Analysis

  • max time kernel
    185s
  • max time network
    246s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 04:44

General

  • Target

    05df12ef04c1c4bef656fb49332a71fd.html

  • Size

    89KB

  • MD5

    05df12ef04c1c4bef656fb49332a71fd

  • SHA1

    b54e7cd9c62e2e1c0d0806ce4bb1ff9efddfd0e6

  • SHA256

    e47aef0feb8ed086186a7efcabe7b13aa3b273e6710c970e758179ba18efad1e

  • SHA512

    5214b363898e1fb48e4c30bd8e4215a153fe2f214ecc40cea0b53d59ac1b059f4166b35f5b2b2790005124c884da2a5dddb65857db4023a2ce022612fbac58a3

  • SSDEEP

    1536:/MnNpBWRW1p/o9v8zAxWzXxfUHCiImcwloLedM7U6gopyetHsKqCOt4TykB9rbdW:knNpBWRV8cxSXLmcwloSdM7U6gopyet+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\05df12ef04c1c4bef656fb49332a71fd.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2672
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2672 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2948

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    700218cb83cbf9fafda92b29f06b661c

    SHA1

    3e7c58a54aea6ca36ab392ba20b838925c5f5d43

    SHA256

    c3a4af835391a875d6150a5c01461dab0e18853bbf59d6ad44b3cba65aa293e6

    SHA512

    2a7f56ed5b0c2f27e91854147a3d0fce1e33fb7b39dcd864603840950f5b7594972f9840db9533d26fcc941ad2da93d67b00a8e0f6fb9fc59061b3b1924e638b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35315e0f09e5cbe1c63b7468c9e07d22

    SHA1

    cfa409448b8dcfe43886a23d480e24742d906310

    SHA256

    f98a411f927079b498f3956877ec2d4602349d63fbfeaf9e7eb4640d5771b4b1

    SHA512

    71ca0d5d92e922718e2ca39384c2acd0b6b32fa651f50aa1b305b2cedc7d73054531cc8e6daf91a9fadc54bea765c0442e76ae9ce287445f319d81de9e2fb0e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4ed8158d3bea748911de1211f99fdc2

    SHA1

    9bbbc2bf5726f505a81435727d30ea3ba9e29570

    SHA256

    d00c591c3f7249240309c1403f2a195c7c886ee2877dc332fa48e80cdec0c826

    SHA512

    b2732f6b69a8ebc80c800c570eb12e64f4f634e3582d73dc5412e1176590d40fcc12490027f4f7837fb572ceff71835568951041561aa8395ab20b017f9f8d69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc118761a68f0609d8035ff5a27a1ccc

    SHA1

    b0dadbf4e7ad4be6c9b8a9afb759c8ce576e568d

    SHA256

    c3305f9e2f250917551b14a4ba4325188b73e2bc51f90492049a66fbe49c94b3

    SHA512

    50bc10e97022439e9fe9a6374917e433a0ca7e01581c960696a0ac9213a20f01cafd896c74a85e4b2c8b7652e152b65a877cc7f175e2a10aed3ccbb4fcb2900d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a957eb63fe9248c100cd7ef0bfb0eeb5

    SHA1

    f8af7c80f292086a6bc2513b8c8077cab29203f7

    SHA256

    92cbb3b749c5982064ed77e272eb04e0537d17e14c5c36f0058808d84085f06c

    SHA512

    6d847d4ab4bb5d4b221efe0f1e52f0591aeb037badfa6cfc512982b92e9831e091709bc76c4b7a3fbb1832d7194e3d84f76a10dfb5806028960d2f808b5cb0f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9140fe318122ab3445cebf6989b5a85

    SHA1

    764c4e8a99244f722266920feb85d9394a81a948

    SHA256

    fde1a978d25fce2680858ee4667d6b8c24db41c00832adbf5ce9c0f8eeec312f

    SHA512

    45d7a2f2f67c6149e5762f0b3963267409acfb70652eb98d27087feb8ce6b0dfce049f4086961d8f2cd640eb18d8cca4e2005ca59a2c3906100a4171a98a32de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48f5c85e3a0329de23e77ea8377e60a4

    SHA1

    9cf2655b21c8a8bda42fd4372e8dddcd199edfe9

    SHA256

    c19c77fe23da89203ea03d429a40dd5f73bfb8b2708d0762b43550a247735002

    SHA512

    8319c88fec8074c49dc6a59b7ab8a8da2879a407b8951345a65617592cd9f5c9fac7bc1c0afa3f6bbc5b8696ba218d4d8823ceb322477586be92a9b79ddd05e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2173a7fd8f0c429be0bdc3073fe3a632

    SHA1

    aadcb1530469d3bf982d4a9b7e6246456ffb75a6

    SHA256

    d0c11eeb90774bd41467bdc07073b120946a18c1658fe97e9c532925e82c66c2

    SHA512

    b28df5ab17faf091a3ad3d3f7eeaccc3eb2094a48834609dd6129e902afd2f12690f8d1e6fcb182452372e7fe82e8127b64fb93d2ba5f62097c4e986278f57d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    570d8468853392851674bd5d972220ad

    SHA1

    dceacb850536065fe538d09f15e29658ba37ffcb

    SHA256

    a9ce2c552b09e9662d086b9a0fe30639f4eb93a4f6b75bc966e5e8822f9215dd

    SHA512

    f92630e0fd3d65e0fe34014b3107140a991d7f0ea5fc914469bd75318c00143140a49b299e63743a070f50abea81ba2a2ef5331c6ba44e2fa6a479b73a756a1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d098ce1d2e25c939da3a579d34f1fb1d

