Analysis

  • max time kernel
    6s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 03:46

General

  • Target

    03ba184dfd0d670fed2d0f1a3d12a1bf.html

  • Size

    3.5MB

  • MD5

    03ba184dfd0d670fed2d0f1a3d12a1bf

  • SHA1

    8b3a0716000c5905176b26fbd2f39082306b4892

  • SHA256

    ccd199c3499ff93b7c7c59e37198d864bc0b7d8472574af71293750e3c0f6f0a

  • SHA512

    823ebcb95f03441cf90446ce728909c7d534a652d95317840b897d10a455868b94964441ea5d0611f4bf87b7b6ba1f7fc49cae8a2aae2875d01684b293f8fcac

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NAX:jvQjte4tT62X

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 24 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\03ba184dfd0d670fed2d0f1a3d12a1bf.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2324
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2324 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:320

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    889B

    MD5

    3e455215095192e1b75d379fb187298a

    SHA1

    b1bc968bd4f49d622aa89a81f2150152a41d829c

    SHA256

    ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99

    SHA512

    54ba004d5435e8b10531431c392ed99776120d363808137de7eb59030463f863cadd02bdf918f596b6d20964b31725c2363cd7601799caa9360a1c36fe819fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    943a1ba84e9528ab73be009e76b9440d

    SHA1

    334221b8a22b4753afbe6a4a3aff2f57afce8b4c

    SHA256

    95154a6e708948d5770ce315dd7055f5d2351ac0d93195948ac2a2a7cd380491

    SHA512

    8e0df9eba1b318f11f023ecd236c8ff3116f0c76f21efdfb4ad1f91d07ea063a314bc078ddab59082d7dc6b6e6fb466a8e16ab91b793b30bae8ade014d668c3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    176B

    MD5

    56fe3d1e24e2167ec6c53d051198edfa

    SHA1

    e453354ffa049d3508faef342db3ee95a70451f0

    SHA256

    c512e97f05eaf24514bdb5f7677ecc5e25a666ad3bd9cd7370c14437d2517fda

    SHA512

    2bdc06bc4175660b119396bf743e3b4ea4369d99ddb34f35f4ca52b62588e1b69c151fc762ec6ca3c0e857229556399420b87a651f9f9fcdbcb40ca38843411d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73dafd346df8d68680fd97785c51032c

    SHA1

    fc154014dfb9566fe46ebab90c56b6efad9fd71a

    SHA256

    3c4a7f5d0c6669ebda7f6905938ac5a808c8b06cd3314af84cf7683cf9902e31

    SHA512

    75e10ff00272b11e75de86a0599c7e95a5e3faae2ad0aa0a72486efc42463912e404e4109bd095b1c14739e341a570e8eb06962c4044fcc8981c10df2a08b643

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a15d5b97911a103c978332f4dbd72f52

    SHA1

    b662ce24e2fbbaf2d57e82263c4953cc244c48f2

    SHA256

    a06b4c93c061dd3cbf30a774a38ca72f9b47aa3e61fde218ad2ccec8b7d79c3a

    SHA512

    f571dbc65191473613ac8235ab8611effffff31dee6b05463843b56998b7865c642c4149bf66677b97e5daf00979570a1e43fcc5ed69d9273c46d69bede6a5c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3fc148260cc9ad2728d9672469775d5

    SHA1

    ca866bde86dca641abdd1eaf7f1a3faa8e792933

    SHA256

    982a7e01958a8ccd7c0de7ba4285b2f440b9872ff6d810c13f8c4f8e47668de0

    SHA512

    a30abb2cd38d66b3b23c13553aaff2c0eb9a258f5380527e733ffcbe75a0755c159efc80c938522282eb5da04cd3c924302172870a64255449ed6da98cb50012

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6df1c13c831fdfc2f24a5bc47ae98a3f

    SHA1

    f392d23a3dd71797f34b3becfe1d32ceb21c10de

    SHA256

    88cb7f6355fb87fbc672553bb7bdbd2df15096c2de6e197e710488771d5223f9

    SHA512

    e68f0a5342269030951400de5b1785420b8efc4ca5fcfa9432cdf4d76da622b7312993891e77d3319e764727394accaf3fa6770e36862f467cb2ba8d1603cf57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6428e835f69e54afcb48eec055495d72

