Analysis

  • max time kernel
    150s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 22:51

General

  • Target

    1722579879c0480e59b272450deced5d.html

  • Size

    44KB

  • MD5

    1722579879c0480e59b272450deced5d

  • SHA1

    dc525eebc8616c75f0f046e8d2402fd367ca9cb5

  • SHA256

    fc3adf7ad4b9b73edfb824724da660faaf4ded2deb1bb56e4db358c424b96012

  • SHA512

    a5343e6f002bde00c177d6d52c533dde8041df39aad8bfa10779e41c0a23d9cf4215b8ad7dabf66954d0d32dc2084fbeee199daabe84fded733daade26b368c0

  • SSDEEP

    768:TI0TDwth7rwmI8iLxOtA/XQP3PQoPuOe1/MvXsoxdA2/3gnlGHxbh0wf34l7eNXY:ZXYh7rwHxOtA/XQP3PQoPu11/MvXsoxa

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1722579879c0480e59b272450deced5d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2080
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2080 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e1da2238abc2e7b24eb36a3eebf1ff0

    SHA1

    8523a274fe059003bcda3b180a739b803f347616

    SHA256

    c7ecc284a188733a65d4331aae7d4e36d8b828d5630369224a1b612dfa2c8430

    SHA512

    ed3caf9c44dd74e99d213701d266d5ef1703c6e21476d81729ab5f040e48d2c097e2625b9aede1d441afc7970d1f480b5cd4696ebedaf6ba6ec1b05b4e2d838f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    824996cb4f1f6d22a3b904172413d1bf

    SHA1

    0c894dc59fe2f9dc1e80b213982bff01d1f84fdd

    SHA256

    c4fb0c10a98363cf3f9225701716a2b956496a10b35d97e91aacec1d0572bdbc

    SHA512

    2d6af460e777455ce086bf8bcbbe8aa8503b77d98a431da7e2cb04cab0e0927f42e2a9880976e5cf9a1282cb29f671482eab748f596ef449a514ab2350097247

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1524193df33fb79efe68b301072354a5

    SHA1

    902b8397e677c8f02346273e5d421c82d479ae2b

    SHA256

    e2cba0078b9ad7483859e6db2018c59bec2f907aeae8cfc12fb912a335765ad6

    SHA512

    5248ca96db86d6542e60dad8079b7266d23f90132cb0ba2ee01ed05a450f3a0f9007f644e6aab4c6270993d6eeab3d09211c7b38ee5c824a51b867333252b201

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    692b288b04ba03930392a48832505fa5

    SHA1

    4e0cc333478ffa87b071af22b1a993699d4fc58a

    SHA256

    b32a1baff1adce5c8af5a0625c693e5624c3403fb1a64c9765dbebe54de24077

    SHA512

    10d9d562d0f44c5f20acad3a5ef03dd95c9a74c42b821cde8dbe942aa01f6b4068d9da016d6f497526afc877324eb431c1a7eeb874ff7e8bcd29a59693c22078

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37af6137baa42cb20ab0a32550b28248

    SHA1

    e9974a7819d99edbcd28efb311625a23b52f3a98

    SHA256

    f07afa9ae12b05618ecbfefc81a27736eb0fe2ea9f30e0b3bc6bdf138e639282

    SHA512

    a3d581fe2114055cc5e20ff5d89bf55186a5ecd311ff78eefe6242129d4963683f61d3b504f797304380cb6c630d9d1e5f79207e69ab0b261df2499db9beb1c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f476d87fc6712a6cc5f225370de3377

    SHA1

    14211139d9bbf41235fd5bd765d4ce0d68b9e8b2

    SHA256

    a3c8d0f093650da908b1ca8aa7ad97024cc8677bb3c1214db715cbce6f47dddc

    SHA512

    1165b1b3e7f44407b06de0412b074d1e442fda154aa36f29d98a1ad306a4ce82126c4831f33cb473a08205d94c093c95e674a3676bfee1d7e5f57c87471d46d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e510c7abac0b64ab450db4b0194d2cde

    SHA1

    e98b5973007db9eb94b55d7a0034878f6a8bd294

    SHA256

    7255086606ea2cc902ff0cdaa14c769da393e7747eaf781c8c537d4fb76befa9

    SHA512

    ab1a7aa1d68775106da510bba9c6126084ba83c7429e753ed620aa18f94e0e80da60c262feaddf1d84677ad608f00ca7ae2657d7d3026f8f61f6f52049eaf0a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5069d9dd9673a87534190d415af06f13

    SHA1

    fe68e5a047d2a729c96b7a8a0df1b36d6b28e4e2

    SHA256

    86be1c0b2d0a48136065f4a945ab5f680d8cbaffefaaa06dab6aa5672abf8887

    SHA512

    d21c0c4d68f04e5a055e10ad70d6748773c6193148205609fb429da7a47b3985dec59d9bfb16929f0fe5f211406e22386f33688b3bf862d1da7ddbedcd87513e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fe7a54990f03556154259e466d54efe

    SHA1

    781cdcf8347536e736178be306de11c0d4d9b586

    SHA256

    c1be4f24b4f39c98223d49bb27f21c40f5a5bfc833bd133b86b9c322b5687fb3

    SHA512

    4b68b1943bdefb2a5cd22bf7b98b7c03c5280349837262910e78584602f2eca55280937a8c1f948fc373ebc8953c3c579f392450c343650e44be81040194c451

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    074ff77a1c5b83748dd0a436690655b7

