Analysis

  • max time kernel
    144s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 12:40

General

  • Target

    1f26f99f429d3f3763b29186ca2f85ce.html

  • Size

    57KB

  • MD5

    1f26f99f429d3f3763b29186ca2f85ce

  • SHA1

    fce7e2752199290e039bd9e3c803135f7b04a673

  • SHA256

    e6a75799d6e7dfecaa05329b0316016c9c91f1890362810db9b0665094fb2310

  • SHA512

    6d0b3bd6982f50cd1832b29acc4bb0b9796c203c69d49d77c4adc273b51f35df8bef8f3866369f532e148bb1ca4538e048c514813ef928e505b4371e9d320ab9

  • SSDEEP

    1536:gQZBCCOdr0IxC+db54pXXde1eZ2Tpvrinq3oxwLnoCLuEzLk/cnGKWyFjhO+pBMR:gk2N0Ixl54pXXde1eZ2Tpvrinq3oxwLe

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1f26f99f429d3f3763b29186ca2f85ce.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2004
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2004 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2264

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    19b160a2fa03a4202ae31f4f09a379fb

    SHA1

    ab67b203c2290a94ef4ae12090a1c5d683c9aad5

    SHA256

    939eba16bd82c3e341910abfebcf2acf02c69b572686761dca4405acdf6a6f02

    SHA512

    980f14de5c8e878bdd66b068822b110743a2928371ace86af75932acdf103afb1f018caa5a6b6352978910de638ef1fb1515d44f0f4e4ef23bad6d1f6c6c1629

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07c1f2a502a0f9e8c397776f965d1537

    SHA1

    c2510ec3c9358bc5d60d3f3ed6b342c6c0959bbd

    SHA256

    6cdb24719f847e194c61a7ae333778eaf11337698516ab69c9976923d9faac5f

    SHA512

    8fee7d9b869b9bb75fee748023bf6660148ca5f048eb26249d9624903fc072170257dd836692b2a0239d62a1e46f00d8b555542eb550587412415d22355ef7df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e