Analysis

  • max time kernel
    121s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 13:00

General

  • Target

    95340c06a1bdfee3c192ab413c9077a3.html

  • Size

    1KB

  • MD5

    95340c06a1bdfee3c192ab413c9077a3

  • SHA1

    ca19e83f2805dfe099986c7a4c5980bf542439ae

  • SHA256

    610eaa88a19453a818c3ca9621304414571767b0b80a92dd4de7b75eaa0b0599

  • SHA512

    12bf3533b0320accbdde37264546c39e70b6577b03ac59f83ad5bf618d835d3380cdcc805fb3f17b08c8d5742a70d5d21cfed2a17ca728e7e3872c70c42a19c0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\95340c06a1bdfee3c192ab413c9077a3.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3060
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3060 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2016

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27fc18b714926e62b4a3d9ad1de86544

    SHA1

    164dc569e26221f6f4b22efb6aee00b0311d1c12

    SHA256

    92e5ba244a4db90a4c7ec6a9303df1da141ebeea04bf46c65754a607303a4967

    SHA512

    33efbb586ec0d41c672b056afd59d4d9185495200892fc17ca2e83208ff7e0f3c9a5758c4c6fc3ba6e91100d41564ebab1b1a6922ac94ff10775c1d196200589

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98dd93463d49968d505dce05571ee5f5

    SHA1

    80f4141fc72893ccb8d6a45940ed2096e6a9a331

    SHA256

    8cfcc999a2fa54367bc46d2634721fd3a2fac8aa4262d2d7e112efa7c080e9c7

    SHA512

    3c1e9bd7066702a3fd9ed43847ed93c5a99e51a845a838a91aeda44ec2037c9499f5df9c9e5555034f1a072137a9bf6b3eca49bc28214d5d5881e298f036fc7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb9e024ace3eed64708f8dc96f8ecbf2

    SHA1

    f74cb41fbc0104f9dfbea595f2a6d16939f91dca

    SHA256

    2e9d38fc206044ffe7a65ffbac3985a577877b5cda9e5f4a6d66a7247e00c8db

    SHA512

    46942f30a34370abb1c219952b3a60922e592f5ef1843ef4b0cb89313785effb7b809a3d5e7c1d26cdba543313fcec0c3c5958bacafe1aadc2ecbdb2a3a66c51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b19d9f38aaf66855a8d7e86f75b3499

    SHA1

    d4c428b7e3419bb1892182469fd85f3ba0de1c75

    SHA256

    cbfc4e323860d230a52ac9193a4750590581c527eea63716474b66db3e284a17

    SHA512

    83a00ace4ee83f1be6829184397be8bd8259b771f70997a85ae2b2a6b6a05dbf1bca17b42dc9ff3fb2586cb98c74a1c03857a257b79d8127ba9a3871626afaeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84555b8e1b5b02e8d6d6071e2d54f9c5

    SHA1

    ca346030c7f5c7b049718f13ecca20d18a37c537

    SHA256

    312bec776b9401d2e61f96792c9db7034a6f9746cc2bdce113ec2c15f01bb952

    SHA512

    6c541d660852f969d9c14787bcb9173a96f3d07e35fea7886fd15cfe68402ccff8cc6b11460c3f65a6ffa51a52850a6aaa5acef86fa84dad008f9440646b6723

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d6f43f78ff76ea4b235ec73f18c3e32

    SHA1

    2ac2459a30709d77bb52fc41f241bbbbee26fd71

    SHA256

    f30e7bad11aa6c02145a18110bc341cbb725db231356718c65054d6eec01c323

    SHA512

    a03bd8c7f6e6501735586f10fbc70bf56c50d036c9cd9267db8ebaf706c1812ba8171eb9ff4fcbb8d2ada030faa46e4dd4ae83b68e1cba2b8eca5411c1d3b1d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfd5219a57772e00d9cf8aa6500ca59e

