Analysis

  • max time kernel
    119s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 17:19

General

  • Target

    fe78078e1cc2c8f8088b100497d6c7ef.html

  • Size

    601B

  • MD5

    fe78078e1cc2c8f8088b100497d6c7ef

  • SHA1

    69fc6af1cd636a3423a517c14d28ec7e906d5204

  • SHA256

    e350e59c4306e13c3f915d96de08c126c8d2be686ff5a578eb6dd72f5024ed2d

  • SHA512

    0d93b669317e4fc94b8a74d0399eb0d7c918ac0886c70ceca4dc154ef5684daf47b6161c75a04dd58a208bdfb75c9d1c394debdf8dcb84a8f92612e8ea13cd94

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fe78078e1cc2c8f8088b100497d6c7ef.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1708
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1708 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2368

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1d959e34a925820b08f6df672eae79f

    SHA1

    8dc7579c45675d53ac6846d55bca4b773309e218

    SHA256

    c8b58e3aef1a5b6faabdf667007a9fbe1473e7e46abe665c5f98aaace44b2dc8

    SHA512

    30b405444e74ab883f74148cbf1642774826191fe7395600e6eb2075bd26012ccb0f9bb320811040b9b14afd149f309aa08379f7c5c695c18aecbf25c6855b5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    952cbd882caf6d01d062a98cb8c2d0c5

    SHA1

    e9f1b0e104e090af78bfc78b73e3cff397565296

    SHA256

    8aad762640140e65ff8583559fb498e66666726e7f7d2e052b4827cf6e7e279d

    SHA512

    ec7ebb646c7d1610355057d9e2e6fc787073b4d2e0ddf6ae1f96e8300aa3474eea21cbd3ca2d4a36f17728da9bdb11eb9d0fe0a680a7afec1403db86aaf18f04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9d74360a60d1f3def417bc7193671c3

    SHA1

    1c8579c69ff8199ec8c88415c0f0693a5e223f8d

    SHA256

    8cc83b892d7b8d315c7b1d713f6ecf72ba413936839aed3f3cc3e60e491daae5

    SHA512

    cd6cd11a2d17715343b425bd7401b2350594ca6ccde82340f3c8480508667f4f2a7922bd0c34c421691e7fa6f46ea99de087c51ea1010a4f653a91c88c57a394

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fb5c910d849f5fd64cff785a1a2a956

    SHA1

    a95b0bb08fc7c1c698fdb57c3a56dc61c3c9aaea

    SHA256

    ecf7777daf6df7bea26a4446219ea39fbc9b1d8b9a8fa9ae7f12580af0858a95

    SHA512

    56fcf8f9906cb98dc5c82d843853cdb4fd1cd3054268f3585f25e1e29631d73283288d1dec13174d12817066e17f514f79267113a1e46ba9a5e6c958d536ed4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bec9c752d2df9d2b7e54bf78a30034c

    SHA1

    2e89798373cff5edbc3b397d64f97d5f3b8a15cd

    SHA256

    2dccaac88013c26aba59df623ab504b2c6dcacc4e67a53c11e5a32bad5a7b1f5

    SHA512

    619b4c32c2e3d64db31e1280487e2bfaad8a3a1c259c755b9f49bf51dbfe59237d84f216b5d95925646728402a611ffc9d79d19aeb15dfda12d590695304cd3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50c46b6da8b036e1b9c6359e03c9f8ad

    SHA1

    f12fa055d0928737ae56aa3c55bbcbc87d918aa1

    SHA256

    d4e77674774a08658b85a1f8ce35e5abc88e521afde3d3454e60a4c054af3cfb

    SHA512

    886cacb19301dc42da858d03605f9183164f993afb8b068767d4aede6e514523bb0eef5638198c0881430968b6ee919aa9d8c2cfdd18098470a4c3d0d0b893d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3625b2006b86a42dff1c91528eb004f1

    SHA1

    ebbfb5276e50fc481992bea1c6f710a72bce362d

    SHA256

    f5f2f63ff37416cdc29102d519dfed0633a437a68fd3220a0aa1ff3d8b9aebb3

    SHA512

    829c44e78dca8a4364a92c58572fec4b6857989e64571c85640b168cf7c0f99ca458789056f6fd7d24df929dea62e565ecdec274b2ed2ad0cd32477dba693eca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef725b7fe72c91e11091648a93a4ee6f

    SHA1

    bdc301232504ff2a06583a698c80aa5a9a790bb8

    SHA256

    df5a7de221d42ca9e104134f8100d2cc3cd6c7e722fca5227a24ab0195da98e7

    SHA512

    451ee3e7d9820e8fc3020972611a9af9a41e4afd638569de334f94002908c004b2f3b8517554cb74d720e997ddffd93f782266808c3337373f5d12df2de07a75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e254c668fd17938399d2f2e33b1d2cab

    SHA1

    98b1b751c916b7318a200a5735f848d985e6a1bc

    SHA256

    d76216d058070c72bc5d0bbb9d9cc6db544f415a3040d6d4c7aee6fca9fba63f

    SHA512

    28a1b208f9a486dbeef967eeaa9a4432ff41b7be058525d4b4aec4de0085a936cfa585127c041cee835d2f1da4994aaf38fb86d5a949aa62ebd2d14f0dc059d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93dbd8e76a99a25e2fd84c6f4ffe4db4

