Analysis

  • max time kernel
    0s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 21:35

General

  • Target

    3dc4aaf4013c8085e74a2cbd43bd3293.html

  • Size

    3.5MB

  • MD5

    3dc4aaf4013c8085e74a2cbd43bd3293

  • SHA1

    ead6db5f8ea3dab03a848f5498791ea1844e7f41

  • SHA256

    388377a372e8f0064530ed3f4f1fb4fca1596cb7cf237cdfed1a3fc99f6c813a

  • SHA512

    b1136b9425f8f516a4c4fe8b16e17c9975c2f2493b57944906750cc50ca0d44fb6762f3b5ee771ebd058acffbd66e809f4e11c46f21c2d3047496ce3d0f1303c

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nfp:ovpjte4tT6Np

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 18 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3dc4aaf4013c8085e74a2cbd43bd3293.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2116
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2116 CREDAT:275457 /prefetch:2
      2⤵
        PID:2196

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

            Filesize

            914B

            MD5

            e4a68ac854ac5242460afd72481b2a44

            SHA1

            df3c24f9bfd666761b268073fe06d1cc8d4f82a4

            SHA256

            cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

            SHA512

            5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

            Filesize

            31KB

            MD5

            f9cf432cf115ce64da444972fb1e0a31

            SHA1

            0ae9f0c37a5932c69bb4f29aa5bbe6763e24557a

            SHA256

            6018b982deab4fa855f933d1dec58332cfedfa28d3bd9300ac197a782f812c81

            SHA512

            d6d005d2eeb68c3626f5c9263ec34f46f64fd37e4869526f60e0287f363eef60746a34cd092ae2ec9620f674a47d11c942b6127c38f4e19aebe3c6ec915816ab

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

            Filesize

            17KB

            MD5

            5d6c92df3cf7334c515531beaf8f0bd9

            SHA1

            0f7fef5113c0902b2856788cc300cbbe647dbbb5

            SHA256

            1c17ba891d6ea16dc67a2119f8fd2ca0cddf3b54a086b5edb259514f729c9de3

            SHA512

            96ef490e84f7be3fd4ef9fb78d8ceec57a418d07e016e5156bd111807e5f8475882f4a326931cb9698d89c5e4fd83f7227396a6fa5a2b3feccfbe3f8e11ee7d7

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

            Filesize

            1KB

            MD5

            a266bb7dcc38a562631361bbf61dd11b

            SHA1

            3b1efd3a66ea28b16697394703a72ca340a05bd5

            SHA256

            df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

            SHA512

            0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

            Filesize

            252B

            MD5

            e00af24b4117e1148a090d13f35566ff

            SHA1

            73f07f9275cd4d87d1916a939b91614e1ded91df

            SHA256

            91e35936d4785157c26d229302ee59d306891879be51335347e78571477d206f

            SHA512

            1ec65449d79de625a473f0e199b1f28a20fb200c9c43ab1652298f740748610b9bb96c7040cc7f5b36d3612af6de5485653bb0062a63d2e7fdfe76db88cbc538

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            fab20bc0a5feca3681d05e11fe423c09

            SHA1

            2eef73a5757f6a46827b039fcbe0d5208b12aaa6

            SHA256

            2b2337133602906af85fbe9da26b59e5b9cff12b6e39f9973b31b21d0168d25c

            SHA512

            417d17bbca8646703daa4df959ac5178b58103e718f573f5aaeb3e80dc855d2cd7898d4d18937fb01eb165104bfcd7a5c14418181b18af8caae1b7f660ad0c85

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            00ced07c4c64d70c003bfb947e10c352

            SHA1

            a2a95f23a3a29bec9d3f64c3207dea4002b1bdd2

            SHA256

            51b5a628e957ee1cec6596a6b401882b19c8d0303ebf089c4a8bc5e4b2dabedd

            SHA512

            82cbabef359e6b561b361e16132f5bf10dbc14c9315e40664ef52613d0eefc38d6332a9beca05eef324764ee94483cc7a6274c63041dbd82b2f5a9c0c742bd16

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            ddd0dcea194e71c409ca5afbea6402c3

            SHA1

            cfa8b275530627dee8a8ddee0d28d2a3a692458b

            SHA256

            3733b02c806c4edc5709715adccd6ba1fcccd68a0fbaef5beb038f567ad7a591

            SHA512

            4c26e32073132543750602799263bb7b678a2184ff6237d0fa8b5ad262f336ff0ef75f2b03e87542b7feee26f821218e3e6ac180777b9d2a4aab2f70fbdc2ced

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            e9c68ab6cf4a8083698bb1ba3de1266e

            SHA1

            8326a52cb1b144eef0bb2506cc2c245185d7cbcb

            SHA256

            aa6db610f4fb7c14118c9b2b55e14e3d40bab6bf8e8f918175a194bdfe86e4e6

            SHA512

            7414bd84d1a3680a4c17d168bf27c54a03bcb4330be9415c5e7dfbefe34ccf4c61cbbe828327505956af0fe04f6eb796dc6345a6bbda0a6935ea7b8788b3a126