    SHA1

    99a1d0d45c4aa6225cd8beb6cdb82770f44392b1

    SHA256

    46923ed8d1c780af8465cd136cdaee0bd508d71699246c529e3e6c1416ecb3c8

    SHA512

    11c27b86d86a310b92c4a4cb8a9fa096915dd41cf4246f20a9e6be991329803a21aa5757c4719475c8e80fa04f5cf539b4074679f5150152580b01b10105a982

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44b5d8744eec80418cd30493f9da19f3

    SHA1

    fd1a0ac482ccab273db88954cf096b78cdcd23c7

    SHA256

    7e7d591bac8d922762de59907954f07ca537fd62f65328071fa249831700dcc6

    SHA512

    77a941768b055cecb7a177af6c3d51db6bbb7bd2fd9b2cf5a7800e72a6435b2a2d51595335da5196098fb8341948865ae00af447785fe658e81252eb236604ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76c2e79077abe7ef80178116ac381f0e

    SHA1

    e105c4f5bc76eb498d520a8c40e31bd86cc5ea38

    SHA256

    ef6c05e1e438f301e3d22aa7b91316fdc0cc0dce56af033dfe37dcfb14ebaa81

    SHA512

    d09ca462cdcada263e49b8f20fed6088894c92b32e7d410fdb3297b934179fdbc33176daa1d519bdf2dd33dca499d6f5ae9971404fee1f9615bb7dc7e1e15c2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b351085e80ed2e9ef10055baeac37a8

    SHA1

    e9240f260cd67d2d3d8795e1d84017304e8e41c3

    SHA256

    e6583e514d60bad2a257150a268b2d66b24dfa9563bc5dc56e5a650c425c6db6

    SHA512

    049211de3c58086057a20e6852d826a73a46e2593644dba48213e9fc12ce23ace387e288c826a269201b176f1106ba75e2d873ce468568510f20dd59e373bd9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6366c44141c0744bc9143139096e63e

    SHA1

    5e0fc9f90090ea5d57a23b69178c45aff8468fe6

    SHA256

    61d7e807fc0fce9db4139060d77a04205ac478092f2b9db95f1a82977b0ca148

    SHA512

    2cba19a564b5d4efeed76f0c038b2976d283b2a8134652af568b40385a60b21a4175b2d0e3fe23db09a1a0e7f0c66f9691df63f9cc01f50e8416f0229026257e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53edcf6f23ac4d90e0bd2189c97e29c4

    SHA1

    1377207e54bfdb20c3bdb1d787eb81501f0435b4

    SHA256

    9b23be0d16d6d9c9a1ec2158d38f28a032e2ab75facdd6e47a8dc24c340e57ec

    SHA512

    5cb4e5916c372db06a33023de323d647f1371d2624a98f60544ddd76b0c8a1d5b4dec63971eaa7e92b91c304c504a5913ef8914cd5667a2f1260eccee780c3f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08a11e79055af63391d55d0f21bf6b93

    SHA1

    944416ac9bf827514658722e49b8d591872f0687

    SHA256

    184153f950409b676e9f3d85f821ee59941cd64836d2abdf2cc648e010a35470

    SHA512

    17b2fc469bd7465a5ffd4c05951793b006616b140ba6ccfc862dd89b4fb2039ac674f8df985a9dd7cd3b90d830b0a16dccf1a0645db097b398d72726d3760510

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45757cca5ef34de5243c857104fea8f8

    SHA1

    9704c1c7335cac72aefa2a9839ddd9e780255fd1

    SHA256

    16590803693a6aa067d2ad843437a3102c0f2b1c6f58378e9d9e06c221e003f3

    SHA512

    940ff8389d1081b873d783b08e464302100ffad88c908191a34419be79d87612b2016707c5c7ff4f7ffa4d063bd9a9cbe3904e0b39558736cb0145864492b109

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59aaf132385d6b0c3a5dac408c017a22

    SHA1

    74eb9b72f3efa5c02624cc9b7ff011213bd4aeda

    SHA256

    bec49fbe87eb28a9a5d3d8a4a5783565c82b48643ea5c22ad6f122f2744b479b

    SHA512

    0a9f7d49805f6f5ac5128350a98e0e299cb8d036d5bab8795c8dbd44a3b07794b6f4323527c1de2d2fff86b371a2607f4b966f5d3ead9f8261f6ec794696b705

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ad5cd18932d088ce33595aa767da71f