    SHA1

    a38ed29bfa5b8ee50aaf5554aa5c5c01b7abae36

    SHA256

    b2b6321107849e644b786877bfe876f882fe2915fcc6297bababc2f88f282db4

    SHA512

    c211a1a8d383dc54e7e56d16ffa3a556ae314ed81806a2e9726f009f2059819684791f6aa27229eff8f9af506415b09c99524ec383d880bed4fb3e23ab423325

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56730a4b41b49a440948dbcb27f5c414

    SHA1

    4403742807cece2cdbb0f49347b15401cc8d9453

    SHA256

    1f7c010eaf5a40078b6214d70556d82f2c3a209ba634e7947168657f22d7806d

    SHA512

    6796764b86ae6f3648c0835b4bcbd2082aef0e0b1d6e544fd75291f7d0b982908965fb34f512a3ba09832ed687ab215e618e83f2ec6d9b4c05097ff18ef8c790

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    079ee500cd8b6b076cfdaf4d3b164862

    SHA1

    731f63c7157a32d95b14089c5e13cb121ff04ff6

    SHA256

    b1cd81d42ac00120696a3b4a4718abb18f9c3cfb66e9e0aadbb77720ed8857e5

    SHA512

    cc65c17c9c4168c867abdf9f29f321772381391b60b537466b9a323e56c0f423e5f20580dd936de423c2207014f650890e5f460d76c8e1d4e9c70bb1926f7db1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e53326031245edc9114a18f16a99b3fc

    SHA1

    5a90e7b0e15ada2caff48f1e7212b331e8514f4f

    SHA256

    a1a26148061915b321f376c12789b6f38f5f601f82d6f49b237191d65e33cf78

    SHA512

    fd59d22351b21f4e059e31d4ea38b224769b21cf3f3e99ec82ed85b3ab67be1ac1ac931eebcd6bab00deaa5907eae70cba2b6966d2086b85193253b13518a695

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    425789f0cf0416a8a9b4712760a73282

    SHA1

    afda69e6c5672f025b98841421cfd3a2b3f5501f

    SHA256

    85379ea94d6e540d7379c36489b1578fa2f85b3ab6aecbbc6c5e002e5298df1e

    SHA512

    87f7856c85faac926e32d40770a38a01e61d997a3a6246837fdc241e1d99f54e376f4bf80505ca3828dffaa5b0282b95bf1c08cb04514131d25923fa3c579ebd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76ef7f2a45ed9b3c1460f61e96655cfb

    SHA1

    b90e330d1619c3e340ed94e5f4ada67fc10fddef

    SHA256

    fbdb713d86109e319c56f0d0afa1e08427910b492f45cf091644c8b109457808

    SHA512

    0666c791b9e355ff007f5d6df1d01e75403451879988bd2935361c752fd35509da048c40a5ba03f2fe2183989e67a11cef32c575fdf70e7fbfd93c52d62509dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da9a08bc30e37e0fb488bac0c3dab7bd

    SHA1

    7287ce94aefc5b1c26341137736a82d464f33172

    SHA256

    aa24e82ca84a7b13aa5dbe0af439fb4d329308b4ee162db2678de2cb4e824ffe

    SHA512

    d5857d104499942fd85afbc458c149730f4dbf45ec6b892f5c7e9c1ce0afae386fc12492e9ff9a4db18f5cb0e2dca7be3dad1dbe3738df9e1a8c3c9386af57e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a3bf86fdccb62e5f54dbcce450272ea

    SHA1

    b4a52a0bd20d68defcf28dbaff3d30d30c2d132c

    SHA256

    d7b572925a3a53cf5b404edac60a3a92d0598bb14c0b77534790f25d6ae0dc21

    SHA512

    af8b8f3def381e077b7840d3f1e42980e34770a15b8443298aa22178b482ccc2880d0bd9b5200bc6a1463c9daaf9be2da9cdf394eb9d9f97792110df775a6306

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5978aa22e5154d28966bb76030400492

    SHA1

    8b0fdfb8fcde7338eb81c0d58f36d42188e8c153

    SHA256

    c0c1262f73f84bf3a16fc28b7ace4d3e7643247f24da5fef1dceb164c5d63ea3

    SHA512

    a2d08e6cfdcb1ea5b3bd3b5bf65c638ccbeccd1d5dd2282c05e3b7816c68f28b2281171792cea1f20faf0c180c5449260ad7e11bfcb5ae77ec8fbb05cde3e60c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b550a2a384e25d2493ea18c2ef9666a9

    SHA1

    668f54e1783bc5e1475215efcec2e6cb8d5dfd4a

    SHA256

    bcef162af37152a11858b613e46fb5a839bb1a9b2e0f5f3b893e191879efa817

    SHA512

    942054bdec9afac81599c7e2428c539e73d6c3acc93cd84ba93910fe2d8847c25d2baf55710330362041d8d9320292dc46a6523127fb4c59e4ed41f7d501eb7c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LSNXCBKV\counter[1].js

    Filesize

    40KB

    MD5

    9e33acb5cab6802df44887bd6df31416

    SHA1

    f96f235aeccf43da8e795c291f3a3c1390d8f377

    SHA256

    ca02d1a91f43d6b8c5d8d127d04e95afb736ae1779577bde0a6f0641cc4f4893

    SHA512

    a6cd85df3e64c7b7b462dd07025563f5ccf4c8b98394ba0d31e9705fc933ee89e1c13874b11f428c090179ebc70bfbe2728a92a8b56fa5a58253cbb7793fe333

  • C:\Users\Admin\AppData\Local\Temp\Cab65A8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar65CB.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06