Analysis

  • max time kernel
    145s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 15:10

General

  • Target

    2832d8c95c9d5ac3d5ade0187ca33784.html

  • Size

    47KB

  • MD5

    2832d8c95c9d5ac3d5ade0187ca33784

  • SHA1

    5062e02d2bb0916ac321ab313760abcbe871ca63

  • SHA256

    e46d3d8a5ffbae020403b222f4959cf1d7bd62a425f5beab06855e117ebf87d8

  • SHA512

    89a8900b2edb373f47d3487a014d46a6ef23d7fb30ae9bb7a236b4307f7c57d4f772a0e0334b278fc9c19928aa96ee776feb523269683328bd4ce245888e6865

  • SSDEEP

    768:mSHSSS7goEbTsBp0MLOPzFastWvWkHbPn2zBHxpU:mSHSSS7goEbTsBp0MLOPzFastWx7Pn2C

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2832d8c95c9d5ac3d5ade0187ca33784.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2180 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2448

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d38957a98ce65402f50c3447dab64722

    SHA1

    0fb4378254f757791d9e737514ecb957e365ef5f

    SHA256

    edcc6b3c8b006c41d0bae8b7a0bde75aa40e91298096348def01067b4a209be4

    SHA512

    c2c2278588fa7d3de3703449e9371f11073d2a67f88443d102385d31e9a8f8b2e12533a561e85ce819c8a56e795c3b49bf6f437a20302f74412d7a91fae8ac5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92dd2dce7ebbb6a02ffc3755e0f424d2

    SHA1

    cd8e0811379812fa262cb846e56198a4687c9522

    SHA256

    f4ccdda0bad133a98fcd34be8095a763cfab098afd835733a96c12d93f4b75dd

    SHA512

    70929e2d33811af7437aa2dd4ec44f836ae3d9bb505fc9bc1b1233c3fad17409a0578319acf32d44f4ee8cfe7068147c1146e073d225c854539dcc56aa7a46ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e632c539ade74ab71f448996092a806

    SHA1

    c0d3572082beccf291da7c3db5fe741d7edfc6a7

    SHA256

    0a926936604ea1ccc1e932d0407ae4fa21fa454dd1d243f82f8724a36484e8ad

    SHA512

    7986c533c0bae0eff79ba7183b5993ce8b1bf98a7cb177ea09cdc8bc92174877e44c5b1204e53d9bdd358e5e93072c96d2a75f5f2b71aab2c8a9d7b9dfe3a533

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3829e566cbfe052e9486e662650f4717

    SHA1

    9a0f3413db9594f66b61e3bc47d2265d0d1b4875

    SHA256

    ba17f70cf4b6a51c1b11efe89e1bf447573fbaa5b6a6ea1d450bc1aa95640d7d

    SHA512

    2acda55c0e93088866e62b7b309bbd657256b647bbe1f7f5a6702a0f338dbc893cb62ade880da620cb8cb60122695f4f0878332febb64f48f616c50ac0745cba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    742c46aabb835c7c86b583a19be4e048

    SHA1

    22b534d7bd7412982aa08560479e2d8b7c30cbee

    SHA256

    9642da958a72a0ec8dcbda8a94483c7f317b92d3637c198848d56a49041adfc5

    SHA512

    7159e11aaa70271bc33b6e6c532711ea96014853e1eebb724bcf4259c5b6bc668318577b317b09edfafa5fa72cbdbb083a6780589c59af816c2d9ec7ff84daef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd489e6e332e936496813f39982b6876

    SHA1

    f2c4b18ad2b105fbf73a62f34574b309629fc0a4

    SHA256

    429c5caa67c1da3fbd36ca5241cba219e88d98dec2395f32d7d8b875ab28606b

    SHA512

    8561cc6fd86c87ed13e4337d042dacfe35ac8c5ac39864b4a97a8e5622a8be84a507112d73ddf0b8b0e9773f417d8e29795228a1a2673cd8ebc922343392a9a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5914dfa0561dc0310e19d27df626ac84

    SHA1

    896db3e77d71baaf9330c55da101d221dbcfaacf

    SHA256

    afe254674a4b3ac663674306b3c12d07a2a3ac7cbe31849a84b7e36b4ecc9368

    SHA512

    1fece57a0e89c5d6f7e2da5f9e07ae2abe6db95858e211c7ca5ffdb5a212c3c09914d4359761a1ddfacde1279400a7af7865ec80bbade30449bdd66d9716a8c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbca388e36f2e378776ba4f192714ab4

    SHA1

    7bf2b9ad36ef1bbdb0f537ba5634c88a97de0998

    SHA256

    b03f76fc972fd3c5bf860b2746a9338bc9cdfe653cc5f427c496ecaa1957cb07

    SHA512

    45dba1f5ffe0c51d86a6e1d09a31d7922ba41d26695a5fc35f7db56dc65b494590af7cc6c7c3b1a7a96aeec599c60a3fcd49e2fbb7aebb4733ec29443bf92776

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce9fe2cb7d19f01df3c66f0d5f784643

