Analysis

  • max time kernel
    122s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 15:35

General

  • Target

    03e922a310950c0bb8f47d51ca07b7cc.html

  • Size

    3.5MB

  • MD5

    03e922a310950c0bb8f47d51ca07b7cc

  • SHA1

    893dba1e1b82ec83c1d4f319cccdd68d0278f03f

  • SHA256

    86c8376e520fec28a901d71376ec24f261cbbd8d64e1650dcf0e4c88dc4978fb

  • SHA512

    d9bd385f80a478bf90f4f9a68de2c78cfd818a96325a8aea629dccc8c5ddf283b7ee6886e1820c44a7bf71d6c0c30823916e95c2e8948a2301a954922a6803d0

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NAG:jvQjte4tT62G

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\03e922a310950c0bb8f47d51ca07b7cc.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2184
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2184 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2116

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ec8609ffa158ccad8fe28a6d1bb9737

    SHA1

    2fa8a061ab7546b5427dc9d00f80ced0a6c0fdf1

    SHA256

    0ebeb484b4c4421ab110a1913890c2230e1ca0699cac3bc846d5435967267734

    SHA512

    860b9733578c39204e5287d2bf9c270d511715597da2950d38d342d3f76945680607dbdfe62e5542d5272f83a6456141267d6ca31496f8803c3a0879d27cd0fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    152f198d043dc9e53a8d397d13355989

    SHA1

    786ce84d03843f14332eccd566032e3f90f64706

    SHA256

    112991789db70839ea56cdebd5b56539c0a8e42ad951ad0229e1727b844a855c

    SHA512

    a9ae33ca4b5fa8dac153431416388e27ad59d64ed5cbc5afa67e427108830f64020727c0ea4b9312e3210ca438f4da77b872cbf224fc28f4997857147b9523bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c748b82b301ad0c3b8337d725f293ad

    SHA1

    b8f8490e9380f13aaa0e0a0f932f104c77542e40

    SHA256

    8952b31662e7deec6dee3140b2b78ebeeed4f979a309cfc9df1ab211f40465a9

    SHA512

    30f99672094f53ddadbc3029817d803e339468b31ae2ff67a109170f8cf6afcaf693c0c044c050b5cca59fe32bb42657ba802d1494708533a38248d20b54c567

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f309968201c0d27f3ccfaf15e0b91c2e

    SHA1

    80c082aad50ecd396130260ee3a6a76db3dde13c

    SHA256

    ed77ffa1fdab1fe14d091685ed291b64d08a585d5c638cec73968f325934761b

    SHA512

    5fb190139b404240b01ecced0796a2e1bb69df51bd09b3bfc8ff72ab092a6eb8fb0a624358a4f101a8a96124323950c54007a47a322b818e2806a602226d3ee8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5c7a79b57f21309fd2f77143747850c

    SHA1

    487a1a4a8e660a022e0f42c1e2472b2ed29a03f0

    SHA256

    95ba7300b881d0b5e659f1c4e623e91a85e9c91970f47bcc85eb826a03ed101b

    SHA512

    47ad81bce52d1a09eb24b7e015f27cc6644aa21691a00232b6b32e8e43b35380f06535a1875d487483e437c87c71126edd141842985f82193fc3b5029f9c3b32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    acf4becae01793dbdbe539b4c82e687b

    SHA1

    86b85aef1b32ac8174a15feec395b0a63c0ff4d5

    SHA256

    272ba120348acf8abb1455b657589866731ddb35969771702c070c3384e3f687

    SHA512

    738b2332c33c9b1ab3bb022bff2b9e7ba1cb91248c99fa1dc450a228c6ba5f0eee9bdc4680a38282df765f40c775e6ab6f9270fc4191fc77fbfd22cb1ba822cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2111e262777e9dc6d01f83d53745b96

    SHA1

    2b889c72e1047837942d7cc1847731c64ba35956

    SHA256

    50a141b706df977be72a6d4366793c4bb009b1209698e098285cfaf6d863eb8a

    SHA512

    9f2bd255e96938625e64bd6466f038298172b7a669a10aa8e9ba2e982920908e1652d1a1fde18e57ccf6576ffd3379e0a447346a005c2d43e2c61f908d298437

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8e94a2b1d3a5887fa0edbd9c6051ab3

    SHA1

    e055bf9fe70cef6c3af1ed092b8560187be92e4a

    SHA256

    d53b77190a1a697fc731080ffe9674a15265f09a8832597209a7f4ae2a327fce

    SHA512

    2b1cbf85f0ab002fddee440ba4b0f1db38c1d443e57c0430611b1c878985825f62f95107c000d995384d5560cab1999dd029cbbd08238fe41bfb5e1e263e2c12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1aff67ed1285069edd814b3f4dc1fed9

    SHA1

    5d5d92d58484c13f3abf6ebb6ee304b861d84f28

    SHA256

    3e27b52c4b3f2c2969718b43c21ce1ce687d26d82ed317709196decc8c524573

    SHA512

    0f0290d89a8beb2562e1417a2afe256515fa3fb69e9b59e150d3189736e26715de3ee95fc90584faa11ebe738ddcde6bf3f66b7b0fea6db28abce88e10a55b18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7706fb9c439e76b5d1e70e574ff34dca

    SHA1

    feb84fe8526394ac070951746bcd95b3af559905

    SHA256

    476ce607f3fb24cf19faaa8c3921489545f7a44b2ba9d35e4ad478279f16795f

    SHA512

    c5365cb50b26fc78c3388e0a806b39e0e00f3bf474ded48b25b2d694cc7295a1f0a0f89d018cc1f53e2a65e080c2b98e9a22fcac8d0f955bf44911fd74fbe748

