Analysis

  • max time kernel
    142s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 19:33

General

  • Target

    384e82173aa8d5106ec64805322ccf7a.html

  • Size

    3.5MB

  • MD5

    384e82173aa8d5106ec64805322ccf7a

  • SHA1

    e8fe9d45eac4365ffb8760b34e76369b6a6a40aa

  • SHA256

    59b42c7562e758a4ec8a403812b17fdf3b8a0f3bd29dabcb437db25759edc53a

  • SHA512

    0780ec2042bed8bf2b97aa7f7b6f41687d26b036be6eed72b9ff7472d353180c31aab9e485e55381565a2ee72a9f58ca0dd70e74707d5f5caa99ca27a0466dee

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nfz:ovpjte4tT6Nz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1888 CREDAT:275457 /prefetch:2
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:1980
  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\384e82173aa8d5106ec64805322ccf7a.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1888

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b2eda353f84506fd0b334cf9c3e3ed1b

          SHA1

          f90682c1a26740e7064f04c1e8eda4728ba19450

          SHA256

          b34aa41a0fb857eb5e6e104235a1d360b3fbe8e872709b8c3c6214ec71d23599

          SHA512

          8e0376fa454979cc521954cc22109f3c29ffb00673666af2e96c7cb76c7e808fc1425a73b2b5b7e1a472abe1155972ee9b02f3ae0b8cb4d22553f4749ce8fb41

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8209a776346e5249072308448b018c2e

          SHA1

          1234493e37d904dd9a6a329716fcbc026fac70ef

          SHA256

          c046d5324d3e4fe2865989d0b0f2693dfd383096389ded9a61c98419412b0994

          SHA512

          bc0ea64e663f2f09d92704578cc691b3f6ed05e67aec01d1eeed80aa7d4a9ba64995308babd2fffa3e5357fbfc18cd40314f77fbfecc10641e01d166623ea22e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0e375e63b3633f27cbfc639f4a412cb9

          SHA1

          132a777565932a3d00f9230e327dbea1dc2cccdc

          SHA256

          81a9b3d5df190cf6d3eb606452101487659ed63d65821ccba09735705ecefdf4

          SHA512

          e6aae2271db92cf9badf0561492637fb04e2266015b7b3c57ae77d4f9941a585cafcc99bb3dfbd15f238bed522bb3a14e4d622f466b5285a121349a5be52a422

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          785978b1d3776cfe29eb5df2cdbf61b7

          SHA1

          cf9f7bcafbcf5e2e8840742345e3b1da87860160

          SHA256

          351f92e9d1c2dc8bd3862194fb6c8341e798cdbf98d13efd6d757da5b166014e

          SHA512

          ad0615bcede374ceb5465f624a18a726d82be6d886e16da96a1257271cfa38d1b6c977e34bfc06f659252fa4c732dae8af55618d79d6f0654cfa82bdeac3e719

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ceca1a41be78692a4c16e97dff70ad20

          SHA1

          637bb1b1a7e0b994e5407b590eb0bccfb5ad02e7

          SHA256

          e5a8dc82406e5904120b176c2e1147402e2179e286f50a466e78ec21a3e1406c

          SHA512

          40b2ddbe8de90c7730b609c38150cf2003bf7a0bfac775c2db61cf535a7237e5f4e5efc622849773c7126ba8f2c08d034f4c5d5207119d0d6a6b744e1136fe1f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e5c0f1a5781f356b30be952fc215bec9

          SHA1

          c0ab59ef42a185b21046aff2f040e95f5a138f60

          SHA256

          69e3026589304b1e02ab26812a0322e6b3941d5acbb88180b20a7170cb9c0613

          SHA512

          ffa7d124f1eed120f347314bd05b879abe9bf3d5af96904404625a80edaf7c9d0cf19f287fb4310e9edd0bd2ae95cd0a95c3bac140a74e48fe62557a09a70503

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          618530a323735d0d5f52f449f55cd544

          SHA1

          e69abac02331c1227a1f95e7cd27a7397983169c

          SHA256

          c5517fb5658a4cca6e54ef3599cb5b7f48f3c243c301dcccf913924fcee44d64

          SHA512

          81dace1e249909b359697b422285c0f42908f5044aef9351e5c77956d9719bc347c6e2d60fc0a7661d1b5c7ccb52985e116d9029d7f6d2b40063a313cbf8bce2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f6a7ae9d844bf96c3d4af0f32f44d833