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            71af8dd250f311f573a57ca401bfc42d

            SHA1

            5fae89e438a8e0caaacb00ebfae8b086651d9fd1

            SHA256

            ac22a62818f1a5b0c5579829a6165f85a506ff0674ed87d699ae750fa9ee2360

            SHA512

            4847dd4a3ef24ca73e5f37717917e01bba6a108a757b15d9ca51b06452b5955b61a1e5cf709f4b7281eb32d672d5e99b19e9881414eae7b190187118fc83bf6e

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            61d544942d4cebfed7884c5fcd56bcb2

            SHA1

            de1107b4a66d95f439de8001f15d6ae110f90501

            SHA256

            87a85279c80a0d80dc771d29138f775945e30f982b557bd8a6414fba488464d8

            SHA512

            0d222a92319c9969e8bd0e2c9fdeebb2f45daa454f26143e6d0fc898c23547d718152c6c1e528ef9e21318e7644fc3b1b575ed6c41ebfcf4cd901710aed29b61

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            bedccf1cfde245e3b7524d1a61a608a1

            SHA1

            73708096ae7b21876293bd2030ff53fe3b84aa05

            SHA256

            7574aeda23ba92aa130b3110b4502ea2d63b910b26ec8e04b25e9a84b936dc28

            SHA512

            8e1980b3dbb1d77b98872cb7b607b7d9d741125a43c286103c903266fcb5fc44b047f8c476112469496c1eed153e69f90f043ca6585f2e0d9c875cf189fb1692

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            f6a2d1a131de671ab70e39d6fa91e87e

            SHA1

            e36fc2d3198d0b352ea274df0ce1ee4b69e9190e

            SHA256

            c11eea7fc458a0f9b00e7748efbb4fd2e899a495d74e497cbee9609ebf7a23be

            SHA512

            3ca806c729ac6f9e3de60bae3b91e23e266c6b6066bcd5c157fdf0f12a80279aeaf74986cc04442522b55f98c80323db5a3d53b329597d391d0f0fabaef81937

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            4c9cfe79bab0cdcf239f6b1bedf44c4b

            SHA1

            cf3fac29d9703da34a2738009ca7a996a67c53d7

            SHA256

            663c3476c7591848c2e73c28da649774fe72cbb7b728c2d53cf1c8c43ea9966b

            SHA512

            43575ae7a4b712b2e6dc45cbe39b4f1fe3123a7d13b67357886357db93bdb1fdfc3b93fa825e0887e73863d56abfe312bef5cf3ab16f237e48bf110dafe52176

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            0e2409d81b3dcec2c1ec6a79aaf8c417

            SHA1

            1c7744cce31c4795e7b73b11a8fdfbfd95ed6adc

            SHA256

            3d358cc115fcb99bc8c81105f4fd6c97e74b0c00cc4095de9fb6a7de8bed73c8

            SHA512

            b51643e37a3170059cf8c2454f7f1b893e9aee18349b8dc07a05d96c7c87b7868e43a5e0e63d2acc3d4161fad5551d2c8b959b4f6438d8782b32c428c89a41c1

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            450e81846d13068e1710ce49db7179fb

            SHA1

            fe783e3b9ef51ed026ba2a9ab5156327adcda413

            SHA256

            694a59724f4331cddae98564f5712991d6dc30d37b334d34e4707c829c35cdac

            SHA512

            473e2fd3c0dcc6665e4abeaa78c80dbcd2628f6cfe254d26db205593f1e35ceacb620add0041deed1efbf2bd0d54fea96bca1207f59bcd1f77c1baec5bcc584b

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            80883306d5cd6db13ff3429c8b280a12

            SHA1

            01fa828a0d00eac921171389003f0c62d9c97dae

            SHA256

            5bbb82fc5813b9a0d92743bfd90d9683e7d3874584d566c1fc5546db11d3ae5a

            SHA512

            cf77b8672780c44f965806906730e0e6229e2b660be292f5f616cf1ea646e7d065d159426e68e3e9a737ad2f0668626ec3467c8477883e76156aa8029de24aab

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            fdebfa455a4162ed5c98f3b6effd882a

            SHA1

            94e312693285b9013985d5402419c63f4d067af1

            SHA256

            0bdc65cbbd918a5fcd3e4a82d9deadefdb8958c834a64588e9fb181852a46d11

            SHA512

            a5652ba52be0089b557e48e2c7dd1b057f204d1d00767ad075e0965ec3aa7cf52156d558678644264b5fe69fb5dec1a3502f24308b91a120fbb3c1e74b3612aa

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            01a8f8f1bd9e032cae5fe2974f94b9b6

            SHA1

            94ccd186d6c8a6c88a37cd76b1e081be673c7d5f

            SHA256

            ed9a38edaf6e7aedb812ed9883b06ee9b263cf6b0759139b588bfbce9c7f663e

            SHA512

            a48e6d8b9e10afdce50b1b5f0f773dd6ab1da40680719c7afbf5a107d5c80f58e5c94154a47bbf84c8c6040b9799b672cc8938cd58039a5d689f4051a7cf3737