    SHA1

    b95c96e3ac36896c1c3bb03c8aee050c34cc5996

    SHA256

    734cad1dc107d061c8bffbbfe1b30612a5a5ed82b5ccf8dfce69342b03756806

    SHA512

    3dfc94b24cd289cc8486b36bd89ac8f1c5ddc95887e58c45a2136a810e372f730e2e63c72d5cbc29e353ccb2bc090c22a851912f8866032bf0f0da7ae87b7f77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9ef125354306853d01af8c5bf36bb4e

    SHA1

    6c0251a1479e9b6934240945a55df5c21cfeb5d0

    SHA256

    fff4fc3e7bfcc21e52877a0fd6522304a6fa8c3cfb358083718244efccf51160

    SHA512

    2760adb1d4b04efa9f84c224265484d20212bc1221234224780f6c0a53186906e9e1ad2cf7f5c7a5a19149663d52ba6b6f7e631df3574cded4669db3de988587

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e025e9a3bfec1780df936b76bf418f91

    SHA1

    f7d31c5ddfc733300120eaecc920dbdb0dad976a

    SHA256

    361a39be7e6e228601f0b4711db7bbc12088a8f851dd3ee96746219c6a984b68

    SHA512

    c028a5c4989ed0969ecf640ea83496debea117faae041e5f2d26adb9807582497a0a7f19139fb35febcc10856171544f6f60bd8afe7ff9220dba31fe653db813

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2129d772b674bf9261f659d02a35e69c

    SHA1

    cbcf09034fededcdb979324abbe7fc5adb119ddc

    SHA256

    dda9036b44d153db7a29c66ce741daf132df6e01c41439bfff86a4f2d4f579b4

    SHA512

    a5d8d63a2537f1ba1a08fe1c7b172b1af5736fb145d997bd267ca690a3a92fe033e0396efd68ccb793f9168e2f732228e323f12325840c35ee4834a94d8fbecb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c61efea45b1903930276c487ed58fd7f

    SHA1

    4af83983afa94f1286326ca78fa41ae8e3732075

    SHA256

    3a3ee2369d67b607f958eab0aec885e0592225cfcf69f55fd7baa0bccddefb90

    SHA512

    a5d0c981cc40d489a0857c7931c387878c0df044c6206c6e59ce1863e58341aa29ca306506758eb671d0c20c12040c00c1e0932a7df10fd19a080547ce7de5a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bbdc069a8a61fd787445733e5a8e5d7

    SHA1

    195e6e85265076ece037b40cd93555d336ea40ab

    SHA256

    dde5afdad38277e9bb0b2acbffc6ac9db2c632b48a677fb6ba0e5e74edc28ec8

    SHA512

    91b5d4ffd964ccdd4813764b48ab2a32ccf9604a96670d565ed044bfb2597b26126652f52090010c01118d66bcd6ba18d28cf5998d4d9dc4ea52690bae90dad2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c214e7bfc62ea2181b96f074f0c955c5

    SHA1

    2e4ecf69c3779363dca7ef823ed5b3d732838b53

    SHA256

    d0771194a3adbdc432c40ce30717af0352126468db43af2ff50ad80842c30eb8

    SHA512

    dc2df0a42a1c9f43a1584a68d4f87672526c7eb1b99693f59ccbe100236d69f5525d7657bf7ff1a39fa8a814a68d7e528803226a8c55b24cc0fd47a1568ed1b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3b62bb06fcf4757d91f8a62f359de32

    SHA1

    e4a0ac0e6963502197d1f5f69c69723597836029

    SHA256

    e5857b8638ff8858f9eb3a848139fee6cd19822bededa5f1850921548fa9b692

    SHA512

    7cb25f800683c6f39c899d4a34863df16485bad6a40383071e554e9fa3dd46a4bf83368cea983758f2c0e60b450c891ad45630e57458779c320a97b4d58b9022

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a08bdaa2466d2aa25740c4d79b98f845

    SHA1

    99b28927f1dc2762d7ed8e2e974f4a08ba9f6ee2

    SHA256

    8de3cbdbad4e6222353a98d91ccdcf9ed67a2a629d91e021668b0d1e6ce648cc

    SHA512

    4380450bbfed2bb09bdc7ed2d3f530e04829fac5233853672372de44f45ec271e5fbf8e942d56d85032b71efd5765b67f10580e6edf2fc8b672f2d1667348c41

  • C:\Users\Admin\AppData\Local\Temp\Cab569A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar631B.tmp

    Filesize

    70KB

    MD5

    25637d58191896548a30f80c0034b0ec

    SHA1

    2ec91c1ee4a7fb6c93bc151b66bafcdc50e4d989

    SHA256

    dfaf181a0dbfa93c2e7cb18f7e014e7a95013c6140549e70f8fcdf9b88f82fc5

    SHA512

    9401da17799062d10ee0f248930f141b09ea33a040f9cca0bbb426c8e8020e144b9d75c6df93df7b10461ebfb8f09399be520fab7cb71d09dc652dd13fa5e51f