Analysis

  • max time kernel
    122s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 13:06

General

  • Target

    97dda29f9920bc57b6d08a7601ff2043.html

  • Size

    601B

  • MD5

    97dda29f9920bc57b6d08a7601ff2043

  • SHA1

    cd36fa9aeb4829f2301ec3311151237bf2a5b158

  • SHA256

    9a565f73da9a91f2c78dc5fdc7a7966861ef8dd126acc4625533c2e0f51c28fc

  • SHA512

    06e2695990613afb19383402a05f3d71a6c02e894c59e7aa9df0356c887f440580634d2c791cf376ce0f1d724351d61576e5aae2860dac65d574f5bc99332f3a

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\97dda29f9920bc57b6d08a7601ff2043.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2500
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2500 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2676

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2327330ff22b192da5814f7b0f149ae4

    SHA1

    95e6370614586efee07414fca896b8cdc7a59ff5

    SHA256

    16cceb53d9fa2b2f2bdda2ffd2e6c1a883efacd29c40578f2657defda7b9b191

    SHA512

    6328c090460ca60909ab8ed40d81b54d9a31902bf943f2f64579bae9a6275c8cece9a0613d2f21b76d50ce823283d2eacda022ae83b205edc954d2ec5ac5bdd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdd78ebc2293e9d8b40595db524c5ce5

    SHA1

    773b1006e16060fa72d8be0900084eeafa535626

    SHA256

    fbcbc76c4675876d72ea3f1a5138f52c551614920154b463a11b18eb71f0eef4

    SHA512

    5d67862b9340cec8464d5c1c8d95ca2f0dfc5ca6410eefe09b321070ef19e0db670dcb68ef377cd9a99caa62927ff497d30bf8f45817b739fba22161188fa19b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97a0f5617157ab5bac3dd4ac6cf8aca7

    SHA1

    879d5ed656eed4da6a0b13cdc75c37f9616e6a2e

    SHA256

    4c384056d65cb0c05e6890bf10b8d4d70cfa68e4bb375cda96f2a3f6f0d1ed1b

    SHA512

    5a2f2eb147f93a2046b4449d9d6f0cea5cf7b999ec78b44404107bfa9be20a9a843342f5ff0ba1680d95932d6c615f976b4cbfd94198f76802c150032ff92970

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c690b60c7d41e9f444985b6e2e6363a0

    SHA1

    9c1dbb12fcf2fd3f44d5eed5bb7e4f9e07b2861d

    SHA256

    45b2f7578d01cf67bd85696733bb8ea114c546a053df8a1b660842b545656b48

    SHA512

    048203075001833bbb4044d4f862f0421fe867bbc1a0884cf314baab2ecc65edd64a3bac58ab23f82a15cd9f07f6599ef11e04fad41f928ff9ea703553fe3417

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e8d11310ef0788fda71e82995cce9d9

    SHA1

    747b3aeab12bf2a7692e5765e51242f8f079b61f

    SHA256

    46d2a082e0e614352e1c8f923a77c6a233659c3bcb14c5d3f8f856c92c03a2f2

    SHA512

    366b57e128b579122c87bed2ce43e576770c782da04de4812e5aa35e4ae7d3b332495c117ff1d7534cf2a75414179119e0f0bd31e047f90281fb3ea0f79b41ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    865ea399fc828dc07c5e2215b3f59105

    SHA1

    7ed2d3e193801e2eaf22bf0007c9a2f5e96a3294

    SHA256

    1085004c256ecbcfb377794e640db20c92272f14eae6966dd1473f024a2d6c56

    SHA512

    1eb03a77ea9e800213f6227bfa0570a0bbb1c58d8c6c698a56caee2e1d7611ecdd306f5706f4605955c4b2579bcfd4c546ffc4ff469033399e2516d0d09dcfd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    952e1464fca2d9b5bd6b7c39063f9b5b

