Analysis

  • max time kernel
    76s
  • max time network
    169s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 06:51

General

  • Target

    0cd1fb3fc543ac07bcb732d81b02545d.html

  • Size

    3.5MB

  • MD5

    0cd1fb3fc543ac07bcb732d81b02545d

  • SHA1

    5d77499fd2ec23b1c242c92b007351ffe5002feb

  • SHA256

    567c317f6953760c61571df4c6b2020ab14cd921d34a08d54afd0f3706f53c9e

  • SHA512

    51ed6c83872a6a25cbb03eefea0977d171870f33a792dfa225893ede3f3ece14cbc8760076a03badf77fd561dbb61fc4c588977cf74894abb8bdbd7dffbe672e

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfH:ovpjte4tT6NH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0cd1fb3fc543ac07bcb732d81b02545d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2136
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2136 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2720

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ac32c1b9f6e76ddd01bf1179025678b

    SHA1

    2f1f8fccfdd104afdb892adaac9dc4cffd9f7b9e

    SHA256

    544771c99c2f5294e50058c18d2cd547d6a15268f6dc701854dd096b7b092387

    SHA512

    4a55dd4abbe61496b63c6b49b5b79d264f2341410cdc8c75efa76e0217f0961d8189e3f42d9ec72991637beb602569e03cef7a5013eed60cc8c23575a87a0a8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d60f39fecf192508e74f284e05a2826f

    SHA1

    bee1c34a35f02aa89fe2d49289578f8eae218051

    SHA256

    427df6bc0685489491aadd536d03b757d28cc0e444f27e9695f5eeebe25ebc3b

    SHA512

    f811e1f91e822a9b06a59c5ce0e46effb311b6358d3ea935fa7aac256cf2f1afe37586829515288766f507ff3df294bd41b9b361feffd9f0b42949c1b6319ae6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8dce35cf8a4acac98237561fa6f3daa

    SHA1

    350e40fc79d0aaaa02d28d7b274012d714a931cf

    SHA256

    a951807ee12cc5af8312c28d4e5d82ae58f8e02cb9ccf417c5f28b2dcfb330c5

    SHA512

    f64afeaa9e449a84b4fe1d6a8c7e7edd5ae72094359c5441432d5a590ef3d7ec25daa937f3dc2991ec5ccfc6d34fba57c65ce3dbfdcc7325cf59ebf380964e98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ae3e20fdfb684d15f4ab03ece6ea34f

    SHA1

    805e122b837b8c0a32bb9220a5cff21a4498f890

    SHA256

    ab464b85b33190f6d242a0fa57a753e1d02812cd1111c3e31feaabec23dc4723

    SHA512

    8059110f1c970294364f37c3bc2a1ab5aafe450710a540b4c376c3046e5d0a0b396648934e93c4b4f51f7946c58b8db7a08e5d3acf5b9dd1f22f8648a964b74f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f511f30fb0a131b6771ddb074a950c63

    SHA1

    212dbd6e212ecc5aee3fb426625ec1eca3d1b174

    SHA256

    553973b2ccbd223e4d7bb51ebad6a9a88f239d8646c887e473b6d378a5faa214

    SHA512

    26cfa1543e64380c1808e7b1286e21c77281bdd2322c704b4311661ca31667c6c8dfa566ad9d9e66ef8a83ee0f372a5b49da6c854987720ee007008ecdc3fc0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a14a4ef0839b81b04efbb23a58a06c85

    SHA1

    83eb049cb09502454c0d958c87543b367a841e88

    SHA256

    483bc4d42792a86c04e7f8514d7d61ebedb1928a8503b0f35719f8a9b8398c61

    SHA512

    16be9ebae33bf95e8c7e61ae32dd2cecfa3e4ba49bac25560a91c2b2150c5190706b7be3155c04990c744718bad1785867402d3a1faac8f1457776e92671e0ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd922d5813e611708cfc5088b9c9360b

    SHA1

    b74290347cd1a88477a2b8f63f2631a0d3c28709

    SHA256

    01af2d4a8af77d19269565a5f24280e7a1cbcf3f7a74a0a8150c9de3a4aaa6d6

    SHA512

    d5dcabc0e09f5a6fad33b90c698add40ea2fcd1b59fba0eff641da5baf3d04459d49212fb5450e46c10444394bb1bfaca8579ccfabc9f677368f919d374bf0a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cc8162120bdeabe93510a89fed27a8c