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2213b4b05239c689f0e623bf11cfe4bf

    SHA1

    72cb8efa232613a15126165bd3668bfc04e22bcd

    SHA256

    66b43993e4a2dfa43e9fc6720ccfadb13f6999865f1258057434a3be64dd8ed4

    SHA512

    6d4b5620c2d3553764270874b3ec0dd445768c6a289e196a1e5451670780eb1ec7f1f9d8efaff020e349b9b2dfd888bec661cf2f66afdfd3377ab5a5cde27846

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d00b4064d52cb16b829d7b7c272968c6

    SHA1

    52dd7412a8761b32b859d1251d311b3538e6e3a2

    SHA256

    407ca8885ba2f458ffda1ff7a5b8d26ef80151215f613ed8f0c5ce2169d4a66e

    SHA512

    5cf6c3c935a7b29a85202a1a29c5d5e7addee6eb59ffe1ae394d7fa49720705f060764fa4c70fa3cd19a4ff2586ed1831263a423ae6c597c0ad5a084af1c6135

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9557b3bb671c95001976f77ca06cd002

    SHA1

    a8a70e87eea5d584a943428d2f5b6b4d79feaad6

    SHA256

    2388845301c9ab2c13a8abe363cfd388a2d5add284771ce17da0fe8149657a8c

    SHA512

    d5a3710b13c2719a7159b9b473b98b90674d7989c9b10e0f873df3b13f9d53cc7ba17f183a6c08aa30059500e4d3f32b33846235e0a5a1638c853ebd150cdfe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    979287177b425718a39e0ce2c2b1527b

    SHA1

    4f979facfb9091c519aa1b50c3eafda03e39aadb

    SHA256

    cf15c0326517fee198d020a86628725702fd4f63d0229eeec82ee28f154a0964

    SHA512

    655abcac63b0fd57d009e60307cab7e20ef4174f2a495315c697a43e5a150b10e7e05d75b43a9ac12576cd54ee8414045bcd84f50fd2e85e1275c6fe5ad0aaae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52c41dd862cca75751b408f0ad835fc5

    SHA1

    cccc1266f88071e444a32b2a5323821c6bba5e51

    SHA256

    343658e7b27e36201abd0086902108d73c54f57938ce32aba449b79d1608489c

    SHA512

    b0ab8b0a402b26d0fe4c44fb452fa7f4d0ca08644abb0ac903c917d0ddad1ac8bdf908ac5e718126f815b16c9b60febe95f5dd6ce8622816c2b8674b7f95086d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92fe7ba8a6eb18cb00e1788132cdadbb

    SHA1

    ea1cde151433d5db46ae2feec7dcc4485447762e

    SHA256

    e4b601dbe6668abd736b66a62dba5fd2f3d9d3cfd2ca595153d54dec1957fc56

    SHA512

    f84d00a0ed601d36fe2ff4740d9e74827067ef5f1543401dd91d6e712c295e38c806e83057f21c2bc101228716da2ac120fb90164f17d87fb1501cf5964f77ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    467ff239e397605c8e1aee9f3e133dad

    SHA1

    5607a6151115d00482d0f35cef7fb8de8382615d

    SHA256

    1429c9c2bc28e6b72a451d29f7b09203f749345529b576f52a43d3228160219d

    SHA512

    41b96101200f71314ef99fb0639768b93a5d8ebd4ec96e14e91996b9fc87a07624eb40691e53d55c5297fc6acdd8bc1a357dbb11296935b496c3d33338e693a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    faeb4a7c7365df20057454ad75b038fb

    SHA1

    1c3a5a28d1267379e74ae9703c406f282da71028

    SHA256

    cc3a8dbc96f6bac2d94c88d010827dcf04fab534e4b2299957cb7e5902567af3

    SHA512

    091eb670a0605e702cc59d7029acc9d91e4a57f893855884c585c3c81b8305552507bf3934dc7ae658032d7ce91e4138e289694502792ce71321e728b4c38b86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d315916db4c55d9da5dfe9cde3208ea

    SHA1

    24b7db2b382e7c0ead4a32e6cbd2a9ab1d7bb1fd

    SHA256

    7bb922c48932f5a6e175eb961dd65f388e54ff4c26c343774190e67c91f159ad

    SHA512

    ca25a31fa9722422b8417738d0cc9c28b9a6ee187b02462c84bccaf99cb0dfd31535260d4d481f29f42c8a16660c685687c8f4421b874c6ceca75ff4f453b16e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fca9d7bf00b5d246b2b861f639301ab

    SHA1

    ff3faa3374149299e9528ef3f1d4cd140b829a6e

    SHA256

    c3d6048a31e7bf0a9567a586af0ec51266dffdf7d0fcf8d6d466353318d3536a

    SHA512

    751a605b763a1d6eae1acc09b9563c5b77fc02f4e8b304dc728e1eb13a1ed209dbfda714cea72ebe4a4430293c50b7a43c32d7c92b8a05ce29e117af54b95014

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6dab7766175d340afff69ac6ee7f606d

    SHA1

    6791d089c06a2482b96529b5e16ff9878f9ee1f1

    SHA256

    cc99350af99c00e25165603c471a08120a66f01f1b912bf2c951b452a361656e

    SHA512

    14f254af2ba27a096fc2b6ca48f0f9b4d3046e85fe9e47bfc273cdf04f2ebb46932f685465104393dfb4814e4920c7ccf5ccad747c72125296a20772ea788341

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W79VKSP8\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab897F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar897E.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06