Analysis

  • max time kernel
    117s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 14:04

General

  • Target

    241b48e7df3ccf63cc68762b24a9b89b.html

  • Size

    3.5MB

  • MD5

    241b48e7df3ccf63cc68762b24a9b89b

  • SHA1

    ed6268e16df933e5d07fdc3c4c9498689d528bb2

  • SHA256

    e95d7e35246f9772ad522315e34302d81940a24d65dc5236b41b1577b027283b

  • SHA512

    f6d7f98b56456c4f27246ab05daec171b5a7316ff8f6bac124378b47b557c406d8d1c8ff3015dc09a549d2ff3282e5f75424c5c51ec23d951ecab50dc51309fa

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NGe:jvpjte4tT6Qe

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\241b48e7df3ccf63cc68762b24a9b89b.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3024
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3024 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2236

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2e0ea8fd5d2dfdb3dba2bc8c2fe17f1

    SHA1

    19ea6664e1b5878386f6a8daab0caa8e922560b2

    SHA256

    dfb32ad4f2c2bdba96bf8cfe476d43a05171a550e635c514c8dccb4962da6cc3

    SHA512

    4b9cd1031ea956273c6a4c0535fe66625affae1783a390e9e73ca2a318e6bf203a6398c73d31320a9d3bdfa451cbe5ac0a6f2411074060657588519c99907b2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb7d7283b06d283730e0a3a21fee7c85

    SHA1

    20c6df67279167745493c1d92e49a93a60816504

    SHA256

    e842f693a14458054cad57a797a88390475c77a375d60bf48bd3b98ed0df8887

    SHA512

    9a7bacc01d753b167c55221b5f1ad6f936f9c49023e640a0157dc0eebbf9df7fabbe0b62e348d8be25d2b9c9b681550b66f65ce204079cdcabf8ec96616ec3df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8eca44e5f0dd92779295c068da5c345

    SHA1

    20acb60d744f2b41fdefd02ab104d43eff257afa

    SHA256

    dc53400a4734e2d0316be0988202082408d4e3c95b6a9b99c6e1aec153b889a7

    SHA512

    56aa684a7d817bb9174a19f268016ce02df42932b303c9f4e82fd65da29adaa6bf962391446da4bb8f905755667b977b2e5b79dde7bb829e2735cc552746e16c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f8c0bfcdd6fac77ecf5d7d96961a48a

    SHA1

    b501fd15fa2cda479d11518915d7542d4b679b38

    SHA256

    a49a34f84756d808b581c80afb5b0384e7461eddd67932445fe8ae59eff08a16

    SHA512

    fe120ce4b3f5c26801dd746e3cc314398e5566a17232da30a1841f6f8eadfbac76ec6b69444c450a202f0c87c3c513706b3e9590889698f5bbf6bcb0a9083976

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dcb4ab8d148b04192cf9702e8145387

    SHA1

    b5ac529bdbe5a17b64336142992af6f7dc5e970f

    SHA256

    38e3b235ec9045958ed25572d932dfed306c0d741f621d7bf8bfe1cac6924089

    SHA512

    ba63d92283e330e2b44a778d7555c44091cf9ae2ee1ceae76fc19ddf643af900d8e47650d56d003537159a28496c328bd03f53c55ed4f3753af48f3853748fbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93dcf497a7b5183690869ce27a2b0ad1

    SHA1

    643ad54d7d6d272e2e85cc5f9c7cb66bbc19d101

    SHA256

    a036ea219a9117c3f3eee9cdfc3ea2240b91e3fd7ac6a0924b3455e61ef9fad3

    SHA512

    ac9badcad1e1fc91377942d07c155a0c56b82228e82aada810f10de9825bc42ae61b9c9baaba6b82a63dc74c5b795e38cc25a86a1aa69987cc142ea978131c07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a114a194d55a1c3ed8199c5a8c8a48be

    SHA1

    408ca26bee1e006b823db1bcb86427e5efdd657c

    SHA256

    2ed5f7219fbb24b4b3beba0f3847c3a170f991d3222c4fe55eab5fcc012f373a

    SHA512

    8d3fcea67d11eafd23ead672ec46a17d36094affd4a901b1e750fe52564a9e90ae91414c0e0358fa48caacbf6e7aa689e7db5049ad3f97d2b6dc5346790deec9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fade460ba4fed5e5075f74fe6a73ebd8

    SHA1

    f7dad15aadf175f46d284642090477e00f7249c0

    SHA256

    b889a89fba32cae77d45aa878b1478fb302e70a71c969ab9b4e308549bbb1931

    SHA512

    9ffa5a5634ee48b01936265e72f7fd7239d39a026381fa0c69d00e3f9cb19f31314af74b0229ef4b75e48c14dc6532a643c5237e268419437e3a21fac57025fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a331127f1561314a8a1b6569ef7db8b

    SHA1

    11a614b8c62e1d9c0a3adce420d7d157051a7b9b

    SHA256

    2fd99a198e7f8981d0cf26fbe27b892ea74808748b1a5bc51bad0c4c86be28e4

    SHA512

    d97c6ba799c26607a11bd5a181baa2a725035225640d620eabad84b9e0c7ae774c93fa848ad00e724e363865dd253eb8a05dffbde362cbbf67501af9d2b058f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3d0ec89083379050035249c8105cdca

