Analysis

  • max time kernel
    143s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 15:10

General

  • Target

    d301c5450fe5348acf190e2f04920ee6.html

  • Size

    601B

  • MD5

    d301c5450fe5348acf190e2f04920ee6

  • SHA1

    023d1c13626b84e44d36ae5fdfdf0f2e330c71d4

  • SHA256

    061b6c719125c3dae802a36ae664167cccbd4f0b72d33796701dbc29f19a4896

  • SHA512

    14339bb8d70b50a84dd8c75dd95af62916c46e925a052ebb5ce4d00aeca5d5c161cc2309d6e1011fef110ae2d9cfc4c0c8d3452d8d02b80a5a2fdb5213acb6f7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d301c5450fe5348acf190e2f04920ee6.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2480
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2480 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2888

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    215ef0dd335e01a77d1793646af2cc4b

    SHA1

    f0094f9e3b87880b84fdf94bb7d2b2f95e146e64

    SHA256

    5295b35daf41d90ed916176c4923386835b8885c148d6acb42446f127d628e2c

    SHA512

    5322495e4cae0b13ea9394a52c8382579c71f047859ef7dccac4cf5072b1398f599b1e1284a7104a4c1cad90ada8d7c057d58c56cda888eedcda24e60dd14873

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8016d0f6b20b5355891fe54489a66cab

    SHA1

    d05b999bd94223127f65c88d66d65a2f567feaaa

    SHA256

    a679a145f2391397a475e324d5ccbcdf59e4a1e6a8aea0a0b98283f20f6f8d95

    SHA512

    65c37f0f2d00b1cc7943f45ec46e0bc147c68a7b7b2a044ef7323bba04c4c35cb3b744cabe77ad7a398726efa81032e64c3b6fabd8f0045ad3bae9f6aa6fffc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16675d154c5e42fefa59ac63300bc4d9

    SHA1

    28188d0d9abe5e44d6fd4af538546351a311a12a

    SHA256

    0cb47561cfdc9dca49f130fc5a1cac4840d12f6c7994ce5ff42b04e86036ea6f

    SHA512

    829dc06a284011c290cd4e60a5b6506259fabac8ce7da129288986ed556e6a473ee660772c03355bc0fe2b636da56d522ee70bdc317e78b9008aea73dd0ee549

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ea0ab650444cf9597624619eaf18ab9

    SHA1

    94e03069baab64843353e5d017683db469e6feea

    SHA256

    6e8041cd60e19531be80413f5f36ed00cb6f9a3d70693d965c35c5e3ee278ac1

    SHA512

    c7f5b5f39016ba5e6257d88924e5d21b265002ae65663fe714ba1203287cec5d8b28f192a3001b98d4bf9d31c2b169dcbeb794086ebf15dea9aaad0aa02f22d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    231c4dd19fbc77404e35e395d643b6c9

    SHA1

    7f43293e1f035172801b0b0b67a567eef60d0637

    SHA256

    f0751cb36c4b17da6de547914a7c31d9f18ba3f1ce5d4cc3d3d6f9be4584d717

    SHA512

    a0be2296c6a96b0b290ffc1fb05a4f23b6da2b936feb40540c49aecd19d4a3290441af9d2ecef8761accf744524456e6fd5fe86e494db3eb07af61ccf59077c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0077c7061671b82259d58012f3c03f2b

    SHA1

    158997316fd61291b6184661c9b1e819f2449fd9

    SHA256

    d42f5e03c38f93b239d59f09ab73bcc0f5d0fc42b4c683f401a15ee0fdc1361c

    SHA512

    6913b6180afb3272d62808b95f0d15f655fa4d7c1677c7a13744d52e8c851733f8f22b42a60daf94aa23a75e7ea3520f082f98eba390b5855b39e43f82f8fdf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d89c5163c7fc284aab14a4d5851957b

    SHA1

    084c9c014ef730208677826b139bf117beecfced

    SHA256

    d32c3a413ec35e4351d72ba74e1b6f347fe6dfadd1a5c45a444b8f173c1aecc3

    SHA512

    2d6918f8533d33e18bc6d99f7c271590dee69177f27157a4fbb40138c339ab74a100aa40a85d71976d7ccf8021daba1dc88e30ee1cc532e6c11e8ddd32a1c340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1895f52dc9db5a923d2089bed92e315b