    SHA1

    d883e097b17c367521bd83baa202dc1385fe8f65

    SHA256

    bd3582627dcb2e271943d46fc50c716f7d52b5de99f53d11385bb0631b6f11e3

    SHA512

    2fad4601db717fde97c2ad794c8c54814cda07b85f12d0ebe2ca4a3e19b9b6918fb1df91e9ed4c16807b23440b5646c59dac87af0fcbfd3f67db9e0333998955

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03410d2668e3f29f947fc589df95376c

    SHA1

    e07ecf97edb33e670e48343a5e32d13f14bc7751

    SHA256

    68b09f8fb7e7a0092c1da845f1a0ade1da2411b7776e0e8658c09fb10fb9341f

    SHA512

    87c939f8bff9cb735be888a07383507c0dfb5fa9acf6dbd2cc4b7f571e873c70b9bb430103e7e7847e4868d3ace560a0e9ae8d31b53ffd903d122b25c031d432

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd488bbc399736888f1a8f45e072d70e

    SHA1

    b6b5f6d5b1885feba849e1bad6cb8b978b644677

    SHA256

    b7aba19092530c661258f90689055394a5795885376ad91d23681022560eadb2

    SHA512

    840ebe1deb4f2dfacab549620a04df87dfa970662fb7f06269e1fcf83b4c30a41957d1983012c8e004e97f8301f72e1ce33443f93a0664a6466d8cb3931e4a41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    205f2971902d55dbdb9a01a072287778

    SHA1

    89ad95a0f3620bae0dc37bf3a6c1b83671bf7ea8

    SHA256

    d0de1ac01742569c92dc9e767db437195b875e64c402e84cc812f9d83258a283

    SHA512

    9cc6b080cc967d783f8b98623741caa6db62c758930cd77a61cd00f3efb938e4bab9a016386df37ab7fea598a9d957a11a0ba068dd2d8e712edd656dfa6c1ee9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2b3336da87dd3243777619aa2a6723a

    SHA1

    a97f5abd27529e88eba662e836151379d4a91a5e

    SHA256

    b11e6e918fe8ff61ab46858faf9a567cfd721c07d651da57423664404ce3c30e

    SHA512

    402a17ade350dc576592f7021e99ff31bbf29283369ad91fe230ee36311410865a02614cfaba7bbf3bacc293a38e8762bc0729dcba2df67bbbcd373dc5601284

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8bf4f787d3cc998ebb7fae678025d22

    SHA1

    f3ae44e37e5dceea9d8b29b31787cfd81c71dea1

    SHA256

    8570ec27dafe9bc5511323ed0e1ad78ea0aadd76d65e8ef72e17a5920db1e36b

    SHA512

    ef7bcd1d839f3c11563a76e4c0cb3a0f588b74d3983edbae30ae15a9cfce5b1a7271a87b44cce45fc1789f0c890e8c45bd82f489592293da7597732154425770

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b7563da13e8f668c53a5c302555775a

    SHA1

    239538d27c1a4762d1708dff81d1764e2d0c7335

    SHA256

    6393e726a9d0c226603af281e778cb3dea12aff4f79d272143ed29cf37235333

    SHA512

    aaee837deea26db33e7232e412e6a932769aa9e31a2f91a492f2501227506ead57c5d3fd59cf1476ce05d4048058ee0513035232786420562a3011930b76d63d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a022390faed397ea622d90bf4a07079

    SHA1

    0f624ac814a1026a563509a17566bf0dbbeca7b6

    SHA256

    87e2f84e3de5b8f1ff47de241c1f9755945ba3c6266f8e25616e6e52b2b7b1df

    SHA512

    4cf60919307722893b8c5225729e2ad536988df36a29c28f1cc50df13fd4cb9976134ae14ba39c930278fa08ce84939f5cb10df310616ee0aa821ebea25be3f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9030560b80550516d84c188b0455f57

    SHA1

    718fa84ea88539f3073d82eb585c7d108af449fd

    SHA256

    a74a2d07218ef6764d5efc8216ba0abbe907bdbaa31a26139474dcce6b44b93a

    SHA512

    8ef022f5d0ee23a051c366ca918cfc49cffffdaef1ea4b79cc634c6d9369bb16068b38b99a695731cf6be9cbba256fe02be0cd5b02bd48d2735e2f16e52ddabf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d67042c0ca43333590de3d60de878ff

    SHA1

    5911a39aa16b4a67f3320ed25d0f8a2202c11e63

    SHA256

    4c246268372098d75de5920839e712269c8ba5991ec59a61bf54f7b68d7d619b

    SHA512

    e2d2aed67cbd8655cfc830a31dec2435909b3e3c22e936f08d74c9cd65fc19dfe7ab9ba87841323ebbbd2e017ec6a2e11fc371b1a7f527a2fdf5d7efa8a84f6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3fd34bdfbb8c596ecb74f0a0fa833c9

    SHA1

    1cb96b279267e4786b8f00e80c173dfd94acbced

    SHA256

    06be6196ce44782a6bee6bdaa57a9e5b891852652f03be425fa9920bfe2a7c2e

    SHA512

    a1c17e4509ef4476ca6549dfc40983248e98d76162b1cca933e8cad28b8fdecd75fd2afe26c2cf4299e76ccc8d8681cb97a3de70fc2546b73b7e87de125a1b55

  • C:\Users\Admin\AppData\Local\Temp\Cab2BE1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3112.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06