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            8fdf4c5f6e339d48a1b2470627be300f

            SHA1

            68e7c6f42fc0bd4bff65fae97ab879ed9399b373

            SHA256

            7d8f22694e7793b195b6556698d071cbc34d68c64402f1bba7662dbe9b9c552d

            SHA512

            dfc8fd3ea36db4652886c44d0bbd2415bcd88886f177faea7dfa6370ccafd27f6169c26636809c3c73dfabc01a1602ed0890246c34686fe74e4ef5f9884e047d

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            9ddfc3b138471c75dedecabc49f68b67

            SHA1

            931967158ebf01f5d4a7bfd35c35226dde7777b4

            SHA256

            6ff86c580cdcb99f38787d376445931ffdba83d1b2f8de600353e1bed4d0326d

            SHA512

            54d601a21a8ed39d8ece9bc05158e0df6f627c5937c087016e0fbda07a2bd300fee12f0801f2f568cd02816e1adf83e0fd1ceac89e64ddfa093587b2770ae31f

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

            Filesize

            344B

            MD5

            1d7b8e88da445f355b407a5fa7950fe8

            SHA1

            330624ed0ad53da2f363bcf894a9913afd9dd534

            SHA256

            8e51e1ba9ff1f3f73d6495d2927f4053e5c7ae87d27a3833a72a76131c82ba52

            SHA512

            e3331aa46d83ee3986bca37c166d90edc153c73bb668415f73e236fdbac493d371bb3944a2c204c98565f09640c0afdef6693743e6f8679e45e73e870a5514f8

          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

            Filesize

            242B

            MD5

            324b0c2e1f3385c94f5aa40e4dd5c5f3

            SHA1

            59605f0390d929ecc2a47e9bee9d0e3da3259243

            SHA256

            45deb61ac19a2072f0fa365fe9d54a9cbae6cfea8d6a0e792307aa226eb4df71

            SHA512

            03436c641aaba634a14d9851d5d34dc8f8f4d8d8bb9f5daafb01c3fb09b6d769f0515197f8c77b3014c29947a1d9dbd48f75ab5a9ff342ef4feb7ec0dd8957e1

          • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

            Filesize

            1KB

            MD5

            570a07be5e618681fa654bdcd77f860a

            SHA1

            26dc12803d15723f3b10ba79a6c9dbe6328b0a53

            SHA256

            e5e7b7600b178514a7d8da23187b04b9ce56bab481649c7ee7ee89822d7d0994

            SHA512

            6f11f50e443e95a763a8e610c77d33d034963d4a70c76e8c90846c736f2d04ee77d48f71f9d06564382aea902f5d6f74af6dc6bc9a0f9ebeb9594ce7c7101e5f

          • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IQ58SQX1\jquery.min[1].js

            Filesize

            1KB

            MD5

            edb1817a52ae1440612e77a918d5c69f

            SHA1

            e57767b570f4d80546a978b2340e48d05f242481

            SHA256

            b1a7624538f9aecafbb205e68de5fa36cddfb8c7421eb8f2bb603daebdfa7490

            SHA512

            86c9eb6e72b46f0de245612bfcf7c6c6d0b60cb53a50e8bc59c4393665a0f57f4e72f7fbcc66057d5a6ce24f9e0e804b56ab334a06d58f150e09d56ef6901f12

          • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RHD500AQ\beacon.min[1].js

            Filesize

            1KB

            MD5

            34fcbf783a28492029355b3b9d531d9a

            SHA1

            248d8cc67cbbeb125879c138431b29512430879e

            SHA256

            024e0725a419096f7405879e795f8bdf64c0c243044d3ae6ebdccd08b0df688e

            SHA512

            59f613886e4a16f6c80ac0a7930892d296a16b4191343dee9e66632ac12f73d8355e6244101f2e1149be946d7d8979c9b48ca04edb163d4a40028fa3d9d0fa9c

          • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UPFVLWY7\jquery-3.1.1.min[1].js

            Filesize

            1KB

            MD5

            7c62ecfd5401ab16c0267dfc4ec0c20e

            SHA1

            0b6178fdc794500f8f92a282cdef59ce18fc50bc

            SHA256

            67e0c54b1a0e769aa3b99a373d00206b7596623535d6405d7352776081574e00

            SHA512

            c5b76c2c6483895743018da598e8673ca7c3954704e57c1ce2f2a75ff100902239a297bc13d49d3135e22535441aa7b4161472b81cb1aa263eb45ee782fc0f49

          • C:\Users\Admin\AppData\Local\Temp\Tar18E3.tmp

            Filesize

            22KB

            MD5

            52346416905d72db7830b704ebfacfc8

            SHA1

            b3f3be470742bd356be64db95ef0712dbf7cd50f

            SHA256

            4ad1d6edb8179c03c1981cf73173b20fbeea64484e2bf03120e7bbfc343de0b0

            SHA512

            b59781f6a0353be7152eb32944147cede7105ce264a5c87150cb03392835c993cc83f0ac7b4f710dff494752b56bfca0531c70dd20da7146e4eb7d237f4b370c