    SHA1

    62b1185c0cdbdb4b75a776736769685f0a990b44

    SHA256

    8386ee515a6264153105f49a4c912e3bf7174be2d773074036f08a50ff80f779

    SHA512

    5b70678722e42eade81212dd362fabd945365f0c14b85b5c94bf373d86cce463b70b61e3f8e96238dc78630e816c4072c1d6e0b32e5ee96e8019e02d09bbc6b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5d767f47e65b9c31b621617c64464e9

    SHA1

    d5df5ccbe2032f56f85944cc142b8f32f9f882b9

    SHA256

    9879fcf65f1a9c9c6c733efd69b3e28e1526163544f6145d436ae6c0692e7a2c

    SHA512

    4b825e46037d4c484238ff56f23c0ab19ba6a4f7c3cb1e0f6a97ed40690f82efb461ed13ebe8e6ec4bb4a5f4d04ef290a90ae642f98fd2f165912a2673a26bf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a496dfd20a43e011cd4aa88499c05be

    SHA1

    c1ab4a7abb541940cdb5bbb737c3f94174c72bb8

    SHA256

    2bc1250f07f86ed94b6c6dd6d7cd205d2e50d59798495442ba30a592c69f6461

    SHA512

    13a0fa80d45d395fb4735c8dfbf015ea99a3b0ed167a4aafc254ff2f3f55842b734f60b82a22a37f260c2815864ca8e7b55e774096f0535fc5380ac72b0587bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    faa618f7075a82557a216f6996099288

    SHA1

    3165f928671200de49960557d30371e1edbd091f

    SHA256

    2c63153867eb723418a3762baed708f19088154052ece6488ae98cae0a6b6b16

    SHA512

    2b07c7b99da77339dc0e301978ec68190d2958dd22b2666a8dac037dac2b955281d55b16bdea5339e52153dba7d563949fca4f5c8f9eb69fd21b59a56b9ab0e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    afd1376ab9753944dc53a18d4f9fa9d6

    SHA1

    415e58a74c59f54b1bf4c648b24663f7b20c5872

    SHA256

    1718374196093443f8dd55e072db8e86c2471fb6ead8458a024d19f28b4b058f

    SHA512

    d54718c8713fe0eb4061413e1eecde5c2f8ff5e20b4db8b09d3dd19e158a977c903b7b2213d99035cadc03c5370650bd9e0917acfc113ae34acddd2e43157f32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18da214beeae1484fcd203c9cfe33aea

    SHA1

    5a180b7b8c3dc8fdc95401f43bee32e6efa426ff

    SHA256

    371f9ae8c792524712e977be6ed0d9dc47b485269e64fea2fe4a98d2d5a1f326

    SHA512

    79f5b08d44bf720146b5d2e45f5847bfeeb712b6a59c88eb8c908ad42ac23805beb6af2da40f7598f64f03607fdbb9b4838965e003764726ac2f97a03b4c8091

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    242ff119c34a32a26507e18e52b5bfb8

    SHA1

    8852b759c2438ed908406a6b605693c686113525

    SHA256

    6b0b13a0bd01246b098414dc3a81469ea9c16d601e11246e8ea1281d8a545cf2

    SHA512

    49d18058a3f8b8be53ad6b64fc0eebbff965ac7d76a341a910f5f9f44bf08ac7e9a88ce492d264c489654dd558a548cada2e4ef94aa9511ef60785e129b0d4db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98e4891897ec4426721733ea599cde39

    SHA1

    9427f4aaf0ec372bf2c7febad84e345581473ac5

    SHA256

    4c466ad746a5453988b5bda053df2cb202bfed3242bd443149763de9662c7459

    SHA512

    f47eeeb94cf35a56c6d2d0cf36c690a83248f9bea44313a0d0a58caf376391fcfe969eb6d0e230285f65453a83bb5776e09659b95270481cec2abc49be956683

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9341c7ff6a706416d6bd687519d004dd