    SHA1

    ebb5ea7a8a23eb8ceffe58eacd3a7e6f6db3c7cd

    SHA256

    71df1068fcf8bd29421c7d5ee97fa7939a39607d2f5af605dd4dd8b5b4c18ccf

    SHA512

    7fd336fe66fece85240751dfb777afdb716162347ecd1d33c6e6608067d8bc72fb2ee462639d2945a7b22f960b8b1c376ee98ac64acb33377535f7871843bf48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d30669465e90408313d1b50442125d98

    SHA1

    ad066b4c4a84363bb0eb42ebea863347c727f741

    SHA256

    efdeeb69815d3eaa815e28224431fe2b1d4c600dca39f4c81438a45ec6f01dcd

    SHA512

    fcfc4a119ae3381690b24db27de1552f2633d031e119ea851769c99ea6e3672e852d3c70d38bda7dc6ed1746003d6d23b88dbced8691d24061a12f7fccc1b016

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a868f9b62979965a93120a2e8aaa996c

    SHA1

    40a8f62121a3dc4341af264b24f93ddad5ba6dbd

    SHA256

    b9f5640f806ea035f33eb0761d4424e3887d5c68dca2275f4fdb0bc9c7c749ab

    SHA512

    9ece3a1dd89ae1881c8f767c1244cd5ce205cb2e80a36fa8ccdb1f49dac0b0744fd15a63378e85534de1afdc8a05e85c0af8e7655e2a7b73fffbb1154a217377

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    624ece72b4c88e0a498cde94be92a511

    SHA1

    eb9d7ba221a11407c2137581be5f02b8246278f9

    SHA256

    51be5088f2abd4a797424f6bb1272e4026fc62853b12c93fbdfbdc17e035922c

    SHA512

    4677b9e63987d4185432c5fd4a91f88232907d733bc7bd1f0cfdfbc12c496e0a572aa747e7c2f8762531b9503ac154b4e50c4fe17ca255b3184922a8a39f47d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9b8060975cc51ca431c4844a935adec

    SHA1

    44c2e9f27aa3dd1637657c2b1d498f2ba86158d5

    SHA256

    db0072c29a051726d4bfbd7ae1e87c861c0628480701ad388792bfd4a52921b2

    SHA512

    11533d81ebf78559ffefa1496ca59f194454483c815812ea8c96f309426e7e8bb96dedf55d1f13d45222506eefb5b864b2759596b89e7c8cd8f6bd2408fbb389

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04f89aaf4259386753c2c4f0522dc34a

    SHA1

    9dae5955c995cafb3c71d007b19702cc30de6d99

    SHA256

    409867da18064e52e970bcdec6761d2a19e811a762fb4656eb630b719256b2fe

    SHA512

    f6a13cba72148b69c5f2dc894fdede8a6068b09aa3a0afc5952920e7ab032370e72cdbb0bb6ec18fb3f05dac1277ed71dd104216408daad127148255f88c0aa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38da287da15b377b8b5bbde0e754b7be

    SHA1

    33068a8805e67bf26a6cb29f2feef0548eaccfef

    SHA256

    074cde91403109867fd24ebadf3a38a4e04bcc4774db5060129ec207bb163aa9

    SHA512

    eb4918875999294fa795c515b5856c4edd370a68de12596a5efad0b8c3b906c9dc00c6647c9f2541a33c5c636c2074fa5539ef360bf015514e99e2b7229a7c82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f1866672e6a995e7fb2ab941eb1c78a

    SHA1

    0494af0f72a0e7e88d5937307a3cb3325255b973

    SHA256

    3f81eab916f09b5818a849854950a1c04fd1640d2972442462c9353b394d58a8

    SHA512

    da858623448846ff05645f303cdd58f205519243a3dc1729122a201b5564afe9832a42b23c7fcc82e4a392846f652457649714cd05b1a1e5db71ee729c89a7f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27b67dda53885859fa72a41bd8e6f121

    SHA1

    be133ae3ef5d34e57f65af89597cfed5d46cbdb6

    SHA256

    3e39c1f2c69306ab4f61b6275e830b115c59fae09eae8f3e5c510f18b047d5fb

    SHA512

    de1b424445966e74df1fd9c7631db96afd7b320de83d78f78f95912db4c507223216af6c2f65c2ff2caf7d3b52f32b0abf71c32075aec93a8512e45d26b45d5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4958e62057bf5efba73ce5f762ca7424

