Analysis

  • max time kernel
    139s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 20:46

General

  • Target

    3c3828301ab5d03c202360ebd605c252.html

  • Size

    395KB

  • MD5

    3c3828301ab5d03c202360ebd605c252

  • SHA1

    b98bd147476e86d11f342cfdc21ebeb20de100d9

  • SHA256

    2334cd6294eb19645ae917698e0476efdb7985e19f048d1e0fa3599e165fa577

  • SHA512

    932029e5b08f67adacce9ed89795efb8f3af2e5a9ba862281c7a9aea76470ec54e1f6967f22bc97151ad971185f324b513ed7794778cc8cdf8665678531f4e90

  • SSDEEP

    3072:DVcEZTRIxfbdGFhJuWq9wTflSS9+CjNEef:vSpBGFaWq9wTflSS9ue

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3c3828301ab5d03c202360ebd605c252.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2108
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2108 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2216

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b0a1081cb963602f20b4cb1c53a65f5

    SHA1

    3e0354a5311cb5e15aea9fc77d3e882f4755ae9e

    SHA256

    6d3611d78fe06537b43d734d75c2895cedf791e51b015045f27bfc2af7930b68

    SHA512

    7121a9438b85566e7d0ec7b69e4a617518a787470e78226ed40e838dd4fe10d59089aa52d6a2c10a1068350b0c1d0d0622161fa1a0f73b6e1ae52b7d290bdd08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fc772e6eac83e92d80c2127d702be09

    SHA1

    ce00489f56923720afb45f2e1f39714baba8905a

    SHA256

    8018e6369aa0c945083fd386cda35da786cbf875edb79819f65dbc58bb597961

    SHA512

    feb36a25b88e9bf819db0e925ed678326d6b9a370b9cacb6c736570e37b599c13b939e54fcac01deb8750d7f798282f275b645b37b7a36386e6e953ac77563bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2d85e85062b405ee8b747557e02747f

    SHA1

    cc95601ec381aadc0ad25f005b322b6ab62a5b7c

    SHA256

    ea22b0a080dfe6057b19a0b1fe45e0e10df9ce8a9edf9b4277686704da391173

    SHA512

    51d72d909b8577166ec412869cd0864f9637ac97116298b08ea6efeb72d7d9eee3fc5654cf925292f66a4a8f4aef8eccbe50c6ff6d09df6d70044066cb4bf049

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd4ccd0c73805f9e3375e212733a8565

    SHA1

    367464e2bd9ec0652b8fc3b86eab7a5ea1638dcf

    SHA256

    3e2785b2fbbc26ebf53a9371c7fdd2089e93e4ff7127a1c410b4110774a38e0e

    SHA512

    bf48a0add1629d7dbc1bf0d9e66ebdc68c53ff7221d2e7671c9cac9a97a2007dbf65df4f8c77ad942aff7f1cdc59dae0e5b1572af502d39e1c073387262a5ae0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5de3247568e5c03a74d29e55d8fa8a14

    SHA1

    2abc77097d0da62bfc47e120a9e1d3495c53732b

    SHA256

    b5b1af26baeefa5bd71d9dec69e704a078d457634f34ccd3deb38981f08d1ea3

    SHA512

    25cabdb7ed284178d3f500c487995ebe02084cfc95d039e69c93c9295216945a16a81e489cd004c412ddfca1405e268c16b865791297e53078272720caaa7b2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    adb4f43d2001296bce4ca1fe66b1c4d6

    SHA1

    a86eaa0598c546c87012ebfd79e6a3bcf908a744

    SHA256

    15b8e7284221b43ba8fb403b7ec1f48fda9931e039a650e7f9d87758c5f3d369

    SHA512

    ec5c9750cc42c6e465e6ec1e07aeeee496b22d692a1b1d2ffa663d96b9532612ee5b7578322e8151953d5814e41349f8ba3ae5b8e2408cd90909715c2a39b6c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3074c109f232d220e93bf878edbc7d03

    SHA1

    bbf2aedc72ac35519ac0e913fa8a2497d9bc87ed

    SHA256

    a1b58fab0d61fd24b1b7748265fcfbb01655729f579b617f3b64069dc0a7a568

    SHA512

    7a69dae56d244f648b6b63a8cb7d847b0f640e4f0c3bf377b30b90166f14a44f031f34e5c3bd974112183954bae7662489f1db878cd2ed5dd4c7d89bfd5288bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6435354646ee821e54192876f69f70b4

    SHA1

    57a792acd5cd0a891b6279bf3f1307834868e8c8

    SHA256

    9ea87c99024331f9c2f1457196145063583c7872ce4a7d89d9582ede70edcf3d

    SHA512

    4896efaa8a610750ab7064a56b1589aef2323c2845ca9555fbb831353d429c32e68656a09a473d046204113481a611f97912af5f82d844628720d32dc5b73d7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bbfe2e5b76b9182b09b77071539172a

    SHA1

    bef2bb2b3e8eca0645276e0320320b33db0aa09f

    SHA256

    eb64556096498c2e9775480f8beca6b4ed7663c9e472db112b5b40e74ea1f170

    SHA512

    7d3f13a3f4e5efe6aaada38717d6cb57cb1f2cd225f848a8e3db197951981805621f733cb141c8bfc703cc01dd06f4f95672ceb3bd6a29e7bf80aca7856e6c6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4283ed4a30ca3aca09b0962d17dea75

