Analysis

  • max time kernel
    2s
  • max time network
    162s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 00:34

General

  • Target

    1d3b3962d2867d6d43035a368cce34b6.html

  • Size

    591KB

  • MD5

    1d3b3962d2867d6d43035a368cce34b6

  • SHA1

    b95481d9b606be6c61e6e73f555136b2b70d0c20

  • SHA256

    407c87a38f8daac252fd95f3e88d9de6e120cd431400d1cfabc003aafb8d33af

  • SHA512

    6125aa19588203bbd735352bd55def2ebe7b7f650aa4f56520f16f07e38a61770564559104d6ce6c4efee543a9c9c24df2bd1a7020bb2e2d35a2640b951460e2

  • SSDEEP

    1536:NsPuhuTFpcWceujhYNMciU8hgKyvs4t7NsS4WHtDClAQGlE4WOJ8hBIFl6nLLD4w:NsPuhuTFpdAt

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 24 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1d3b3962d2867d6d43035a368cce34b6.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2728

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A

    Filesize

    893B

    MD5

    d4ae187b4574036c2d76b6df8a8c1a30

    SHA1

    b06f409fa14bab33cbaf4a37811b8740b624d9e5

    SHA256

    a2ce3a0fa7d2a833d1801e01ec48e35b70d84f3467cc9f8fab370386e13879c7

    SHA512

    1f44a360e8bb8ada22bc5bfe001f1babb4e72005a46bc2a94c33c4bd149ff256cce6f35d65ca4f7fc2a5b9e15494155449830d2809c8cf218d0b9196ec646b0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eec94be9419e50a1b5435ba6d5b92d90

    SHA1

    9033eeeda9d4da625f478279164c86e8cf80bf49

    SHA256

    9fb59ff9ad54a353a3b8eab6cb736a1d28fda8b1089d17a4a780c1d046149881

    SHA512

    66c0afd59896576375181e769152abd0acbad30dda13ad3de1e703036b236a8ae89e178c543f4f064646430a9cbf1abf15037337bbaeb7296763f37fad9e792c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba46d87082991034babe1017d7642319

    SHA1

    ce71a62ee3f147e8b502f2c57a56c9802ca70dcb

    SHA256

    7676626f6aa9f34dc38f936105262e4ad207c19ba7b0fa64b803c2a8899f7bb4

    SHA512

    babc6aec9f80846ab37249c6685dab2ae511d712a0d5db2d78d31df3fa48e465b31104511ea71631d4e672288d5cb1def99abc2f337916de5947f64888639d52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    790111fc372eb5767f30b8eefc443876

    SHA1

    0aa53ec6793bda7f1068ea337dc36d406e2a1a0a

    SHA256

    c46ab8828d6565e1c499e9632946031d42f8fb44cf93b7861a0b744eddd58445

    SHA512

    be1c219d58a5b19fde6d757433b559d52d3c952b93a449175220c19b000297a501e1d7dd945281e1167eb1d80c52dcd4505df7752d52f17e8b6ca54525951091

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d00a3b2649502fd277742e8318c7b328

    SHA1

    8824269bc7e19f7899c339086d60c80e25d25d88

    SHA256

    4089f2585aa46c99f192d3a19730f508be710c696581749cdf0e96051250c3c5

    SHA512

    4f3fe7654d0ccf35a5fb7c0bd41259aa1d3e9d4b8921f391a88dc5fe0c16cb331c67d1c29ccb2063602842df8cdb426abdb5a95ff068bc8fefdb4262f38e7be2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab28326bbbc42ae9af35b3d97a51d46b

    SHA1

    d381eba299684a812ba5fa91bb3220096c7b8aa0

    SHA256

    3b740c3ddc7fb737824833a0bbb7850b872f2a405b2e5c7d97a2e0b4c9cde2b7

    SHA512

    ca8ff49031a3056c9b563a94b7ebae2a107fce671e8a92b13c7cc38560d38f04ab7b71f3fab41863c805f06fd0cfbc648497a11f2494c94a947a790c5052fdec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a25f64a8596470f4e6f18f9784a67c37

