Analysis

  • max time kernel
    128s
  • max time network
    180s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 00:12

General

  • Target

    4578fdaa87a13404eeff0c64fac29af0.html

  • Size

    5KB

  • MD5

    4578fdaa87a13404eeff0c64fac29af0

  • SHA1

    875339a14aeeaa919e8b1f717b2d3b8954ae1e35

  • SHA256

    dbf37d8e2bb3804f1aed514fe3ca1dc39a02a8f4e5457e6f5927b20cba3f3ff8

  • SHA512

    6cf40f1e57aa522a10a04a17694beddc899e0255289349ec60473b98fa79cf84857f9f4e428342b89a7c9eb5c32ea4951dc3d555a2dd2f49ce5a3a183b75fc47

  • SSDEEP

    96:Xyi2zmotzpGEpaEphpApQKpcptCp+scyTnyqxTx1sZRbcZJ:iziotMhus7TnyqxTx1sZOr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4578fdaa87a13404eeff0c64fac29af0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2740
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2740 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2660

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          128dcad69abb7a008cded5d95614f1e4

          SHA1

          58f66b657ebceea2fe24eafc2181de012dc579a3

          SHA256

          1d307dceb0aa4eafe1cbf543a5900fd587d29c4210c8e666be464af0d0657b2b

          SHA512

          8df267158a5bf14c0895a86042aa649b1b5cb0098e5871899fcb653ab82c8aa5080f61b597d0cc57b7a28e2be1938c335d9d350702aa8bce4bfd48a7f199e3c6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          52b7e9bfe766c45ae969704095ad6706

          SHA1

          13cc136c0ab826a7647f3dab94b24828aa43ea8f

          SHA256

          e47e39e070b1bcfd2b363c1fc16dc1c83d59180a8a69223d866a6d68999dda1f

          SHA512

          1e92691e5ea3fefa559100a3f0e29558f126693b7f02f57f36205c753a5fc99399eded8b5ad37b9ad7f947baeef999a5453826a91186c2b1f7dd9d0340238f22

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1eec040696364582009280eecdde7ab4

          SHA1

          e320b1ca350e69c9af1170dd4ccac1b9a2983b0a

          SHA256

          da947ee81edf0dc3217d95eb64a419b145ca83040ee4c18c8a47993d21649fd0

          SHA512

          c9e87c2dfb5c7184ac7a876e3f6212722055375c8a78679438d27b150f12cd6215b175dce1801e66756e08f1e315974da5658be6701db0658c30976ccf9a221c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7e1b15c844f4bc856ef67ef6e2e50567

          SHA1

          9f132042934bc0cfade32d328e0ae207410a8aad

          SHA256

          2c9e9ccff4340bc3d063e23a83f2dbf79cf520d65b28d3b85d949ae1f1e3b020

          SHA512

          6a8d1904d302eec5cd558d6042af536ddf7d6f524b27daa4e1c30e3435680a4f4eaf9d6cd3f38a2b9749e8fa120a2476e150ea4fc9512db63d7ed0d7eb06e9a3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          03f7ca341a0f3a14d57799d5e44c752b

          SHA1

          8989db581f0ef252bc5b45ff913be4ca926e3182

          SHA256

          d62f949980f1c298353a0f06bda897f3afe5d971984b9c579db8f331c0403264

          SHA512

          f50e3a3d2104ac4bd319e632f1cebff437e35a30291c4b4a2ad92423128e1b7a96c9514ee112a7033cfebc3fab57f3652e522f88742cd617d0ebfe0464e2c379

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          db0fd112fecf50b646ee2bf619397f30

          SHA1

          f19062b1ca05f20aa4c9853265ddc7738f33797b

          SHA256

          5bdb35744ee1fcd7caf3bc85d3f613c6ac31adc31b839481dbb2392b7bd91c29

          SHA512

          452dc98485c64a599a1762606c9c2a12a4dce3ec3366ef08e411ce6bdd7d3c69e3ca8074553c20e3b0e0c83e8ad787338c4f32af89fb63335577731e790c9903

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          808a62c4f54cd5e3ffd8f096cd25b559

          SHA1

          4e90f5a4362d386ec775ebdbe290c5a5ef73a3b6

          SHA256

          f8c61d430f5acc8ff7414e5e0f1ae9b8444bbd6366e71394b7317681dc9631f2

          SHA512

          e3540461f04ae514451c95b27d4fb5c1d748271da2bac7a1e4b127aa27a79d7337e2e8284af6d12c03b00fd477b252cc8ab9fb6f5eb5e491a7bac6411a338ebf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          768a549648063e9977957a5e208bb1ae

