Analysis

  • max time kernel
    119s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 12:53

General

  • Target

    910e39fa3246f5907739829e057bf5a4.html

  • Size

    1KB

  • MD5

    910e39fa3246f5907739829e057bf5a4

  • SHA1

    088e75474e2f9178c42fadaf300e001f448b504a

  • SHA256

    70688e2be2a15826157a37c5d2a971761ff971d7304966311c0db27d424fb764

  • SHA512

    0304b7d31866615c2b0a60bda6c7ff1d593e1c129861d38e30ba817e7ace016235eb57b18fd939025d0499fa5c22c4c4961af0925a16c4be456cedffdac4f6e9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\910e39fa3246f5907739829e057bf5a4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1988
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1988 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2140

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e5c4b74f6061979697d0a81d0d2f2cbd

          SHA1

          67003c509001fbe48161eeb4a4e1c454793f116a

          SHA256

          d4b10c3251a9d26b186855fe050d9347b25e3f4de386aa16779011f21a1cd68c

          SHA512

          994849b0f21f72ca725099ec5c7b9fe76ca37ec5ecdac8afd0cf635abfb84a72ed2ae4dc37640f7b7756f64023ea0d80256cc586d877f72bb157521733133b4f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          819b7c251e7a00cdcd0abf14ae256ef6

          SHA1

          0724679aec9da5bae9aafdcec64cc0e001782687

          SHA256

          29e8e8f11ec024299cea74163150e37caa1b82f258553580d406c027a30bb1fb

          SHA512

          5f1ab6c1db2ef0528435feee21dc4ab7829539f68dbbda4956bfafd0b6de4fd7c523607dd3780a4e0f6b25b47dbd47acbdd6170002e536a57a543790bb9d070b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c973f3e0bc5b59fa83f9d895e5195022

          SHA1

          9d8841d7d8d6f02e535b3c00694a6ae3c6a7400f

          SHA256

          5fd91cfaeb31e8ccee12c8d7816246056fdd279c25284314064b245ff31d9524

          SHA512

          15dba1679e67b8d8ecee39532c45de0656ed72677c031be0773bdba7a0b3d1ecf3140f0b3160c005a572334dfca74d8a1a04a6b844311b3a93e83d32881e5907

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d44a6db4f0134bd85bc910446f9f2f91

          SHA1

          2745686cd41a3035fa2a71a5fda802f51d6c199e

          SHA256

          3f6b4acb34c307652ca2d5abfa0456bf510ce370ab3faa3f9be922519511237c

          SHA512

          ab69ffa6076e9cc1633289ce0fc315c5945ca925eb14ef6a11cb6c812efb8ebd91bd5f00cdc05f685f4fc67929d1f6443bbee71540c946df2c9c539675053c6f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          94c2748e68f0767ab19a44f34b895713

          SHA1

          6c9d9c9a9f89696e40a014b55fe1a63b698171f2

          SHA256

          d22b617c1a03702cfab66470204a5f9518fa4fe4747677e3f4ea11f9c45a5bc8

          SHA512

          674c2b368bdb40efae776fa00afd25cc25290a45b48c7e168418ceecf1e2e29bc5c99a4cd8b2f990e9dbf5d0501a0f058a1452f35fcb8a8d83644d25c64031a5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cbb6b2b2d2836a489c642f41b88673a5

          SHA1

          40d49571c2cc0c7e7afe1176b626f5b0f35bbafb

          SHA256

          effa9b7d9760cb3a521b729624ddbec046dee18cebca2be7db7a83b359624b5f

          SHA512

          11c3eb22c12de84abc745e38406216f8d4370698c80424b94f3959f13cc9ec928cded8be23cb1715de20e3c57c76e9af29a91e5219fc46359fccf1a6d99f0e5a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9c8687c06abc1d6654f819e8849749f1

          SHA1

          77150ea744f1b81fc24f2a136fe22de3f90c2e42

          SHA256

          6623f58106ae0df8bcbb2c7ff5da578ad26432000122324177f290de5b36f684

          SHA512

          8df76796a5e6cba8e0a65ae5853cf1d983ba460a711e1e8c0951fdcaf7f830604959ac4a676fec02ae79025ab7d50e3de1c21ca3b1ebc2983c7eb78a49baf2e5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5ba61d12a1923b823c9bee98a4ce9726

          SHA1

          c3d4302c6675b6bca0cc0e1bd8bee803116a9998

          SHA256

          a48b37573ce2a1cb1306602d422f265f2a829d0ec06fd29bad3c6e88e149c814

          SHA512

          24078b4ce12550fd5b7459a1f54021612f32506b85f946b75bb15046d6539c5067db6a9b3bcd4805676ec30ee12a11279a35799f67e615d106107377cf9a9cf6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fc29bd8bdef85d43f3dd23020af526e4

          SHA1

          f7a082236fe53c9b2bb038e6ece6bb04234359dc

          SHA256

          3301524b56418b3c6b1e10a4b07aa9d75fdf83b607bcad4c5cb16f8667c9bd96

          SHA512

          3c28480981898b35b3dea0e809ceb8ab02efe6b754191db756b805ddee92fd5fa9b12dcb58c0897850b45c9c1112de327e0108607c4d83b2a13afb23a7a07437