    SHA1

    0f1f61e2bfb631673c2e352bfc7cf70503ea6547

    SHA256

    0ea5e175e1db7864b946f882198c17549f96902f0290e4535055422d540b4fd4

    SHA512

    c539559f4e87f88cbe8a64e47380b2b76d85ed82ce89eaa5f2df3c6e0a9ec1e37a9b6ead6bab1230288f74c573df08e495c4fb3eaf15457b9e0bbda78f7d53b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1324633cad0beac170a837914cf64b9

    SHA1

    ebde34fa7f16f9750558d4d9539a2d040925e019

    SHA256

    76cf2fb63277e51c59b1e94d93862efc4d94b9bea423c820ef8df6e9ad987e1b

    SHA512

    1a323f5a18eb29a7c6e4aedcdcc1046b6fe069fe4b33160b8868d88a700b6aa7f530c8ee2e443a3dac96614d3f2697444fe2383d40238d3548dca686b51df06b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91e90e6a38aff907862d00b7af37b42e

    SHA1

    d9300a894da0dcbc04a9a9b6d0022ca30f7cceb8

    SHA256

    492ee7499d6b3526f604f99134433dbfb01b608a786e2b29edf97ca8916ec859

    SHA512

    289744bf709182a84d536cd52c7614ea91edf2edd78938eee18b1726b571d90c85d4a94a9df6293b99e0e7d7ac85a65daa52c38108fda5e8c1226298d4cc9185

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97ec4da17aecb8cacc33f67e0f1adfb9

    SHA1

    a5ccb141b975a1eb7653244a431943b281fffeda

    SHA256

    2273575d763260ceb9245ce44e76aa23ded68b6d4cc7f12bb0d34f57d104e0fc

    SHA512

    927ff462ef3dd3c9eb5fff6fbf30fc9efd56a8994b762ce7173095a4b42889257b9b7168847c41c58f71a197701a9db31df4bdd5c9c16ab88b88f7c2ed534a19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d3ce8533abe25b4e007a7bfa0461e31

    SHA1

    a9953ad627834220df8a5753bec391f87cbb1987

    SHA256

    bf55776719a07e36c884740b2e6fd69788f1404e26a3429aa367c3fec6f08536

    SHA512

    60a58ef0b2c8b37fe1f90154cb5f1ea7321cbf2484e4a7910a0975880a1c915e0036352483f2dfb7d3ce87b5398b5e7294153ed8f1ba10d8abb5860f34dde103

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebd0d3282b4e9511dba26f2e396dcadb

    SHA1

    9d93d34d373a2dba1cf0e231ff1f54ef2e5a79c8

    SHA256

    f187dc36580217eb81a8d9389d109bff7b8f6e627cadac314edb51a938697bbb

    SHA512

    4e495fe6ae80610b3aa8678a89689405733ed184fb3c8218c12d47ab527be68d4e00c256c97a194cc33dd14b82ace6b7e9790b322e7c729427ee954ca0782452

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f7a1845c5a6cd9f517b895a060bf3d4

    SHA1

    d45e7f53105fb5ec519bc7d5d4869b9137e7da7c

    SHA256

    0c37f673252a2dfd3e914d455e4a761fd09be9e288b55c96354bc077102c05c1

    SHA512

    cf179e19589821689ec3ed456a22db766d70d96fdd6b412b8aabaf9f6a7cca8aa355fe6b10e94cc72eddd5c328469364776db3bfc748b0920526fd49652a0cfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2401aba9f56eb9914ef19d6046ee527

    SHA1

    9c161b8720d69c78a584429d322682cfbaa4ecc2

    SHA256

    9ace8d41418e7181d94cef020f38c88fb42811cc8ade627defb2e44d6dd5b7d4

    SHA512

    f380b2fa47170343dc75af2a7492d2e779e9f95903011cb9ad9f9264210e7509750d90373905d478351bef115d98b82ab7e1beb6da0795577392a0935d5f0f80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20ef90aeb1ea98e942f5e0de23bf8234

    SHA1

    8b08aae517b8c0536a4144ca46c795749a3f6086

    SHA256

    f4633cfa3a07f9586c3af28bab6631c1a6789847614681017d56be326f67c45a

    SHA512

    e1374e77b9cd9b70c5e3f9a62cd78a3d6e1d5181fd8ef07741155815f53d90379c1c61fd7034b427c6abd6609667b045c04bdf5f5a4aa9de068c38500753b298

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2602d3479c6959a3de2939410cc39fe

    SHA1

    b49c6f592355dc235e5f2a0a2e4b2d5f1c0c0805

    SHA256

    b5f0246050eb46a0022f221ecd9a00b55053ba6d4e82fab2de04ca14e0350ec7

    SHA512

    c82e89da4e8b102f3c671517ae6ee36c43fed95f7ebbb2f7f07a19d730b9b41d5bae0aad7620de501e2d5b379f7b6209a9b030c8a54da20e8d007ed64a8d0ac6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RU3RPYUN\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U9VC31Q9\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U9VC31Q9\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\CabB711.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarB7C0.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06