    SHA1

    4eaa5223e431ada5d69ef3b301fed54bbb35c6b9

    SHA256

    cf925176167f5149864e387ef05e4c5ab7ba651ea9f96d8a852e506073c55f6a

    SHA512

    12f97e7e48fa844299a7b37e24c2f2bce99a839b57b4a594a152616412e4a0a2f9dc5348fd22c1aa9249eca27668a96cac888ec1dadc42c336e194e8fa7ef1aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea821bf026d76b291db2faf1fdc053c6

    SHA1

    61d377fd6623663b91945c9ec3f4f050b2e96fd4

    SHA256

    0ba4a04f742231fbd1f6bff17b045e07315f88badf61602ad597d1ee2a3b77e8

    SHA512

    85979efb323b860346159dcfe00696b5457157bab93fe98d0f47afcd4dd96970e8827f2d5849920403444400c970fd5b2f79633957414e840f1c3a474b492999

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2b7385f13e756c3109c1af821f68e0b

    SHA1

    7b8e13dfc6c4ce47a1d3d1454a74d8762cc344cb

    SHA256

    37a26fc2b779b5c7a9e6a3c8ee13dcf7305b89b70f11b4fa9ba089fa9de0771a

    SHA512

    24d8a77821d01c3b8826a602e0857be18d4a7ac4abb56db2b25528f1a1daa6dde93e18e65107704821621de44f1c44255d216d7a355dd33cff393f2a6e80abd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e62a9b2a54f59105937ad6da3e1a1b57

    SHA1

    9139fa6387f3283ec9e1db7a3a9f1ac3190538e0

    SHA256

    ce4b39589c29c62c4933e2ab45bd2216363998e77acf481dda6bfe2c67bba5df

    SHA512

    4a6263b39023c76cec60cb213c15f75ade0a5956c994f85db8d4ed4ec73a0aebb0058b8f09fe29312d3600f3148caa66784301e4971f69dffe4a6b7d3bf8b7d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02d17fb0d658e16b159aec7e637d3a47

    SHA1

    5f42400adf2ab630f1ef6a6ab210fccccfc1e5c7

    SHA256

    3fc9e691cb1563de2a8d32bab6ee7ad00f98573de3b09ca2ff6a0b85eee63b06

    SHA512

    ef8a72c1f20d33c9abb4238815bcd22a544379f46616fa062fb3ea32064814be403a74b49aafed558d1bc8455fac881dac3c8b1142d4f8cf019dfe9a888a2bc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58272a9b849a00c83143eda0852aa2a6

    SHA1

    e94d62a6e299d33b76a1720b9334253c4acac619

    SHA256

    5b3829744cd58435587b853e42aea088792509ad44a2870e1b4a0050ffa60023

    SHA512

    395d4a8a9e847a138b1934d4111a05de96c5ead3691dbb5202c3bf54b60a7056f1b9bf7ce736279ab9e2a4d7ed5d0322a311a2f2ff1a613df31a7289f6062de1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aabef8c698db77322056ca117facc325

    SHA1

    39ed322aa8c99c4750f69a191af011b101a6b03d

    SHA256

    517749047e540588fc1b1095aae104faa124ba82f7142c81963e39506f6d67dd

    SHA512

    9084aa22227fcbed3ad49b6de0cd9306c2e638665021bdd41013b2052b0e761df56955ba153a981923dfd3104133e36f555f88fd2bdc7a46517915f15b068a30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1bfece0f4faa1e32b54b18c165f8f42

    SHA1

    48006011e238ea3496bfe08698194daa842c8c28

    SHA256

    ad6b87d2cea374e5077c2fc1f563b770e525e3056ad33ffcd2951a3d584d63fc

    SHA512

    a26eadb28db8767859cb49305af561ab9893b1d2be23a983980f34321feaa27be30dff1e4ee55a42e0e94c86362e600a0f8fb973a42948360b0b798bc4a2182c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1dc5d9f2e6c7a327a590d885b00f9d8

    SHA1

    bb3c500076295aec524be5168f1f8aa5c118e193

    SHA256

    4d19871467280c77b4f3a397e9419795cc211dca0ca0999bb6079cf0183fb5fe

    SHA512

    43aa6a7e24231446f4c397f60db2de86455a5247e1e13d0b5c076b84cabe408d2d00caaa6e4095aaa551971b7665efbbc34e39bd74ed204d0b24a8318ace74c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b64fb8fb72a81d3ff2727f1773377b6

