Analysis

  • max time kernel
    122s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 13:01

General

  • Target

    95a55e7792af7753552f02cadfdb0066.html

  • Size

    979B

  • MD5

    95a55e7792af7753552f02cadfdb0066

  • SHA1

    67a517945e84f1a4b053ef96b0f703c9b80f0091

  • SHA256

    3625fb745a03d96f9e5319756cf3a213912d5b4d23acfe965cc0575f492dc6df

  • SHA512

    680fd717b84aa72cfb6da0c7351d9bc4e1d56f0cc7887cda2d98aa93f80c2dcead25debb788c6188a41dcaf08111bd6ed9477878532a8c7cfde1513511749e02

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\95a55e7792af7753552f02cadfdb0066.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1140
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1140 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2808

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f447b09c32ee4f722c31463f580a169

    SHA1

    7cf9022c9fee19e64b090a44826cc6fcb3d2b0f9

    SHA256

    136e7887015fb811613fd2569d798b37d4558e47535d968cd6dd6483f23f66fd

    SHA512

    28766ee43bd0d5ad937bca0ac3e0ef9a0448194dc8e4b1080e1480da365258bb3830352b2da7513bafaf6313b05af5ed2ed8e9ead420c33cdcd43916643f5c33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69549a9b0cacd3cb20436f65e6c15ed1

    SHA1

    79e98998607347ff3bc4eeb96001f7d962b8dc29

    SHA256

    f31e074466e104a04e1bebc91be06b5407dac1c5408df0784a7388cc40bf422a

    SHA512

    289c538e376dcdbd8ea10a20cf272b8e0e734d18c66b435ac277e5b05fcd32af725f75970196f371a70fb45edd2687aed0da892a07aa6e0316ae1b7f2ef66774

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8068135241d197436ddcc5287329bbed

    SHA1

    fc41b88fbfce36d0f54ad3b5e8e1fc8ec517e9d5

    SHA256

    3f04764d07ab5be239dcdda1eb00cb5c125e66fe32259e9e89334760baecdfad

    SHA512

    b23223a4972252f2c2280a737586bf45fd5142031f1fb51440cb4d6e760b6995294b1cf25cf3929ff323fded5ac69a966a1eb21da089c4c742ecc692bcb5a868

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfe45e2abfafb975ea038e5750394db9

    SHA1

    3d88b49cec2df88a63589e9402a23f393703fc97

    SHA256

    167f4fefa2a4f74276bd6daa8c6bb935053433c13bd2acb671246f11052d3300

    SHA512

    57b7de0824484ab17e86a331b568179b1a15cc9bcb86d11017b4bbc6f94ec73235d614d992e2f9a3f9e7b8d872cda7e83e96a985bfc53cebfc084f3d40b39db4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfc00c6da21e4756a6cac52366bd5006

    SHA1

    5ca7700e46edbf7de5f9d181bf06ff1854c78409

    SHA256

    2ceeac37d2c1f08f4c086448424301c4e3a0688acc87cec45407601e50c5efbe

    SHA512

    0be632774824a23b5b6e5122ea02467bc4b0dbe724645596c02958be7d9350bef0b4d59031bbd858b33850c709408483fe9c867433f929f82dd8237d4ba5a8a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6d610fcc97412c6f4bdb708781ea93d

    SHA1

    7940e87b9a41a5a773c2e41fe778127609314444

    SHA256

    94935b49fdcbdf51d742ca179cac35d9e62a68bb3ba7bee142812037a637ad9f

    SHA512

    2e88fbc08e58bbaf72d2d5b15847b8dece49de2e913315b73763ce92578d2f0c72bbb848eaa0110e4339e281e90a0c4fad081151e44cd7aeee477d126ada23d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2582a62aca9880e1340f75db49e5660b

    SHA1

    2037e2ed7974c2cbb68b9294622be68bf5b49294

    SHA256

    b71f727c2d40f9508b15377b15e5612aa7d4a6a9620ee014d8e4ff3836174e6d

    SHA512

    42881457aff3f92b016c22c5149e3ec0d2ae9b281094c1e40a7a0cec1100dc643c69be54009cc293d50b7ae434bce1259e9d1c0811873cec4686dabc465700f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf47145d13f4e70b4bd340a0dd56c98c

    SHA1

    4355224b780b8f14082c58c9b568fc0d5aed75bd

    SHA256

    78f91584ff2b4859bd192ecc03b171696184048056f3cb6b9b30ccc249f2d95e

    SHA512

    552f774327b94004da55e8bee9389dd0b0dcc97589deaa412a27483f0ce2cb7cbf0bbc36cc313904fc2500e3d466b481fb7c1fcefe835d23a62cdf2e8d5f7515

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d21e22a67f71b5d9700f5e686c50d309

    SHA1

    3c1f283250613a977127dccca297d88cc1f10b81

    SHA256

    de7f20de6f56a1c3ed2d4542a4c43d3ae0f1d0ddf5dc97f87996a316d6d1614b

    SHA512

    afa68b38938fd66e6bf1527ef057b67370a2a6a84fb4725c5a0e62d28b764b7966bd8afea84d8376be9c491e304da3633c513b62966217f7a740477e055b0956

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e12675128ce9194b6e90646b494d3f50

    SHA1

    287b46f9b2d74989ea92c715eff62160238771f0

    SHA256

    38eb04a9daa14d1e6e229f9fbf9cd0a2828a2473e1dcc03674e656ec9f002d68

    SHA512

    d59cb2dbb95bf58337f4f57fba6caae26fd324ad632c29281c2a4db0a497d4c7103dac4d9c89995079e24c858a914ac20667c8e1ee05b1363adbf3834d6d1b03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c0e11b5465ff853330f72523b3b2f4a