    SHA1

    88ce9dc6ea14f783d2b280a6b145e89fb11207d5

    SHA256

    c3beb17a2d92183b35a6f072c41c158a518e6a9ac82872143dfc67843a048ffc

    SHA512

    f46e6d56c2da6763f0a60162f6b9c23d1c8db7ef5473693904c3079e9e184e5466f53b2543959f177c7f65cdcb80e25993f22f4e8a5c0950c557e880d6ffe0e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    581f700c45bda2b68f6f56affff8e0d3

    SHA1

    f533ec9a187e347117d91a3e8ea87c0c86d444d0

    SHA256

    b0cb9978764d8ee9796b005bf0d9e456b4879398f11c58d0b6b892c523d860a9

    SHA512

    079397a062eab5c2af3ae6cb76156af0790e9a8abc2c95dd203f1d46924f3aadb0368a8f854d193650433d3e11639029702fb608c35297251063c81ba9ec27e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33f0835f71e944f9e61afd230f18819b

    SHA1

    d45dfb827cfa85452a145cd1ca5412ce98ca9d3d

    SHA256

    3f5d7b6d3922f73e24411130ac703945172311acf82993db50c2b1740cb0bda4

    SHA512

    fc5f07557c66e1119536d1c49fe426435e2aeb562fa5064a86d027c4c81b9a790dfc9216d391838a12c7cea3df4c783f1aaf136528cb5bf96219319d1ea8e33f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    149aee0f33c0d323ff05de8e47868f1f

    SHA1

    6601fc2f1eadc1e42a10f5455f855bbea644dfe5

    SHA256

    6b9fd9992dd762ce42774f5c214e20bbb3e01b3ea2fa4d3179e96cec8adafce6

    SHA512

    f14f684ddc78d312a135a53080ed5083b98bc51b9fea5d9fc2abcded452161896462b25eeef6bab5918407866a71fbf5e665bd7a20b60f801cce520e7c1fd4be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8007e355b5f3b5a339629554778ee59

    SHA1

    c30dabef7331a67fbef7a65efb7e44e02e09a681

    SHA256

    979f1d1b0577cb48a4d79d2b9905f55fd1e409329c54defdb1b5555f3345bf83

    SHA512

    62e2b70805baa9fb143e3ff6255198c3de20c6eb3c4823fe7e6288ac4809cfa45a89b53f5c1de7f5b68858c0da2646d745df406e84d49bad9bb999a30f2014e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa3bb8b4b49a35ddc83a763ffd777531

    SHA1

    69c54b6ae2cd1e9b094104739aec5975025d95a3

    SHA256

    dfd9f572e68392560b6d5a66084c36f9c6719792d7899f00fc6b57739007e04f

    SHA512

    d44046f38733db953d8701736964269d9518b86a30af2603d77bcdf702f50f62d5f1d5c8ddec8cb8df9e144a00c3228769b40cb6d535f39cd94be66b1b31de4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9198c0113ba4b21dc2c80f50f92e1cf

    SHA1

    66d9858a8cf64e6c6ec04955d3aa6fb104948897

    SHA256

    2276c270863fd307c061d6359fb245fffd744082d6f8e21198c884680548bea7

    SHA512

    28dfe3f7c8640395e849362422fac04f474e5d0e56ee95f30f066bd282006e5d88d88eedb3a92f195267800748a5c7f5dd00d28453bcdb9693a4c148e7ee1afe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c29f1a49a4d278f86e25ffa833e1c78b

    SHA1

    9c12857c4f0a887381b569570b81b8f309def77a

    SHA256

    88e720973623566977f6f9f1c15e75bd9d2246ec748ff8c51b78322308aaef56

    SHA512

    409c0288a05a515a0722c0431eec323f42f5b792cebddbf2a7cf5b67af4e37284df09143756a10520e547309f017bac3a3ab221721c47f59c8ebdb7d9981d766

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0b4d3157ae164cf0ced308a9af4a1b6

