Analysis

  • max time kernel
    138s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 08:59

General

  • Target

    1380c73328b3d32f664e5b8d076a69da.html

  • Size

    3.5MB

  • MD5

    1380c73328b3d32f664e5b8d076a69da

  • SHA1

    9893462517ad4ab0c262a8dab1909336b6c5f3fe

  • SHA256

    017f7ab4e6560e390247257b03d2d4d9e871891bc69076c2ffcebdd85a7afe2d

  • SHA512

    c95235c5bf09943d3611574ee38577490cc9eacb847c1d2a04989e64dc9f32b4eef7aadcd815ceb6e24ae6ad778e5af32bf37141ae1c76a0e2ce5f84447ffa53

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nfb:ovpjte4tT6Nb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1380c73328b3d32f664e5b8d076a69da.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3068
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3068 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2676

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37e7b8315d7765425cf96a15f906ca50

    SHA1

    6671ae36d1aba101e0b60753dc84bd4805021e92

    SHA256

    1eed92adfd35bfb6c223246c869cd52d7875a52233365a1dc40411f89c528549

    SHA512

    c9a8e6440ab4f77a9966a628b1ef7f42adabe5828f17a5de735a8fc420853073a87491e4e3ff5b26c14c8e1abe2805918be18dea6724c4a2bc3b63875366277d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7340adcf2aad1cd3e410e820e0b984d6

    SHA1

    dab5f1d7f3a99e91083226bde6a881cd50c142ad

    SHA256

    26265fe223e5dbb3fcecea59cb09815bfaab17134e39805b45740df3a84edda5

    SHA512

    ba10f42497a801e85d659b93e2e2fb0e6e1df925baa5556a8ab23ce5bb732998cfcc4b337b3c7db6761a95e10a4dea83b03aa110a9b9a72325c9d422ba308b47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d48231affa83ffb6c3c8c0e2c1cecadb

    SHA1

    aee56df5a96baaa8d5a0978a3eb2b69511c916de

    SHA256

    4942d2bb591a96a88469c54536eea6cb00d5e4ce300dbb25af2884876573d9ab

    SHA512

    7a6782cb99aeaa7d680992863fb741871104d4a9ea03da71b9ce6a797a103371c158988e055d4fedca64d7defff4b1f7dd38ca25682cbb8bfdb29a61d76fd87c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72e5e04e1c98f4d00711a68bf7d92358

    SHA1

    80a53d0e526321a023cadfaafe13c347f0913350

    SHA256

    80b8e8249c4af1c6639a5a6d9b66f842a89793e5ba3056d4bce55715cb27cec8

    SHA512

    ef9ade8ec7098cdedd2afe70940c422781a5ee7b50619e95ccc3626182df3fe7c2254bb41244a2638f0232ed3241217796ac77467981b6087177d9dc6d9e1a7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    058d95e1036ed1ed073e174caa411fdf

    SHA1

    c22d4b02de6590cff2b939b97a8da8df7e2bd1d7

    SHA256

    df1eaa0187127a45fa9105bbf9e95bf2bf41c3df5a596f310d97108d1b0fc3f8

    SHA512

    41757012acf668cacfeb989f6a022e6fd315854f3df7303e31de96d175ee6a29ca383fea3b00fe30e59257c56508c0bcd9b1a8a4cc89d66e7e711c1b75c6ea82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    359f2a2c27b3029dfa8f25d280b2fcc2

    SHA1

    e7376f4f6d05aae7233082b8cc37bf1ac11485fa

    SHA256

    1f14263c08cdcaea5177180d9e61d12d030d64fe021e2811e0b8cedc4770a4cf

    SHA512

    79a5f09eb8e17279d4791ce08bac9452ac0861b596ec4f11e85d506f5e89cedd99197924909979d386e38782fd0827ac0ebfc934002bc10a56744a46ba84bcdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff9045e7faf350e396579e74c91ce930

    SHA1

    20c97fc08527702aea2f204f447bd3cba4a2edf9

    SHA256

    e5df7004846d884360f04927147a05f3c5c9dae0add712ef79c99b705fe233c7

    SHA512

    3540ce53ab575b088ed3cbb06313b276875f5d1f1a50b3d649be91d9bc247ef3ca31a4f2d41fab456098dc161e8a6b0bf50771a3b34112a3c1a660a5ca91ac8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85d5646e8a2235640d8e9a7991e9008d

    SHA1

    ad4a508f1d2f125ad6c587a0c96dc3871e08dbb0

    SHA256

    09957dabb246e4e69cf8cd3a7ca31f52ba09b77486765efe7b85e6eb717d4a0c

    SHA512

    cbb1bc6ebffc5f86f27779405b5c92adcff78248e352ba456d234342c5b48bfeb301be7b44088692352ed753c18c3a8f0df3f8eb4bac74fb7ff75a27eec1a4ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8cfebdab28b6198b669d8807cbc8a46c

    SHA1

    85df7f3acbc249ead8ff0dae51f9f66833cd7155

    SHA256

    ea218309170e9a624da3e1058f92771a5c39ed9beaaf5963c02c79646cb0db30

    SHA512

    810e0545eb84204b64be2785088d8b4f2fc73bf9ed0140a14272d90e51952f0c123ca6a2ddf38cf46254bd1e8ca06b2c1661d2b80bd638e044455b8c9f63505d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3d5f0e12fc49a1817a1e7900375f336

