df4740e2241c47a83a061c4be05f6c8fd2139bc174b2ddca58433f0be47a115f893f54934dd8cb7d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    794f6bb3a1ba371a4dc12c3ff12be105

    SHA1

    7853da3975d3ddc416746656d0af9b6751dc9413

    SHA256

    108d5e5a5ece1440e30e42e1000594dcf84c8f4562fb47439b65b212f35a541b

    SHA512

    c7eaa10025edc3e91d9138c7a34a03cdd423fe51c06ed4e66814edaa74002fa8f473b9df06d170309cb1775915a0888967154d15100b851a372f342933ae5e59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    762b4eeabc2069c1c89ed395305e5617

    SHA1

    d6419e6bac242a3271afc1c3b372f09a3cc84595

    SHA256

    fd2db7888f665fc04a50c5bf5643cde24c474dbcf3d5a96a6fbac3d94c8ba7de

    SHA512

    7b3df54115ed7a8387803e05d3e1125c733fb04a9e53d5804239c74c173ee020f0c062582b83bc41324b7d02347dba744a45f374d92345d6a07d2af1e08e3c4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ba2b182764454fda80439726e7df978

    SHA1

    2e8cc6f3dde583eca3ecf342ba6ad4cbd80eecba

    SHA256

    3529e29c436123062fba85112c291deb478cd5c6709f50c703f7b0e9271e406e

    SHA512

    4dc81d11e01017878f97887668605428a5700b9dfe45ca8b9088173dcda7adbb86dc8fb278c10cc94dc07d39e9bab8c65d050bfdaac8982abd3d23ede2d1a556

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11c5653bb0a44a96c3634fd20d8fbb9c

    SHA1

    f57a7413e54fe8e30adc2a25332c2f4bcadc9cf3

    SHA256

    bba275a06f9b1149ff1c0f95663768598a765569d73509404e749b34afc1e52b

    SHA512

    1f78e0e1167660cf0c01c8c49e57375482926cffbb94326020c0ec1d344a426c1354112a9e545cfbfd66838bea138db721699bff24cc1eea8c980ee3625390ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aba88f99355cc7837f5bf5f615764dcc

    SHA1

    8375dcd2f598668a9b27d22b0af5e5f21f3a2738

    SHA256

    60935adf72b508353c5de05b9e3ae87bf3b8e0852dff0a657b621eabe9aa8ecf

    SHA512

    dec963713a98984c19210792b0424a1def8346e0973b7a4ee81425706454b7f076882bf9ae903ac96a9b45212409c0514e6c8c1760ec154694b85faf788f7122

  • C:\Users\Admin\AppData\Local\Temp\Cab583F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar58E0.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06