    SHA1

    d48e87e36b66464616737ff0cb91b575225959bd

    SHA256

    6f187b944148a63f83dc15b7eb7274682b7497bd3240430023c8e78789a26802

    SHA512

    c66f67b33dd5cd8af12d625799204542daafeda40140a2a40858f47d99a98ca6e3de2fc2dd262297d48482b5cb3e1bbe44eda5cc4668a3fad0156e5cc40edc1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4752500b4e0869c195ec231e8d3071a4

    SHA1

    3e8620fdb96bd3f68d72c2cd468a7a7caee03666

    SHA256

    9bbfb29cbcf2373c54804508ca63a6749d01a20fd1ee4888cd057da7f2a3c242

    SHA512

    c70bd122cfa2717b3adb55f14922261e4d230467f9b22e35a15104b2c6eccde042f6278f706fe74edce50867053ae574ca3f60b7bbee1cef4aca9004ecca34fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f880e80642dee134d5ff054d86232aec

    SHA1

    49f6f1e8c6b89a0b79f307ca5661a33ee7a79f32

    SHA256

    16e70787841566c9c34536f20bc284bf52f0662f4a914e705da9691e8a097f89

    SHA512

    ff9e0ec72ab4bcd382ac32f49a978896b1945ff80c5ce4599879fc63a4f638872116b92acc6591722d9430940a2784c35afdcbf11be92224513577c5355719b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df131482e767bdc868b490d9498f103a

    SHA1

    5e912c3ec48d8b78c87a903fd04f85286fe22058

    SHA256

    0c8fb6cce7d3341916dd4f3e9f8a5fd9807acd0f44c28611c29d04e352018416

    SHA512

    3eb920c49183c43e71ab8000badf683625c4a80689d0c4204c8da13f71d03505440f0a49dabfb96c6aac7ae3e80aa981ca680019d8d980b8ed558e391943384a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9af3c73c4e08a6bba8f5220cdf00ef5e

    SHA1

    2db53a744fc655773c6a29349ec98c49ea97948b

    SHA256

    f3ed73c61a538ec19e85e9ec7a348ed42ae035dfe9655289345e19e731c35075

    SHA512

    7e0d19b4365fcc55b9bdd0f1d66213ca3b8895f33528168794632fe3e1d43275d0c78d632a8400dfb870293622dd2e8e29d148d7651117a7fcd206ce70c3aec6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8032c627e3751fe61621093fb3a574da

    SHA1

    251dfc3676e06a4a98bed754ab9afa314073995f

    SHA256

    fb8bba5c01733c1688203d6481a6cc42091412a6c10f331cec485a0169c9d62c

    SHA512

    4d0a4cbdacfbd07ca8f1e5fb0b51a1cf46da2cb53d765da9d3d3e37095de7cece9d67e15b8f73562d3ec6b9625f2a137421c7982cab02f53ee75c5ece6488bcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe55eb64bdf36d7bd6e464fc4668acb2

    SHA1

    cc05475e5ccf66e9e21a72bd4170bbba39012122

    SHA256

    2281aafa63568511af6105274d207f093821cfa98e37674050429774b0531f83

    SHA512

    602295b0234a33f116f242bd1254ff457aea58bb7be6b0ec4e198c6972993494177b24550259d00f1d11453ddbcaf876bd8b502a6b3798bf0a9c6d65c73fcae9

  • C:\Users\Admin\AppData\Local\Temp\Cab4378.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4436.tmp

    Filesize

    91KB

    MD5

    62fb6771959d6b061ef7a4bee3459b89

    SHA1

    d918ff7bb088f92f5e93377fbd82de86afefbe95

    SHA256

    fd9f3da55ef6c09f3f3c9eb272e1477489887e98bd7835e4a0196b131f05a334

    SHA512

    6ae8d4b85c5bb6d7e368ee806000ce7570e6b80cf1433856d92f001263da8700b279f5f5da8c4aefc41cfe75c332935bae313b9e00edeb703629d2015a42b32d