Analysis

  • max time kernel
    145s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 04:56

General

  • Target

    06698f2959dde48d2f1446a50948ede4.html

  • Size

    10KB

  • MD5

    06698f2959dde48d2f1446a50948ede4

  • SHA1

    e250fefe86686946ee557b6d44875d3fa0d4cf14

  • SHA256

    dd7a077ceee2c3093e8df0710934180ae360550696af5d6d535c38bcf8c59e2a

  • SHA512

    ba3126a4af2d047a7f81ba887ce047b85d2dcc9f489eb62d5345f2d0b27a45e8a0611e3bf275aded1a93406b62c7a5d617b660e56a679b5c12855a20609b4f1f

  • SSDEEP

    96:uzVs+ux7+oLLY1k9o84d12ef7CSTU9GT/kzrCppaDK8CH6ddNlVHcEZ7ru7f:csz7+oAYS/UzmLaDzCuPHb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\06698f2959dde48d2f1446a50948ede4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2264
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2264 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2304

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fdfc064fbc4f469fe7b39b331f2f433

    SHA1

    7639773df7dcd74afaa8d5efef7c675d75430724

    SHA256

    142b1f553c43d9c1450f6e2f70462426ecca40622a1bc0a90ab791d9a67e0031

    SHA512

    73c45ec325373e7feb6138f086d0d92f1fac24406581ba18d22448e20dc7acd0bb1992ff6ce67428e2817c036bd0cddee074cb2ef1fd590c9846eedd7ddc706f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f254703add612026260da3d310bc704

    SHA1

    29d7f9d48e09796af64962a9dea44f97c0259b0e

    SHA256

    59ba6c5bf6ab6761086ba4555104c4b6ca42120198c9105e45ed041189d0f3c9

    SHA512

    d290dd213cba73aa9f23418512e6e64ce043a5093946652871c9ad234d03fbd21bcbc0ab61952ccd481cbe6c311c28901fd54c97ea35486ddf92fd10d283b236

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f3d027b7fb2425a01aedd74136527f5

    SHA1

    10c21119173624af439ae9a8a1d8750409e8f2a2

    SHA256

    889eec0170da3553cdff26a77d74825265cf222fe21a8fd0d364b58a59c6ab5e

    SHA512

    f22405bbc22355be2136fd60b2a18ce66eeab841b9782006d50a97b362c76592ab25a992a94ecddbcf4a58afaef22868a2ddd97de0ec13bbff5c4b4d32170e47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    996a1dda1a621c99999837b65e6aba44

    SHA1

    b9cb6733d7815afff15c1e8ea60b0afe75c02e7e

    SHA256

    202e6855d6bbf9cb0a5f0f7506dff5e4af58882b75c0bdfe615e6522769bb117

    SHA512

    17411da70d603710cbcaf9297f4cd2450b0dfa034f62e7ef8ca7bc8a981fb0edf121abcda8089679c13912da57203168e268192ff4e20e2d964ec4737c32c839

  • C:\Users\Admin\AppData\Local\Temp\Cab4128.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar413B.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06