          SHA1

          b501f4ac2e8a8aaf715cc18fb0a48bf11b7501f3

          SHA256

          c632d425027dfa883f4769354f3c3f37a2bcd27081b5f78a5a5d83bc243cbc89

          SHA512

          c56286a2ef0b2a699d0471c66fc74f952af18aca46deac5d803fa73979cf24b6cf40d4db77ba5e8dd06ebd232f38f7e4b3955e38a3ca4845b10b9c2ad6d46be8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fd4bb27a300072f62cf43b767b773735

          SHA1

          3b09718b653c2d0e6042242428f4a03dbc92bf2b

          SHA256

          c1ccb95bab6c47d9ba4b90097b288a6c3f904dd2d97f8192e61ffbcbe566761a

          SHA512

          cd37749b57ec6e61c73070b74f4f5bce83d6752c1ba3fe16b24f447e8bb32e713bb0f2c579a808e5d689d04028ce83b8fee4d9be5d04a526117a4e618e1ec41b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0a8373aa07a1afc82b461b2e3abf8ef2

          SHA1

          85065d4e02545587ed010e15908222c950818716

          SHA256

          218d027df0f2d64af6782cea9e14326e2826fbbad5634352a7a13179999b4022

          SHA512

          3b0381ed4fe5cb0b8d144ea5126b50f56258b69b3d9851b3c674338eba352537e48b98af90b47d57741f15c77f90db5f71cbcafd955f55b316bf20d0b4ce1aae

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          72fe044f730de5fb1269cf2d2b9cc2dc

          SHA1

          67868a248d1ca290be97b32579620233ca627d7d

          SHA256

          b72a197d40db92b6ce530adf0af3316e85a5a570ea5fde5c7e2d4847909f27b6

          SHA512

          fa7554dd732584596de40bd4accbf371edc0aa9b124ab6f77a3cfb6412fc5ecaeb5b9d1bd855ed56471576832a0edbf13005cb3f62c320832b081d357eb19c89

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b116c0bb585dc4fe3ab35f5fd0d6f009

          SHA1

          64c76302c860582c7550bf37e6440c4c126695ef

          SHA256

          bf8e8b225ef5c2491c0b85ffeb2fe5a81ac2f3dd8777ab53c8ee1b764c0be5b1

          SHA512

          cb5fcd3dc2f525321c194b97e03f7b1309199fddcc799a5de14c03123eddf299a99ad4f65f0f63120d94e72b955f14d7cecc2e55faac719e126e6811d022be58

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d1768628fb53b568e4cd37f0f627712f

          SHA1

          b2d3be89632c6ec409c4072d2bc34c9aa43f7620

          SHA256

          239163b6cc5c2cc789f1faa9683babc29b5b5b11a4c5e9333e8103cec18a2253

          SHA512

          92834038fc70a6d817f0bad248466e4a144d5538044178cfd43b1b992bcc301324f3253708eebd1baf7771bcdb5b8242970cc59372b7119575837af4808d2142

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          02a6cfa1931d4e73eb702a525c78c852

          SHA1

          8a8bfacd813f045f05097ce1da36d838adf717c9

          SHA256

          4434c8c0b5505f32af717c8bc094fda9246183c54984fc984fcea1901a9b5dd6

          SHA512

          91ecf59b23470f99fd946cbd2945a3d0f345f15dba4c0016b8cf71e3cb0a158c874f4b48bc59dfc22ac9efad0eaf82b5e42b8d9a0fdc039aec0936b45cc5ecf0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dcb403976319fd48f2aac172aed2da79

          SHA1

          c54fcf739f6c79ec87d48ebda9d98302debd4fba

          SHA256

          fb634df5ba3cff663b168aaca5ec6e2a421673e3c8e6389ccf698f5c8557d35a

          SHA512

          1872650acb643d11dea91dbab9f710eefbfeea7be0e19829c25fcca9ac5708940251ac7f29bb9144c18857858350c1d58d29dc83ab1a83f14c2b0056f7caba72

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3c8471fd31ff2a255dead58987e2364a

          SHA1

          b089050c8ee8cd4051de16c951a3d240428ee591

          SHA256

          fffc9d297377a7f6a7bfcbd41c2d991663939dc1b5aca5b07086cfecb4926138

          SHA512

          055e34af33ec978b68b68f24b73b0559c7c99b9597c8c6a19ec30fd0060be750e3fbe5225bb21d2ce4b9199314cbeed652b3a98a4b7b9ea25aa7aa1160540bc3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ab70671e26b6f5bd3aebaa3aeb5d7ad1

          SHA1

          c2a01ce1d0eb875309660199c47df0c6e20f57b2

          SHA256

          587644ebdae07c231b63292cddbbcf08170f878476eac696a11f045bad8eac1e

          SHA512

          fd20d425deaea9dc01c91fc77c6ac16ff809fd8b23873807905c3fe854b1402d1bf9ae19fd1d8c580bd81a0be60eae2dba1d5452a6afb13bb19b0a68ee68c720

        • C:\Users\Admin\AppData\Local\Temp\Cab77A3.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar7C57.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06