    SHA1

    f7ee45a2185a4c4a2bf09e450cf89bb69a73fd58

    SHA256

    979648934364bba77df39783bbf78efd4c50d365e763e06eba691128a72895ab

    SHA512

    a149d80616416ec81fd34529f39213f99ba3cf87a0bd9e1656cbd76749c46674e223ef6e02e4a94a9f3b76f6b51fda1ebb71d074c9617c0fde404f8619688179

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af38c595b3e027044c77b372653f2667

    SHA1

    5fa6a3ac5413c010cb6d956fe39fe8c836c34946

    SHA256

    27e30f3c6e3612eafafc3cade15b58bdf7e149abe06e530effec2cd44628cc07

    SHA512

    a0fee0c79004994701bd8e7907b77c42860e832db0742af01600e106354291fe39facb1ac877da69514c54dfee8733eb90e8c3f216a65626257e5e473dbd986e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2834e442aa9ae13b84d7989d0150d30e

    SHA1

    5b80fd7e64795c1fcf911dd533e3bff65740268f

    SHA256

    3420076115f5b19b95c1c89ab760533b17282d68f545ba6f829a6ea3f632147a

    SHA512

    9942b4908624d84e12a3fd7572062712baf49a6f51af67534ff13b67fbec76314ef7f649401e791d0e66badd3ed47011212962ecc03349076a89f91c1f2224cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dac03b6149ba514bf64e74577eb83fa2

    SHA1

    c18ec39441c113446d1c0d0f04936af1bef438f5

    SHA256

    82f544e2df02e40eb643078979a0d390ffc0ba98f683db077aa68d6f8846f87a

    SHA512

    52215afe842e4a6b6fb2927b5dfcdbf2c35e9ec55343e7ebb5fd74907ad641414bf2ed880f091c8b352bd8005d7bd8afbdcb8d3352aed510f71be14b7eaf1360

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4K0WM73A\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JGM5U0T3\jquery.min[1].js

    Filesize

    75KB

    MD5

    9a236969dfac743ed10f46f9992bce1b

    SHA1

    2c0a20a996d10f7125edbf4efa78200f5237c282

    SHA256

    9c324229640a2dd730d3b14a87517f432fddbb6b0ad347e70589234f271a8388

    SHA512

    b0289d6b9ac25501dabcb341b97982f71bcdcbd9efbbb88f943f3ecf9d8e8978fa568eff7b4415acbde5c5b9c653ae8c17af06e3161627a46cc7d14bc8afb9cf

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SP6DRJYJ\jquery-3.1.1.min[1].js

    Filesize

    74KB

    MD5

    f5e14819de6c41710d1666fe388c4779

    SHA1

    e54391ddb5f6b5e28720789a6540e50328f148e6

    SHA256

    0dbaa203837bce8646d2cf3f8299b4a1fdb48961dafbfaa3eb284f0e2d98441f

    SHA512

    d3162b835208ce3244227648bc442f3bce99d69045354e06701093f4f014fee12a29cc05f08e11519a7bd44e115ad76521445e05eae62d97966f5d8954d333b6

  • C:\Users\Admin\AppData\Local\Temp\CabD700.tmp

    Filesize

    60KB

    MD5

    ac1c9edc35d2a5f4a140b303a67e81d8

    SHA1

    83a50995a6e920d805a023f971876ba7707c9e7b

    SHA256

    6a0c94ff959d2aebb0e9f6bed2d6205652009ccb216acf91501c39d1c050aa61

    SHA512

    598a7338a9ff9df14babcdc43801b4cf3e93f7f5c35e9d6f42c0cdc7f1e831480bdb0222520be8a2078c7906888892dd2ab08d7acc25b3cc7e1d2779c9b65f30

  • C:\Users\Admin\AppData\Local\Temp\TarD703.tmp

    Filesize

    34KB

    MD5

    a21b827ef7d2f47babd35dd272d0f125

    SHA1

    90704461c9e41b87b49c750ccba2711cf2aff3d9

    SHA256

    cd2f4dc36b65fe3f94ef1da412a252be14e7e773ebc0842d5ff5fb6090ad7a77

    SHA512

    ba0cd2e019ba826496fd9a32fc6d1466c39b09915241199826c1d45ef499c141544383cc84146f34a36360e7c2280aa8c6e55a1218d68f29f23c6f246abca1f4