    SHA1

    0a11ce19b6d2887a5fa53ec270275e712a9c7126

    SHA256

    0b222e2c2e9c71c458d8899f46162c76000eba5f064895453f662c41d322fab1

    SHA512

    159127d84716ae019411ea0ce08e8e45e9824e2f79344ef65e537b0689452adbc13a93afdb549065455c492d31edc0a95e9e54648486e94bf001d5fc6581de8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27c261f4b1ea5da64f544c93eddee5f5

    SHA1

    883d5db1dc7fb932a0d27a47500c73a7851122f5

    SHA256

    5e738d1e3f3f349c7c4bf6f43c53f158788da6d7032494f1b54fc43052c4b0f0

    SHA512

    32ba3812e201a79096ecb859a6ec189b38e613c68877032398be9455fcb4dc79bbaf8eaabb46aba13b8d2aca0e3513181507029e8c3fc9148393d389d3b3cf05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    302d1d794b505465a2fd4a3d7cf0a939

    SHA1

    92743785dfb2c0eac4db2614958735584ebe9661

    SHA256

    a3eb2c789ee82065f54ac5a8f9ddf56ca680315688098315babed2abf0393aff

    SHA512

    d03fc5af2f2e308f3b0f48fa8869c6130307a4fd511480042242d9f3e2a625d0f9e0aa05e0cd47a2a020c17d31322284b74274354ebf029909a01fb794e60f2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9613366cf73fc3c30450381c17fcd9f

    SHA1

    6ef90e9cc9b50456ea5183b0770acbff11877b51

    SHA256

    c7e526e9ecb50a1151a30f4733b549217437bb1cd73e760d72f28d6ab0158f83

    SHA512

    15a55ed116f2d38b1c81df83ad8c2e583d183a84291f63795718b08ab46025d9db2e05d3e3b22e4e831007980c4b1697820a9dffe0503d9ba8746b9a10ceffd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a5c9f9171b351070b469492679d9702

    SHA1

    69d48f8a8061625feae7ce05ea610cf514b71e4a

    SHA256

    d280af80a36ebbed29b858555ae6ff34d673342e46baa19ec5907545eb4ad3f2

    SHA512

    119f9b1fa9fdc905ed3c3d5d98b490d107e764194a81fcce95a74b683fbb72734b79e875aeb4792b32cd57b1e2f50d8d65f05eb46583e687d045cd6cccdcc9ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    783ae24206e757b57c6b9ed367cfc993

    SHA1

    11ade05aeb25a86793f637a8683f7d57af2432f3

    SHA256

    ca9796e96411ab28d57f9ebd97a2c1e352c8aca30ca1fe65fa0e489311e7c06e

    SHA512

    e055dcf36e13822cb86b9a09d4243ce266eeacf343607c8fd65ac34d0b20c28438b9dd5d31f175a0dd784ea89f072f57e748732b6082c1e855756e377b33fa23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d950df45df7ec89707dd5a252e19b1b8

    SHA1

    c0e205296bf1dd7a31cd9f048874bbb654adb71a

    SHA256

    c46ecfc4d3917a37aaa2ac63db5da666ee009820d2b4471f616faefb4eae50e8

    SHA512

    f89645f15612e7f69a3d7ccd5b98815d4c1a5631bbb9e0e01a8faa8d72f2381e66a3d6dee60d700a75a6b3fb70e951eec390a6858bda7dcfb30ebdd57fa32bb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e4a55efb2a7605ebe5cc679022d0ed1

    SHA1

    ae58c5a431bc9f6b383f677c544d9d26489652ec

    SHA256

    c638469c2a08d8ec9066b572cd008c7c18e0b50cbcd7b917993156c50d8a2431

    SHA512

    c944843e715a2936ad55c42c5825f2f17a462edaa989a0f21ed3a3fd633c1d30c8bc4c2a119f02aa4d4139196d98290d7fa8e6a962bc2602edca7e3aec4d9f9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c08de81ad52026b84fba4c5e73704805

    SHA1

    2e1a859b27516eca9815034fa08b7fb1b0c511f9

    SHA256

    5a57a012fa0df334ec6f61f01c2ccc433b197b032babc32d6142691aa51f5b40

    SHA512

    90b25b3e0c46d1628ef23528abdc20eacd7ef1d3477f88d43069583a2a05e7a5ba2dfbcb28c21d474b8b97ec51d8baa1814af18dcaf254bed1715b47f7643f3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87fdf89df1a2a21c337d1e483b46b049

    SHA1

    f7f3bdaee0f4b4be08616f3c0ecf4f0a559db8b2

    SHA256

    12088111c235af4438997bfdbbca6aded0bf611f7823bee3abcf038f877c4a60

    SHA512

    cb3e0b6e6a812c051d293279bfc79c7f5abe8872b2acbeb0056d3cfee5f2106d2a97e7cbe07738fc54321a9526133bccc807c28375d2bac33045e2cb467a29a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9375cbb274d7a23ba9b6557b51ca4655

    SHA1

    2bdddb687a2e08f358c11c5eaf4d1c70115af30d

    SHA256

    dfb764ffc52e3bda2c32dd56e7379727219a2bb66f91158458c710b0929164cf

    SHA512

    968eea4d8f0f6984ccb45d33291ce5ba3ff6bf194a99472ddf4081e0708b8bc6af3e93cddf494356690508fbabcc575bcafc843b17b06b3d867272bded7137f1

  • C:\Users\Admin\AppData\Local\Temp\Cab981D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar983F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06