    SHA1

    e2a2ea1718e10b2145d391c0f04d563e07f26a93

    SHA256

    a0b65a7de1eb56b9dc7f69c006401bf81ede71778a33ca0b34d743ca23766aad

    SHA512

    df5d025f0abc3544fd5d7540a92c3f04fbe727cd6bd3266452b3990e45d42b28289da16df2e56b99011ec5fb587c77c2970fc7342204e9702b448ccf6b6bcea8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18a3a9b4da45509c94520ff0b0015c42

    SHA1

    bfb63febb4c5e2c9f0bce8d15bf306a84064b715

    SHA256

    70a6c5557325a1412b6987b747ae2afdb40d9f56ed559c8c2afae3c55dc4e5fd

    SHA512

    08bcb27e2354e9f247d6818ab1bf92775e0b5d834699661447cdc207a59307603f3844d483806d6ecc0d287374f6641407d5ef1bc6c2e5dd48bde91f3d3da80b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    847bc35909dee13e31f8f97a0f092596

    SHA1

    fe9e852074988b9bb1a38ab41a70aa310c14faab

    SHA256

    c14d30482d62c974ebadd8fcf87f3134ba26f4cf225cb3f65fc99d74292c18be

    SHA512

    f2dc6f687be605ef35ddc2a2a8427e22a52a2f7b046dfb3a404f1a296bfc463a75f20d35472ccd65725b50ca0fed829b26a61c79a7f915f004dac37848ca9e7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c6b8a36195af05278ddf393cb0e682c

    SHA1

    28ecc97ed9ccd208bcf9ecda2c44c4115254192c

    SHA256

    57cdb6dac542d372e5a3895008259c695dbf2f98f20178282956bd4b31bdfb11

    SHA512

    88d9d16fab560ef099fa0cdb06e74393a732a055301a6e09d09dfa92654861ec9eebf970c4ca76d805f4d43a2a4288f1a954f234703ae17d7e0a7e3f4d1aca9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    927e322c6118ac217c203c9fcaff27f9

    SHA1

    ea00f69a502d0c221970242ae68e7aa2b3588a69

    SHA256

    de03da4fb8152d14efdfbcd873ec90e9e9e6207bd0b29ff21d340c2d7b586921

    SHA512

    8f2cc9e63362dbc57071aa9ba72f867ce3ebfd2a3c91f2d4dfe006b7f787ce2f0278888d14c9e7b041c4b2e3814e9524e222d619eed5c5f28622ffb57c45628a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    070431255b3fc5e038bfcf88bf5aeeee

    SHA1

    4c16ba1d95aa8d6f4c7de691d8dacc5ef66da8bc

    SHA256

    85983f7da963e215cde2c1b1a5bca379268ca1aa21750f361e64e6b0989f4297

    SHA512

    d4c5123387542f0c172a00b81617f33c29a3c645b60d8703d6ecfc9b205ae5994844b7debef8835fd668447492bb5515e863a156f6dc05eba83eb2846e28ac51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fd640a36a019768ed4e056d80c73804

    SHA1

    66fec449210256a45542673eebc866abae12d7d6

    SHA256

    90b646e9a18041904bb1e62787780b757a0694f6df6b0a9da45e1bdf7e759289

    SHA512

    4e03e2662937227831f8165e504b4caeeac224b304d6c6cd2fbcc0e4b059e88c99ade204557ca664ccb75ba61104330213f307308cd91232534c9bb854989009

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68a138b6e68e168d3189c35111de4b36

    SHA1

    8a44b637c27d98348bbf7ee0a6c9aa65ce429473

    SHA256

    9bf0f70431696b3a51fcb2868c48c01b9b3c2ba3b19d29b7c9b8595dbd726e89

    SHA512

    b04f732c35829b2fda88ec341274ba67027a96e97d16957355d4507acd64290dbbdc1129243d3b47640613125f5d787f17b6e32b8296c33adb6e31e1857dd0f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed79891e2ecc6db7fc930e9d64d87ba0

    SHA1

    2eea688a4a98a8dd3a9f7c18284e1272b0a67d97

    SHA256

    5cb736dc3f3aa073b93bf12a5dac20c90f28cd077924385a3f72d4bcc5199196

    SHA512

    a3871f923061635631ad113f768a78ae13c4fdf1f6ef067a06f8f6d6aab7709fb7d9b08a61ad89d8534100fc3b89b75ebdf2f947ae1d2952e25fbf7f9d44694e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a61af93db84f146c21fc8dda5588a50

    SHA1

    e30d6fd40aeed9ba77e9ebd6cb32273382cab7d0

    SHA256

    31faa51ac213d784d79064b0a958c042615a4c0b44441a367e5a9c28121d42c7

    SHA512

    a4d6f02a6397c48898008b2967ae53777edfcb649f0593719524c4d5b0b9f65756e1045b26b93cea0eebe13906745d5d4ec84aefbe220811efd8d0e3d9ce82c9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HVBRC7A9\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JIH1AB02\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab1651.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1652.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06