    SHA1

    966e93140c04c9bc5aa90d4522b2e3a27bca7a22

    SHA256

    b8425f3611b85235e106122bae82c9eb3e63b23116e396422470939778b58f75

    SHA512

    cafeba0b734037d37e58628143d6a3047fa4583c8ccb5db2393da69a052ea03e05f531efcdf6cbf222e206145a243117a284c1d722cbdc842e82cfdd00f744fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ccccffb754a0680931cd6af4cf0a33d

    SHA1

    75efdaf071122dd2fc02545b752361f60f9444ac

    SHA256

    5fcf9010f1e427bfc15e86839cbfce4c98bab10cc8ddc37d34e7c57ff2e31911

    SHA512

    4e4eacf85ef112824a859ebe2c16ea87458f6f2510ddd0ea7c15903b212bd0d817509a1f3d3a9d1b0d3452f2c067c5921d892846141a23fba6deaf9002030945

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7a916ed724714a02c61df170f1e360c

    SHA1

    248dd6c7565d3f6d7c4351b29bfabfd44599bba1

    SHA256

    7bedbef53a0b9246980fbbdb03cd33d6025235336cb27f00c57aa686d46c0101

    SHA512

    7804c28b0a069b74e2bb9bb0fa8ee193941caab976c7e8453bd18e2408aacc44960a86ed9902c01e63593002bfa7b9dce7177d252f60af019e11f0f22ef10411

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efc346d39bced80ccf76936a5716d629

    SHA1

    9a5d0c9a7e712bdd8e57c4ad3be6d859152f9a15

    SHA256

    2879708b34f100f910ddc3d35836b25fef0239530f83ca0033f8c57520e194f6

    SHA512

    0ed4db25f049bf1f44ac3f16060234b0b5c95bdeaa6a74d65750aec90d47f145a083110d3f24fc84cc873b2c975db60bd3f3356a49b27e8486bb1c635205a4c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1eaddc8b454f7c6b2323bd6a53320c4

    SHA1

    7720e4d0d508318499bca815eb9e0deab2638e67

    SHA256

    eb40b8cbbd29e1201964ab5bf135727edf1cb2a90c1e9bf27fb0e72f9bf4da39

    SHA512

    4bc7018a2b5b714ea7e8835a46946b4a1753cb5a2cc88a2c0e2e2c32ade0d79b0cbaa77001b646fe07f662bc0428435889bcd620591b8e3f6af2439d696f2f9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b607d1045e3f4470ea70adfef5ad7134

    SHA1

    17b7823883a2315e1b2154dcc22caa51a32b8bb6

    SHA256

    a9f4c0ac5bc26ba4b5c8e8526ee992f3e0aa660d9f370de40dd1de0c58881975

    SHA512

    7d14ab2e1b69cb2aff34db42f4a6f89a2a51a674caee90e53020c496bba4fc239f63904660b92130d99240ab19ec569846c433c1b422525786e8f8880420f29d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    562c799ddf02702754d7863bf997f220

    SHA1

    4d3f7f59c258cf02db061d333a8d4632741bc588

    SHA256

    2a3e94d7c4c97de10dcfb33faeba622181ecd881c34c5107a2daf0e2b8d1c37c

    SHA512

    28629ccaf1a9a19fabda2cd07c968a58426455e988a6f959e27acf172b9dd2787c1a6c3f658d61b7b08bfc271f4850454488e80aa5af579f763ff511226f8354

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c2c1395640eb884157824d8cc9f7e8a

    SHA1

    100c2a0c04dcdc2138468901ad9e55e0ba64aa65

    SHA256

    3028aa600d4b609623d60fabc30ab9f6d3f288f223b089be1e10deb7b8f669b1

    SHA512

    4c68d1fb4dd471536a1018761b0ec0a3d78f78a51976c586351d28c4a380ce577a20a988b074e144075ebcb999e6f0305fe1415102016000f365d2078e481724

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31569bac1291555ab9605bac862dc8a7

    SHA1

    5a4481e75df03df0ed39abe4301b8322b34d8863

    SHA256

    13780b9c355088f6bc8848df00daefbf8b7feaa4d4db221446cd91af2336c8e6

    SHA512

    e43f6608d2b56ca4a7e78ea86d9a97630ecdc37c50f679fd5845d290fed5a77d8d8a8cee79efa4fe15488ce61d491648bd06a1014954f7c89cd6a77437daafc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6f72411a5c4817a9558651960c54da5

    SHA1

    c60c74bfa1ed5a5bbd835adb9156188848dbf2ec

    SHA256

    0defbf5e32d68cfeb87deb8022f4cfc58f03014262951677e36b4a60efb2005a

    SHA512

    f48e45a44a39510aac5b363e5698503a1af8a335486f857b679f64cc1f8b03a19889b0db31879481f6ecb885450d744dc94fc04432085a1240e4c307d15ec59d

  • C:\Users\Admin\AppData\Local\Temp\Cab3BE9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5AF2.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06