Analysis

  • max time kernel
    139s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-12-2023 06:56

General

  • Target

    0d1055036f65f38a04355d91e9ad946a.html

  • Size

    15KB

  • MD5

    0d1055036f65f38a04355d91e9ad946a

  • SHA1

    289d934ca1f7d3199051835c036ad8e8fcb7e53a

  • SHA256

    e38b0707275da71c6ee8e9e179572ce37300f2d2f5ced34833992d398f9998c2

  • SHA512

    49fac2a03f36bb1fc09f36d5777aaf862743039eb6c821159ff56003831be141e3613f05f8a8673ca98a259db02a856c5634bc810fbe353d06ce328fbba39478

  • SSDEEP

    192:unqhP5jcJNK3bF6MWUeCiF7y+MIzAtsSLBS4oNRZkkPgOpT1qNYMzJx1a1SEzpIf:pPci0Fgk1pZOx1eB6rbu7082V

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 61 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0d1055036f65f38a04355d91e9ad946a.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4876
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4876 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:4600

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    878b0490678e649cfd1b02746ac46f7b

    SHA1

    cb9128904330660000406c3cc3a8c84efe7cc22b

    SHA256

    01e8c69e60cf9bbb9c5f520d8073fbd736f4c19a3e088f8fce6403e817aca9e3

    SHA512

    153deefcc854bb35cbfec23a2562835160b4cd19c8cbbef4587e9c50619b72e8e48133c6f0a1eec7d3e5585999446a6102fb022315c3d535558c81ae74c9f38b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0A013ETK\style[1].css

    Filesize

    165KB

    MD5

    65760e3b3b198746b7e73e4de28efea1

    SHA1

    1d1a2cce09b28cffc89378b0a60cbb1aa8a08c4f

    SHA256

    10e40ea3a2ad69c08d13e194cf13eb4a28a093c939758a17a6a775ef603ac4fc

    SHA512

    fbcb91f26b7bd874d6a6a3b1d4d6f7277ded091cdae5706c285b4d5d17446a1bf58572c224af38393ce49b310a51d5c5d60711c7094e5d32abbaaf10d1107e1b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0A013ETK\styles__ltr[1].css

    Filesize

    26KB

    MD5

    94006ca96d3d4ae1f04a15131f4c9c69

    SHA1

    43e6100dceaa5b2c5f28c1d26ad3238b5b87718e

    SHA256

    8e87e3201cb198d801ba8863219743f232f5f1b3547482da80c0606e8cba0b41

    SHA512

    47f778b8c11028ab0625edec958ca9cb51df9025173ded089d8bd932fe2f313a350147617789ace73f73384a6f6d2c63dc40b2ad7705989de52c27059f85e27a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0A013ETK\zyw6mds[1].css

    Filesize

    1KB

    MD5

    4c2e266587bb622926747856f9bdb65d

    SHA1

    16999e0d2a01b96b70a0ef191461388c5047f1ed

    SHA256

    cfddcd1ab28963d8219ef42d0b455b1e062521bfe7b100d4c47e0b9dd0a79023

    SHA512

    c9526cd6537aa068b48641fd2dfb93843fc5f535faa4cd856d4d3427c8f1e97d79c969215a9291fd50a96597c43dba3c45a3fe2ad32c78677e38f93dbfc32ca0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\css[1].css

    Filesize

    530B

    MD5

    0a127ad39a8ebe4207492293b556adf6

    SHA1

    17d3dad64e4f9139cfb85bbcca6659a8aa532a48

    SHA256

    c1294965425b5028a83bbe5eeed0cd9b92733ec41efd07e34532522d4c97b6e1

    SHA512

    5aa845c5c6c20259d9c6bc0c9fdbd13ff178ba4008865f7113387767db0ad39cd53c1d276cfa4997186fd39f21d30bf00caf8d092e5c04119d992368b1563df3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\jquery.min[1].js

    Filesize

    84KB

    MD5

    c9f5aeeca3ad37bf2aa006139b935f0a

    SHA1

    1055018c28ab41087ef9ccefe411606893dabea2

    SHA256

    87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

    SHA512

    dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\js[1].js

    Filesize

    186KB

    MD5

    54ff504d2251ac2f43f404ec47762004

    SHA1

    b35cdcb43c2053f4c6c28defc338924a55ea1298

    SHA256

    1db992c52e2c0395ca5215d3429812eb0c83153dba2acad7bca4502fa04db81c

    SHA512

    b705c358873239301483352cfcd05f56eb6d56647782651cccddc590a797e612e10417ea30272364d30a81770a6a93fdee907a058319851da2fd7343fad1135e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\script[2].js

    Filesize

    9KB

    MD5

    defee0a43f53c0bd24b5420db2325418

    SHA1

    55e3fdbced6fb04f1a2a664209f6117110b206f3

    SHA256

    c1f8e55b298dc653477b557d4d9ef04951b3b8ba8362a836c54e2db10cda4d09

    SHA512

    33d1a6753a32ec06dcfc07637e9654af9321fe9fa2590efc70893eb58c8603505f2be69084fb2bcbf929218c4e7df9f7a8bc3f17a5b41ed38c4d8645296ebab5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QPBAQNGM\jquery.fancybox.min[1].css

    Filesize

    12KB

    MD5

    a2d42584292f64c5827e8b67b1b38726

    SHA1

    1be9b79be02a1cfc5d96c4a5e0feb8f472babd95

    SHA256

    5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0

    SHA512

    1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QPBAQNGM\js[1].js

    Filesize

    28KB

    MD5

    db317bf6127f25f598f7767101d1549c

    SHA1

    fcdb7075e675fca32d98f406b9c236d38d681ae6

    SHA256

    85e7bca6b92ad88b4cec15e38fe7ede30de254756ae90226bd2726c12556ac9c

    SHA512

    9fb4224f566dd09f20a39adb5426bfca732eb23423117014a26ebddf422f12252aa42625ae08a75e521b7bdc92a97e73075f5fd874258bb6d28089c9609b0cc0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QPBAQNGM\responsive[1].css

    Filesize

    66KB

    MD5

    781608aaede6e759fe48d7967b0a6c53

    SHA1

    bc595134b15c604ec6d42dded9f6d167d94084ac

    SHA256

    7371dd376a195424e3df2ee7877a045a2d60c307b3b3a119789c7160b7c21b92

    SHA512

    0eadd4bd38115eee3db9c62508143e7b93b5ff5fc5f8f05489af21c6499ccfc9e741d4de740e75ab933a32de2a1ca5cce7777a60b015ba53e503196e75bd0c71

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QPBAQNGM\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RVXHSNZG\p[1].css

    Filesize

    5B

    MD5

    83d24d4b43cc7eef2b61e66c95f3d158

    SHA1

    f0cafc285ee23bb6c28c5166f305493c4331c84d

    SHA256

    1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb

    SHA512

    e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RVXHSNZG\reboot.min[1].css

    Filesize

    3KB

    MD5

    51b8b71098eeed2c55a4534e48579a16

    SHA1

    2ec1922d2bfaf67bf3ffabe43a11e3bf481dc5d7

    SHA256

    bd78e3bcc569d029e7c709144e4038dede4d92a143e77bc46e4f15913769758b

    SHA512

    2597223e603e095bf405998aacd8585f85e66de8d992a9078951dd85f462217305e215b4828188bf7840368d8116ed8fb5d95f3bfab00240b4a8ddab71ac760d