          SHA1

          118a3be2948a538c7e430370195cff9db43eefb5

          SHA256

          a27d9c3a83c3623836544e503a7876d25f48a3b5f12f32f1fdb63326fa4573ea

          SHA512

          d2aae3a4e7cdda2803cb987e304206b66a2d5fce5d69cc60a99f19543ee121537d713a27ec72e4906dcc13a1e7ee0aa08344c4c2375327bdaba71c36b36cdaec

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          24386a622e8f6e682bf7493d82633691

          SHA1

          625661f3697c998976a41da5299a1a6b1e572ed1

          SHA256

          0c9f4504427030c99bc976ce63bc8994369cdc466bdebf7affc54230141f92c9

          SHA512

          3bf854514e68d823911195887c9eb0a9e74e392a1832c4ad1fb4872cf8f983371ba19f5a0866a6c4a1a6736112ad28fe2a5a18b8df209d038b019e21066a2c51

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8ae6f4adc75d00c66307f5aa28156c0c

          SHA1

          050574682e643cb75a4de503b3372c179ffa4695

          SHA256

          9aea576d3ead0bb927cc7f11ea133836e52d0deb98bf9a2f0fb2981ab43fe100

          SHA512

          9624e69ae0603bc042b07cc761ec42c9efe411c78834f19fe8c09e25669c8d00bcce117e06f5aa5b925bf920ec665aeec8f83fdda1142a9f607aeabc38993393

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          52007039aa35d012a977aa25d95621eb

          SHA1

          a3b1efbb783159245d52b02dda841f2031e38020

          SHA256

          93e2ec6e4198bfdc46183c3185ab3dbb2bd063bb3a26303b98cab5abf4fe26d4

          SHA512

          35db04c115086416b482173528b0e7822bed7b439dffe8102e641e8f840417c7a711dc0743fa5a9fab2dadc21052e9bda066857ad30cee1d4ab62a26c4b9e122

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fd9fb282a40c1f2dc03c022d9b3cd98e

          SHA1

          e5848353cf12afb791ad3ecb5dbd32a5180a534d

          SHA256

          7a057fe6c3cdff804a94996371642c2f8a6f8e6b3a6816022be6e44637c0f728

          SHA512

          110b04ff776cfb819274c2a26c90cd49edd8350a6999e9e967d4f3d295c3a248d1ac2dc9bf71df6f5c9bca85ec9be1f33cf6bb3f03b4787f1b0fca85f374ecc3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          426e2039ecc9868834d1312f2a9c051c

          SHA1

          05ed5b6532f2954c6fe867c4f69277347d5aa7e6

          SHA256

          985bab493e160050f0374e326f8e4eccf39db07a7bed7749e27504c1074cfbb5

          SHA512

          1cebb801a1df43b2c19047d612f015547a718e449b5ee92a8aac67f8b38c20b34cf5095b93984e96450a25316320f26b01673898863b1e929bbb21629c470542

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f20b39bce3f90181189565b3632d5c67

          SHA1

          5a43cf6b1d37501ccb4f3fd0090c2296538b08f3

          SHA256

          a46196296f28e3d10c776bc4742e16e8bee892c445448baf2ca93255e6ff6581

          SHA512

          5d0cd18a734fe2f8699ae3c4225db74a6969b17dc8a37d0902d778bc2626094a407a7238330812683a4e4ac770b41f3712dcefe75d2b8e85f5a3f889e46e72ef

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c5c56963e138843104b50f0092e6258b

          SHA1

          5a2e428714ed95942c0cb63d7b2f6d8a1973f7fa

          SHA256

          d73aeaa4ecbc2b73116c7da8d523d9fab94c77dfacaefd92a1ef95ae3d2f2b29

          SHA512

          0bc7aedff9eb0fe082393518888ed2238d11d40cb859dd5c77ce1cf09091a9871d95785345cf3f77ea395a212a520a9f3a3b4e0c49ac3dd5f54d48837a70568c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7d4b0d13277dedd3ca893f38344aa202

          SHA1

          e1f80b4940cff5be40b311f8b2a6d22e511454c6

          SHA256

          e64fb7ae82327fa8cf8c952e02265d4746018a2e31f031c26b848a481d2629d8

          SHA512

          cd9b0f4a79d03ae71c30564f10d47adcf910417fb532a0f8fcc6b9e0ddc45850f2aa0926bd19282dddb0842b2802c9492750fd8827ed8099c97bdc77b1ae172e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cb3479be88320bcf8112c651402b8754