    SHA1

    08a3599831756a98ee02e2b85f567df4d4f91ed2

    SHA256

    291e6bf9a36b5947a0f56aca3f2d53b958e41a11abac8184df96cfd4a83ec2b8

    SHA512

    10a3b6fbbc7700e6f429390481dd301e3ac659ec26a81b6060b7dc9acb3f55d157d5758ea1a19c05f1ca5bf8af139195ea3439024ae3a92dfb1becae79c19102

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78e31f64b9c8c7f5369813fb055bf6a2

    SHA1

    1a19f304029701f66761e3c20bf66d842a43932e

    SHA256

    78d8d1eea23ce9ae26ccd601d91b533006cda58bbeebf6abe279440c1b50a82b

    SHA512

    f527a4a42cbecf022aac4221e0a3bf433034e68a308d8bdfe1d02c619cb49055425a78f2b54e4cdede25b1de3332db903423ea97f84eb66f2faee528c1a5221e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d49a005187a8dbd1768963f10efa03d8

    SHA1

    0f34b239021721c0e09b4e86710eaf9a4c427f32

    SHA256

    0027afa8cd77a0985416512b1998d8f2ca01fb11f9aa1ec9d1b86431534df5af

    SHA512

    bdec538b1465b9ec0ae0f149c501cc19f9400dea1c17b8c617ab8e6c10f4457b6c56d480afa30eeb992b8601e97502c5e2559d1d7a0e57922f6e0a74bbe92ff6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b303a63d941c3498c75a583bfd05751

    SHA1

    1c28a1bf725cc24f99c12a3d8d6d9fd2d9161cbe

    SHA256

    27064f2ff182c5cec0238bfb4a2b8e5bf04986eb48342aaa3a8063131d597b65

    SHA512

    a09f2b8cdb22236ac6b06bca948c1fdc11361eb2a9a33fe107776d47bb068a18c02185563aeb710be7bfc9314e2e53217c4ea2786ce426bb180dc59b999c2f38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    120980fb4fc0aac208984b6adf386c75

    SHA1

    c867e831a21f7ee0468c192a7af80dd717cafb91

    SHA256

    e903236aad152851729fd63d5a8e721d72bbc7ed67ed91d60c98e2f5fb81dd80

    SHA512

    fa5bf1d81720e08299db90ac6af87fafc37156a2147f86a764865a5a290a7b71952f5e04a5b3062f1174dde08ac858389bbc55b35eb6ad8d450c262e9bc8db05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e0e75af45dee03698001b16b4ccc624

    SHA1

    14d0bbef23066ac0336dec55889b88ae7aa294a8

    SHA256

    741405487eaf90273baff1db78bdc95e58da78582bd68e92cb6b1339db71e595

    SHA512

    dda95953140727d8e4b5e252446498cf84837ac269ff8a53263b97fff83b6e640d14f0fd9941aa391fa98be69e01aa32ef2aac0d0e7d6fe31b6281b2b46a0a9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e801e793c033e210e181ab790813b99

    SHA1

    a0e1b93986a874b258bf1eeb917c803d91c30475

    SHA256

    d161348eecfc5486e855f34fd2faa3c7d114fed631368fb8e0df2759689e45e7

    SHA512

    49881e7641bb4a79a5fb6db12866bd3cbdbd81fc1c9302af89319873748f3a0f24f40083894ac0068b1a8b9b84fb83a71b0affff2bcb0162005cb0015ee40224

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23a788ba61231430bb0c3c699afe7c88

    SHA1

    b9bd29128036b79a02adabbc8b214ae8efb5c5ec

    SHA256

    1bcdd405cf71e35cdccf64a7e1dbeef3f54f01b475f9a1de0ec26aa173b0518e

    SHA512

    1b2bd395303969f2074343894c833366c93bdc14afc71033aac2289c307e5314c4581a316b7d912e2c086556b01015b698363ea59e35f218fea75f8209b8bfd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    8a2463427484b8ed77473b5b6c60c74c

    SHA1

    26c5bda47b947a438f3a448185ee860341197177

    SHA256

    efa1c933440b47b91e54cd79dac28388dc358dacec15d7aa3b1217cb74e064ed

    SHA512

    5eec6ceca4211946414867a8dd2712cb1e7c72a7d76dee90d91e7e5d8b8b3569e4a37f092514e9cb6adb3f6da56ebfdfe308b227aa24f747d39656654bb61dda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6JQJRSK3\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EFRFJ0PU\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z63ZX46C\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Tar1C2D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06