    SHA1

    efd4ec8040faa7282a3cab8a2a156d0cbc6622f4

    SHA256

    f09da5f9edc0e4dcd9ac0bec131ac80f169db15439851a47ad36fda78e42164c

    SHA512

    38fbf0413d65d3f69a86c414aa9f5bd545b39f68404b8ac2e3a05b5b423c78e3d0a6d03db66de8de45ca08c8f12c3433db75a4567d909d603068e09be050403a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1951ef29b6915c30e59b9699998d60c9

    SHA1

    c7fbe20f1e83246c6ed62ea9fd2221b28bb1e837

    SHA256

    9f5cbdcf4bc9395c307ce3d3ccedd146d0ff1b1d734bb92b71eb5e9c6ed01770

    SHA512

    8fe557379f2d3ba98418aeeae0ed147dc5d4ef63094c3adfe1460677fb6893f0c4bedd796bf01f8788b402fd6889ffe8bad598e558d94cbadf5c44845b6d33af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7568771ea51742b08db87eb0bbf35754

    SHA1

    d34c9fae732b525d15aa2a64a1949a6ef7f3879c

    SHA256

    73471d504affff1f8edf33d1631aa77cb997561d31a8e10ed805f1c55151ed54

    SHA512

    8960e2f380f229aa64597e41c1154a40a20a1797d7dea92187b2c5520566387c201fc533d48d5f1735fb8b644510013a62d1ca60d7ae058165000f616fa52135

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06aeb0f1957117f5355ed4118ea8300c

    SHA1

    65b918e9543fcaae7a18db293618e37a488d52ba

    SHA256

    476ee72bcc54b4e7ac56a2cbdc52699822a08e1771773e40dfe97a464b08bb13

    SHA512

    d15780b77677fc99bd149500579c88753c6b91855db0ba6a2b09aa9e579fefa680439bdeeb3caabcecd0cc117ee7879886c6bc38968ab3a0c91424b733f1e9ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97c9dd4177016c0ba63ba337e9cb7d12

    SHA1

    327372fb0ac77f34faa31be705d7728a68384183

    SHA256

    d086ec53c60bdf164c6b41014eb38e9456ae4bc0f2c270f0a63fc95ff9ecb285

    SHA512

    0ae2b5d77f1f65603dd2d45fc393b25ff8fdcf30fe268eba56544090ba1d239739c5c9ae055c1121236804cb0e9497fcefabd2f09a78c7fc96913e7aa16b9c11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0e3410f2ec6d88c5c02eeef292c8a39

    SHA1

    583b412da1f84fdcba287e622a1c9756da0a66a9

    SHA256

    e859d18a47beb204e67040fa7ae013669244fdce0162154a9a2be61ff4f8bf31

    SHA512

    df930e8d7560505a56fdce5517bda90a096b97e7d1755bc553b9b7c60de04041eb4f2b01a667bcea454072e16292ecc53db33f9ee08dadb2cdd1abc5cf825bfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73f260e1255b67c2eefe95b4c21c152e

    SHA1

    038dc30e88a8820742e4285601135d1e666478b2

    SHA256

    911b84998929b7e60c1126429909a0d5b25d53813017d069e99211b9d8e5d568

    SHA512

    d8f587e0e678138ebcab499f206bc5db49f0d9fe76e03084d1aa809935fc9be40a9f40f519888e0dbc154a4011030883be1a0e557698e53ff7ee430f4ca2f9ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    052453d7786b6a7bee5b738a4abc89bc

    SHA1

    f6da2edbc1223194af1821d6d54113cde7f07168

    SHA256

    dfc3d4dc64a69f4ddd5ffe7d3d4e7d5f12ac0e039c75222f0d87e60404bf1fff

    SHA512

    b593f17a8cc9f53c7e8c3a55c533b1effa68199b00f1edb4a108bf4d3cbdb15b9fed139f168971d9ccd626515e4d5dcb302c34a7710203ec93c7277a1aa5dea5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JIH1AB02\getonline[1].htm

    Filesize

    36B

    MD5

    64b61f312cf8dce4fb28eb751b01ca03

    SHA1

    a2c70e8bc138120ea35886135afc3b458bc9f38a

    SHA256

    7efe917132dd8733c47958b585f640115b23ece525dd4acb041de089cd6ecdf9

    SHA512

    7dcd4544c7d88afc8e369e30d05d882fb829671679bb0ca9f5bfd19d1a3293ec8897c64e2d73fbfbe723294945dc6b1b27b352ec932fddd35cfc91f845ea2402

  • C:\Users\Admin\AppData\Local\Temp\Cab3F72.tmp

    Filesize

    64KB

    MD5

    d71dff97ca86ca16c3db8bdb5285fb35

    SHA1

    271c01246897497d069b81ed37af296cf6c1e498

    SHA256

    4a19255504acfbd49c4e1aed722c7e62b50b5742b860eedabc5f46160f8aefac

    SHA512

    1fed2a183296b563e35d803927e539d28169895f6ca5b522a1c714f222a2d3e578b1e167b19568b5ad4800b898f7ac041c7bd8f6bb02d1361b32cbdcfb0f682a

  • C:\Users\Admin\AppData\Local\Temp\Tar3F75.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06