          SHA1

          7a9569157ac2b47d7c00e8435a577b721324b2da

          SHA256

          517e8934af9280afa46f5102fb07925458f8a059d8dc75ad88b5d8ba4da672af

          SHA512

          ae0069b2bb7db305b822018d22bedfe1a5bcdaf1e417b6777f509ba129dd768e5228e330027fff7c264248a15afc82d8a88474806de422996683597542caff28

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          77ed98fba8bca0b9bc0d664759a52e47

          SHA1

          ad43448b5e72c45199b93c081065cdf8a8b578d1

          SHA256

          63779b4198133f3a68d9759d21f963160c1bb0f3c39c40f707c6ff13ba879aa7

          SHA512

          cdb9a5079d93321395352cd4c1c6d36b97b6425caa17727d89e56d9586b948a5d935c28933a869fdabbc9973e1ef82480cc66e273e9f241fe9d89d28b1a91e56

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a8189c4bc78b35895dd8f6bb9c2c9021

          SHA1

          01bd5f9a25f7154ab1e1a4928f895ec326cf776a

          SHA256

          5eda64141a9633b494d766e30daf4db331410d420b4dc59419d6575eced62f8b

          SHA512

          9c0b2eb4fb226b3c90359ce1c7d2005649e8fec0fcf58cd0f81c9842aea698f6a11ceda2608d54afa12df68d28140058c45fb6dc1218ca41e9f0dc8f5ad2e9ae

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          949fca7c47ef1dc16e51078f4f4d1511

          SHA1

          55f178b70ec1c82fbccdf331442c0113605ac8f5

          SHA256

          e0b2e3acc92bb4ee081740ceebc7cac9f19677916debc9e84a9de3820b920891

          SHA512

          0d331dba8e87a64ff2126c6b75712073ac03d19a913d4eea953f252380bae99b47479e537950cd2b0cfbdcf4ec41f0ff3d28aa607a004c7bc57388612af7efd2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c444346af8ffef09782ffdb3c181f825

          SHA1

          49933ea62d9d1bbb0339de2998eed34b8dea6510

          SHA256

          1a28abcfa29b95b294cbe910e20e4b334762ac9d0ef74a668264f06b438c5c8b

          SHA512

          33d2348bd30ff2ae572f8827071b8df545b0253c2dc48e8a3d7f7edbd8eb1457888dabbbe4b7747dc00541e7615dce0d20d92cfe19c269fb87f17b3850c0739c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7b03476be3e1a14a74851d5574aed835

          SHA1

          66448573686f9aaaec99414fab9958f04b41131d

          SHA256

          f00fbf6103d7493946a1f9e4bdce37fde9fe9435bcf4535223eff0b96f13c803

          SHA512

          f51ce1e984d2c707eecf7066ed6d64429134f910877f669ef1edd45dad23c7e18682f9232c33de7e21ce3dffd35e19c01d428a81ef249d3aa35df1d67bd7ec35

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          34f671499f1b1fa4e44bef5aa2e46c5f

          SHA1

          48d35d1f6ccccfbe79be930e0955c576648aa677

          SHA256

          573b944762c5b58d5e4261196d47c7e46a762b87ab6d1487f23fd567707ed145

          SHA512

          f1b52f73c21450c2d3d8587d530562243ead8dc05fc4e7d5d0206bf270b1895f17330a9a005fc2d4e93aa23debf8e01ac203fdf1b051199a74fc64a9b515a53f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          54c1e298451f3c59a2c71a9e29f98d20

          SHA1

          243a3580b65d2a8f9f34e2849e1ff2a75e03fb79

          SHA256

          0e6d70399c17271a0901a66d8bb609ab8bb5e46ee514b322a0cf696a699a6b24

          SHA512

          f0eb502c0b834f1329b119b3916837480bdbaf9361aacfda4d46a0307243e2a3b3c044c04bb2ab5c0b3bc2b039aa1ee766ca849cd8d5357ba59df0054ab2f088

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\jquery.min[1].js

          Filesize

          83KB

          MD5

          2f6b11a7e914718e0290410e85366fe9

          SHA1

          69bb69e25ca7d5ef0935317584e6153f3fd9a88c

          SHA256

          05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

          SHA512

          0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\jquery-3.1.1.min[1].js

          Filesize

          84KB

          MD5

          e071abda8fe61194711cfc2ab99fe104

          SHA1

          f647a6d37dc4ca055ced3cf64bbc1f490070acba

          SHA256

          85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

          SHA512

          53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

        • C:\Users\Admin\AppData\Local\Temp\Cab933D.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar95B0.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06