    SHA1

    1fbb09af4bb0b416b2710c78810e9854665005aa

    SHA256

    9b28c5deed23f7ddb78bf4cf9a3eae986fc3346ef0b673e2095ce08525f42258

    SHA512

    c381f657e358b97b28b39113fb3f439abecd337f611208da49a7e8f41e9a143975ee4621018e8d8759410e4008e276846a613c2a2f45e98d6a5fd20726f3b883

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7e29c27567712633bce8c979faefedc

    SHA1

    815c84adb9a4259a7db379eb54575c57279d5492

    SHA256

    fc1aeafebba4d8f225c92da1755c74ba987a364d7fd15c98af1bb0d75cb16e87

    SHA512

    cd6263fa570206bdf92077323ec38bcc570fdba6e4a08087063454594531ad82d26738b45626a52cab3a3f263921ec124eef5f33a96b1a7e6d6e25e2d4eb6d0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a4a4388dd1f7539c4932d3d81b8430c

    SHA1

    8a19742d42bf2935449448371d87312e4b9afb66

    SHA256

    30df76d756f91084d86a174279a2435d57bb70bb7abc4147c4c07a538a7c3f42

    SHA512

    67255b82a396f4e7d27337bff80c56aae4533ba0d32f7bd8e4f6b89e4be620f5e409880444259e0693e54370dc9f636e0f252f91c0614854e22605518e5d4b93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16879fc8a59b4bd9ebbec2c6975f1b76

    SHA1

    ea80cfcbd3ac06b0e9690085b42910126e43bb05

    SHA256

    ee8d916c44b1ad627f1e5661f87bfa2656bf27867ba1c9d5e3f6699dc370d66e

    SHA512

    556d9a9b243633ddbc21aec4868936b81ea5f24a2918d46da231f34a6af3f041bae5164eca5ad1ea68ec674528105e4f8aaa9ea77711e233d0bd55bad3d63d04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9023640a84d5e793beab551f2c06d2c7

    SHA1

    4677ae282eb09557bd65522d4d6a38b97690022d

    SHA256

    0d16d1d077d0eca7c1b595937b692b3ee52403f5cf5cc7ff3dd463860d99fe33

    SHA512

    2186661a9112ae1335e95866cd2a5785fed0aa836e4756842ffa018207a42f46b63f032476a71bf6588786e13f35cabcedceed528578176416f65b590a79e77e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95a41aa335993821f303b1f60684c788

    SHA1

    7e86e0fab851a056ac898bf56462f7532a7dd507

    SHA256

    258ff69742981023e7049b8709557cb4ccf23fb52296001ef731777cf0e02048

    SHA512

    2c1d3bfbe0cc1e22cc295fbd94a96f584859aec22ba8ca52997385b8c3ae437dd84fe51816c4083ba58518c123f0e519947108ceed16a6c67e73c1a64057c8db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e61926584fd626be01566fe0957d145a

    SHA1

    0a5b939958961d41c724bbfb787c2c2c3fd43031

    SHA256

    c77fea11759d054a2993c958115ecea316a5aec80e28137a5cf07ca75c7d5f74

    SHA512

    6f840b4de1af8dda6e8d45cc7418e72c8bfe2be73ce5a1549fa0f60138accc00f29d2e18d4b7cb5857fe22b553482f92750f1c6b1c25a55521e779e36ae7629b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    008f2bc57b143cb5c428ccac83c8f3ba

    SHA1

    7d5b893d58e4457231c1382fa0ecf98d5bf70528

    SHA256

    1d7cd92d186e48be0d18af9c94fbd5d9bcfcda3d20d9ea1f161e760fc06bc6b5

    SHA512

    16e0951552a154c4e76ed636def9d488fb4f016f2532968fecaac7006db13b7be213224f0139f970015f6bac502ef8401b60fb15a8e02fce69713476528d7856