    SHA1

    ccd47e7dd09bc7c768797ec039700e2ae868daf2

    SHA256

    fd769b55bd55e72b7a825a5e476e907a3d03c409960789e9c37bb2b1ef701cd4

    SHA512

    afe49b0f4a3bca168e89403e4299dc09fa912222e3bb07f241df4745877c9886f42b315bf3a53e78dce8d0f7e009b9c0ee25a7d2510f7ffbd86beda67db54ff4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e5c8d17b7d744d3181978deba5406a1

    SHA1

    43942c3d9acc415350add6ea88a05326b6426524

    SHA256

    dd8574c6ecfe19184a559d7d0e9601b6c2989aad34f7d70b736bdb27fecce383

    SHA512

    e431ddadbafa2682aac24344ffac7758a23577ba045b5a2d450f6ee9a4dfd6978319a0da1f43bf94c5ba2b7fe7618908f5daef0d2637e38672ec8729c29beb28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06a6d968693d56afeddbb939b4815935

    SHA1

    9345146fbc0987a9f9fe5776a71b2c143b2c71c9

    SHA256

    71216127f4a6541b5ca8042dd625fbf30c9f35cc7b84e478da989319dde22963

    SHA512

    f394a5a1b4f3fae2f3bf72c8b0aa2dbcfd7ba2a3a0db026455814869917a73b024a9014756af336903f42bf12c8d3f9ad6abad522d5f4f089a29442d97e6f197

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea6563c9a1cdc889351008a0acea6cda

    SHA1

    ef9c83a33fb9e64ad240fdb113c91a7835cf8985

    SHA256

    21b2430846b993c5c7a101a649debb79ff5e69f8d2789796da1f7d47e4dfc292

    SHA512

    1c36614eaad563f5a2d40f5b6e9243322646c331af2cb2698560169d1e37c3468cdbc6bfed1b0bdd0abf8e1f5468483a04e0b8b594202875b342dd376951a863

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    185eef8009c1110ad29fe6dad4390fad

    SHA1

    eb940e3181bc29810c9d054521500c081b444732

    SHA256

    d39a628a3c93ebcb55f80b31e2663a09aa85cb9b6bae93efacbfb532a3880f85

    SHA512

    0fee818a4a91b4f9cc0eab995606586ba86499c87e5ade33267c2819d13e6aa0942d371130e7b459863c073c16d0a616430344a072b0e0c2956eb84ac19b591b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc5d53757e1eaeb86bb8585309e2e68b

    SHA1

    9e3c4781b80543df6b2120f1f3684ce1e21edeed

    SHA256

    9a10257d72aaf04a979dd5a2b61e62e284b04839422a003b5d1963f3f08906ef

    SHA512

    6cca9d82496972d40cb4e561b793cf26e38ccccc0112e546af9e583bf1e3078d4194e2ab9a8afe13c43008398c3732fa3995e5933e8f2dd210bbb6fad36eab31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1dc394e3b01a47b68da935591fbbd666

    SHA1

    cd1c844b60a5e2093a6bb3002bb5a98e781f62c1

    SHA256

    06fb780f86d64d1b286240f02d7368a8e678838e24186ac43f0a84392d1753e9

    SHA512

    9c075f35b987895333d65b0ed65ac4f741d71a0804585a94cdc0624e4fc2b13981a4f27cfd861ff01e0085de5bccd56e7c9f032cc14e914fc3cb138afe116435

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b37d972602080fa96a3218a9d0453cfd

    SHA1

    c28d7b5f6bd5fb1bd0becdbea94fc5e9abd848b0

    SHA256

    f10bd9409234c8cd99e0d193283f2297bd5db2ab694c767e19c7a9a37c9ee096

    SHA512

    c27cecb3fb77cc61761573a6ca13e545e46093b3fbf08e3356e3619dcf1d1917a92dac54c589a07e15757ee7bb285885b99e5c0599d894bbf2c45b7cbed888ad

  • C:\Users\Admin\AppData\Local\Temp\Cab7D89.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7E1A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06