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          49ca7565765134bb33ad13acd2a2c566

          SHA1

          f4e67eb1c6f4f8f5243074a9e8009ba89921cc35

          SHA256

          ef3b8cc14fa36510e7d3c0616239280b007f9f4ceffbb60b1b29904d72623453

          SHA512

          09d181273498dbefdc74277f5b5aaa7ede2c2b765a9b6c0e77137f4ff3d43910c7a7dd3698daa052d171962ad7502ea5d29cc6ab52b611d2d8a749cf82fb691d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ea85c690e26a7905f607420b7a0cf5ce

          SHA1

          2ff3bd169688a553a9ca88bd6067711dcc84fe5a

          SHA256

          46b8d484b979531d530fd1a4c830c643702016b405a85dd8fabc6c9df3ac1de3

          SHA512

          65e158b043cb5b64e7204b0585b126caf7a5f1f715df30f6b70c99587d7e0d634def24e593c31faddebfdb9d44dba3126b5255dea9f88e77143cee07cd44a686

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          73c2671e919d3cc270f28f3f55adc6fa

          SHA1

          8524b83dd1173d9836ca588511bf5031f71bf6df

          SHA256

          e7af84ef59a1b5c5346e3d7394927e3d5cf36371d257cd6bf867550fdf9d977b

          SHA512

          b169770236fb9e435509a153a8dba4b7b9ccc8a961e101741d706437528625a746daf0c610b26406c956b43d07237e1323bcbb7f008f16abfaf6d6b1057db695

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2989d136dd08a98b6937488e59b439bc

          SHA1

          82812d5e3f5dbbf722dc59dda1ec5cabe52a53bf

          SHA256

          30fb34d1c13e26a0a0647eec749b311d2920e5ee13535a4e53b86778c09144d6

          SHA512

          27131842a7a7c016bd01728149b02dd6f38fce5741c13afb1bd4adf2fa50780f10f7ed9faee17693734af2a27927631c34bc6593af6c691a06ae9d27f2bf4309

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6bb8030b8021c1deb3617af63089c9c8

          SHA1

          c4d696e1b1c2310d2463a78d343fa5f6097a4dd3

          SHA256

          340e4aba5f42aa7fe7a25a272c11d62dd1780a2905b6784f22fec3a0d5c6bc9e

          SHA512

          c73d796aba83e4ac13b75f5ddd818fffb31e1437fa4b82341bdbdff46cf59a7bb140b7cb04c5bb8014cd175b40663217280204c15052f31e9b620fa6bc25000b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2a88d44e081be41d8d60461a9c2e92e6

          SHA1

          73cd026eb6669f5e9d15e5c0bf19694079beaa9b

          SHA256

          9691b9842d63c6f92c3de80c3e448c6570a29ce2d5155a3391336e9efd6bf678

          SHA512

          be5f12e08c96a02b8f8d043594a71ed383af375fc41f48243116193c225af3b1a3757fa4e9ced6773791423863bd82bfa7853b54ae426bb6983b5a871a5cd344

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fc650ead4446fa9ef78983b9295aa9e4

          SHA1

          f1e50ab0bae0b9bc94aac0e553fd5aa5cfa5c163

          SHA256

          e7192cbe7b04516d6f896e2ace672016ad01a4bc7b5c28f5a2fdf94b9541fcb6

          SHA512

          b1ce3941e2c993ba69b98902923cdf675e7542f32531df470429817706bbb794aebb5410cfa368f24c91b071a4f7cc6722729edc51f7fef34df0823f07dc5468

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          29ed95e68d853452416d7cb86ecc3f0c

          SHA1

          f6398bbec8ede755ea76f7785c28de1cef9ce963

          SHA256

          f87bd6eec339e31d66058dbcd9208220ba6e1ba9de2a0b9a4f836f2a2fb0a103

          SHA512

          e1c604414191045e46e8381a619ff54278a57263881323595fe92b3670086b287f89d4b61683c5d12fcb1ab065105eb3cc4f9b74f2da864bb159c20ce6a35af3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b4f6ebff8f468b9034b5bdaa92d54e79

          SHA1

          965e913ab954ffa588135084715beea1da3350bf

          SHA256

          25408422ff8c2a50ed4d25d4f2d596d6440c63e26c1b0931db747ac12bbf44a9

          SHA512

          0478be4e936808f618b8e3068c6978376bad228df6ef85285ee118383bde04a2304ff9f5081dce9b31b626e672fc7ce4f6b494c473a0a85f0dfddc51e5a71dd9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c54f1da7d341c5532525f6de4ddd5cfc

          SHA1

          d8dbdd3a6333fd78944293d1dd4c46e1f0b49ae9

          SHA256

          19f91d8f19fdd62fa4e4ac86dbde1da680e1083dcc94f6d81fdf586825bff37f

          SHA512

          60dfa7091acfcd5829c2d73ba1c15701af1df4babb6fb215c8548ae7cc2860692d7018315dd727972291d3e9096c0eac8988c0e17bd045acd8c08872e76f7838

        • C:\Users\Admin\AppData\Local\Temp\Cab804A.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar90B1.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06