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f520eb98488cf9af5a4278c24eb810b

    SHA1

    f21d7763c551387a57b4b6e8ae9fa9c7e765039b

    SHA256

    6f5995c30aaf1c37ef18357774b44633c1614e8b8f04ae5d13eb8c0a34b1770d

    SHA512

    4e9d3ee71fa32006e0442ee8de29f208800c9230e2badfe8d00f064c6e8c463026922a5e51a190869339957d6638758483be6cdbf25fe59ae8b13ae2e8b0071f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cb0d0048e8dcdd6c533c223992688f7

    SHA1

    24c44f3db64e7d3c2c7268729ad6b9d51767ffea

    SHA256

    68d0013c728d99fc8bdfffa1195d48734010568119a6b6d4b5d60eb633ad6655

    SHA512

    2d37b77fed1b15c6f844265dfad453287332e86c5439f5a4e7f8916484c40ceef8cd68a4dd3c02b868552b3ecf51821fbb1f7115eb04d1f482136f1965b0111f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0fb2a340eb45ec0d9e92f53a895d63b3

    SHA1

    5d1b166fdc3d84deea74ebc7a3ae1c360eaafc63

    SHA256

    182744cf23326e818a47a3d67ab138b3eeee8901d1bbdb0c6fb6993713c643dc

    SHA512

    729baff29ea4de9d417f6a9d969027134556c6f79b0a7f29cac1c27eead2ab5128aeb9b2eea6f4ae4156a1817c82ff6ee7e868eca24caf460f02bf75508ef334

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ae0240120c7ec8b2ee049fc5827d7f4

    SHA1

    a4a0b0642ac893047a98b9dab4d032476a951f17

    SHA256

    d61d0a3436f4ef4a1e8bcd3e15a6518e042489b89d0514dbfc2d6a95344604e3

    SHA512

    87c7472c04af655a662f1dadb80fd0ed2dab72f6825e1b2e3d52813481fadf1bb3b8aae197b954db852430843441098aef6284f447ccac47ce6b890f2e5bd081

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    871558e4efbffba2bea4b4d887f92c96

    SHA1

    4c4e3c20171a6938323cde81ee6932a6ab057845

    SHA256

    404e13cee32fbce348fcb8a1106a2b7f8b5234f66023c1356b654912c8690a4c

    SHA512

    01bdfde963f66d0dfa4af80378b4e5226f9eff5b953e91a139a30bfd1c0d4dee9c4b43d386dce28bc2298acc88945332a7c46c2124fe5f1c318aba7f065de745

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e868e632e805cc737f0d0da43773bd57

    SHA1

    c2386df8a9dcf48377102621fc3eabdb49279f12

    SHA256

    43916ef170b71f118adee182ec0a532e1d4a3012199fe4c3a37d96fd5a54b4df

    SHA512

    f835abe92da25c55cdfffb9af457b504c632ac950040a79c3d5c93b0fce24683920cab45aef26acfa0b7bda904493abedeca3db8d2b59c6a3941e384f0225937

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63bd8b6bbb69ae3afd1d34afb8f3f2c3

    SHA1

    3c7d199446dda8741eaef9dc01f68d53127a6979

    SHA256

    cd8b54b2a73c4fc5a8b343946cd9b0ce0605fd57c0074a2dd21a289accff5c5e

    SHA512

    d31d8975fdca26e7e1bc123c5e599b5c733dd21c3f042d576b3de24630ee00dca64250f2e07c5129bc51f6ec0721f4d2d204bb3231744a5199deff73349c197e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a53c499a46cb95f400e6231999767801