    SHA1

    bd09bb93eee8aa09240d789d0f79b28da12fd3b9

    SHA256

    d141506b008dc7f7219c686ee01f808ed72e50cfdecf29e97b173239f1844aaf

    SHA512

    ec227c3a5a74996e6d663b45780ddbdb678b578c5812e4c69274a212fd6df1aabf0bb2377786b67142870ea9eedc56a299549974448e23708728db92c6a1da49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c80cc70b4e2efd345ee98a782e77363

    SHA1

    143b7702f7869ed1671080b4e5fa18bbcf5ef195

    SHA256

    462f5aa726b52c16933a96b1787b93105ea00c0096b45d1a015c2fb72cab0d14

    SHA512

    df0a91af6fdda6c4fd4ef4d5b1a66368188995369b5939d097c3109de8f1e97a5fc75c850b527287a6a8308e520631fa3c2292f1ab6432051c63f0687df485f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01fb3cba986bc2c0ae11ec77927417e8

    SHA1

    01a723bdd132ff32e2e73ec69493b5e2d66181e2

    SHA256

    0a3ddd65d1f86470c0cb3f43b46bf89fd6b70c27a95996e32a7a08590d80dbc2

    SHA512

    6adf6a37701faac3e98c8af1e32d15ec61c505a56f2f111887ad59822bd843e0a7b9e14c812b2e3f5de721e57c0240bb41ad36edc0f623ac877cda4996b17e31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19fc57ef5d9e6254dce23890b95d8cf9

    SHA1

    07264bea3841ddb1892a8437287e7f0dae9425ed

    SHA256

    9ef521fac607d3de8e179b46296f5319336fbf1e1e6b322ce71cbf4261d06aa1

    SHA512

    6bb225273dbf1d0c3ee6c9ce02114fbbcb1debb15caf7cd2b636d14361381f6e145a0485eb6d7a2c67da3709c9c2224bc20c9ce651579aaa9be6ba89ffcb35df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36a519da03b6c5cca4abb0bc297b7c98

    SHA1

    bd0d331d9c0fbb7d3057c58086560431a88ca05b

    SHA256

    103deefe56386b6dce8704c83b10f9a171055e8ca0a67216ee416d36a9a07df3

    SHA512

    662e0501f08c1e848b5292c69405b96c209deb29887f934e1252f55ca29c25ee5a2637e3d2c4dd8b0e6fe6cc9b3eb77f3cb288abe537964218fdb6efa9825bd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb3abcedf4e95209fca1be8e54490c46

    SHA1

    6934e0b1aafe701a1a863c93bb442ed685870791

    SHA256

    b3a09a7b534c2b0ad1173ac711dc8d0374d87f44d43c356ac3248a0681160d70

    SHA512

    7fcaafafffa5a8d0d184872d720c738bba334deb804d8a9057630e6f527a1e752a4b55d29f9fac232caaf7a95b1835b852d9e60115abb8b4edb39fd6d41cb1b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e1e343188d813655548f7dd2199d605

    SHA1

    3883f5e5007690e8a42e952fec488a02b8fbcd89

    SHA256

    1adfa21c67ecba84c82aecd3ae82d8ed5a623748fdddefe7c645e969fcbfcb11

    SHA512

    c48e58a29afe6258510072994884a81d37534da55ffdd08096cda5427939c26403e0ad77563309a36afd480214cc83292e701da9b4c76440e4da2b0d8390f2e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3207cff1d515242714a2695874ea47d1

    SHA1

    7801390643eb41fa64fe17ece64bf0700c0927b1

    SHA256

    3ceda1de8a9dc220f9d12d6db13c35f3954c24fa906e922c021ae43a63118e52

    SHA512

    2a93358b38b58d3bda8e91a790013d3c9685100449e443130afe6f8f658ec9ba5dc98b74440f1fd9e01666e8f7090db1feddea590658352586045ee4b909c667

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd0c52f36f81692da6f1f746e1207756

    SHA1

    6ef35db6dcb8bdf5d8a5e46e3de8b8a01e929b01

    SHA256

    615740bb33e214bbf3109ab09b34dfb1380361587d08987e8fcab6ebe70df2d9

    SHA512

    ba02452d1e6286096eaf5a5db9bdcc35e53343f3d6cb0afdcd93f330c10ca13a57910931a93d563e549dc1376f44ace840fab4d9c396311b86700df0839b37fb

  • C:\Users\Admin\AppData\Local\Temp\Cab86CE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8710.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06