    SHA1

    9f4f862881169fcb69d6bf884bfc848f24ece494

    SHA256

    29f1476d388bf1effd21940bf14c605e302161bc91e13f53e6506f5899764e9e

    SHA512

    fe5a206f2f1d04c5f262541ce7f98436980da1c4637415b329392f7660086cf7f5c3fec3fc4458958b7b86dd7a20eb225999421b50b73da18e00d3b7155cb1f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e731d842a5c1f6ab8a0248d074bb132

    SHA1

    7c1dd83b294a76b291450a01168cffd03a3a2653

    SHA256

    f7d5bb8bc2afea5325feaab3100e0c7b996dad5e11b1c955301a06d07f568ded

    SHA512

    02571331cb5b36c094b9a56faafa0418cde69da4b78e7d0601ffbd6e0e2e8e217391cc4ba6ba0afbdf8aeb716646a157910ce9310abba6237a7473cf3c72e221

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17df055f45099887e3e34d666fa3fa66

    SHA1

    9d459c4833890d674865d6a4fb7e084cfbbff1a9

    SHA256

    445ac0ee223f448582bb76be643d16bbbfb0a8f36c4dc3666659bfd0bea42d91

    SHA512

    03190605cadee3b12cbfa4dc601d501ccd2f750b26c1f26e2d218a0af30d4ef6a93916a32c3632fae9783a614c299f1c5195e0e17444221858e4fbb95b662df4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6f403f86d2fb279eafc3a640f98cb1e

    SHA1

    a7739c75a18cfd2da849a558a4997884a54822fc

    SHA256

    abdc724eb6b003fc8705201cc79555eff868985dfe157a1f338473e65ae74e20

    SHA512

    f33bad1d2a0e28478ae9f940ff8970484d8c0464cefc0d2532dc82f2cfa22b0d7e91397d7b554138f04a88f32d964e43af955911b2a295567f00bc4e9c1a8801

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ed6fdfd11fec64147bea36cdfbd0eca

    SHA1

    7c27787537c71d8a0e0bcbd8f3a6dec22eceb58a

    SHA256

    51a5e2ad87d909dedbc4467e8671bcb1ee353661dde4caeae10853d581af1cd3

    SHA512

    06dbac233f085b6a7e899f5f89f5e444b9003ff395e5cd940a68f5c08b37252383ef47443b075d8ac250d76fbe4d066161b67565f4f1c37db0921f20c68c4301

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5dc26954fda7fa1162548395181863ff

    SHA1

    e6663fa2f529370dd24f2edf9357cfc04daf282d

    SHA256

    12b8f84f53aa9f826dd7ba8893c069f6885356191f7291b29d97f9bab921c4c3

    SHA512

    173146a9a381ab21651aa54f5acc645f79e077b33e8bef99c458f98e35490927a97a964465f5006a056de855b264df5abaeeaa1825e7e444975fc515eab27ba5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2cad3ae9810121e0ad77693e97b39e8

    SHA1

    d6386bc1a8f91e247f1e4a6b618e8636accd2aa9

    SHA256

    dd2c07184476be24390582829e32c2c08beb7dded74d421e6dfaf3d89aae9870

    SHA512

    c4b12e7940561dec5f16de7b38915979385f8f756636e911bc88a283e860cbb7e67ad5e2a4ea287b5de2b122d3be39fbe9ae0fcabac1ed554199cf22cbabeb23

  • C:\Users\Admin\AppData\Local\Temp\Cab8365.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8674.tmp

    Filesize

    136KB

    MD5

    61b7682e703377c60d2522d8472ec424

    SHA1

    205fa2191042f4986eb7d2d930d81070f4777a05

    SHA256

    8068db10134871dd7f3fc5fff4638410a902bad7822622eeb933dd7e70dc80b7

    SHA512

    16ad4bfa04927d716b9f64938966c803da8599694c2b0304d34cf57fea4eec03004ca60929930879879f012a73ffed89f7c7f181bb2ce9ed0db3988af00b4ec4