Analysis

  • max time kernel
    72s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 01:41

General

  • Target

    4a11ddb7c77f7b4793f4f893b5df134b.html

  • Size

    3.5MB

  • MD5

    4a11ddb7c77f7b4793f4f893b5df134b

  • SHA1

    bbd0291f36ede890b9c6c95579a0bafafe51007e

  • SHA256

    2c73d59a344efe377bd16fd6e3ccdc60a6333b1c41505be6c81ab73aa631d312

  • SHA512

    e27ffc3a32f5285caad03a9f012b457426cce7bd6290d0c69ced2a1fa256a883f34b0044db5148b144f60c12268dc52379eb984e6788bbfeb7803b0b00a8bd80

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nf1:ovpjte4tT6N1

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4a11ddb7c77f7b4793f4f893b5df134b.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2248
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2248 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b18eaf795711c89b5e92e5a02c8f17d

    SHA1

    67cada8bed3b2192351eb0088781776279b649bb

    SHA256

    bdbb2bbb4c3874f845d441211000d0a92751bc3193621356cc1fe4fd89bb9158

    SHA512

    657e0d2b897d0fffe6f34891a530ace6fd5541ef3543ccc9c87dd0b68e6176f466080fea042957bfcbc2c8bef7b4f23bdb07b7a1f76d2238b2a2cfd3b03ab6c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4cf57e3a4fd86da348158e4ff9cbb81b

    SHA1

    b9a6c179a2a4565bf2fb180fb4344ba8e0e0de7c

    SHA256

    0e5758be61482d0890cd5a1c9a2029ec91d6d5071cb44e0fe43ffcd5dbe50ff9

    SHA512

    a65a61f4cab038c50af4371e2b349fa780841e7d975e65cfba67d175160ea142e2908432ba84cc92ff64bab4e631798c572e755e1484bdadc086000289db207a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23b14eb575e5ddf37b0f92d2081de82a

    SHA1

    4dc3926d1146c22c607d07bd0d019af62fae6ca9

    SHA256

    9fc7964bc79967bf5e6dda986005e5b4e7554faf1c36754bc521a46fa55cc6ac

    SHA512

    c0ceb16bc7f45df7f337b643b181b6f313718dd05c8003a213a524ff9d4f5f29c3e8be045f6b4dc4ec40dcaa89b0f0bad0a351b09e4e63aa115fa9b95929dcff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5dc08d0a24a2a51cf6d207303310c563

    SHA1

    7220f0f36db4e8219482595a88ee71b797d71bdc

    SHA256

    24d5955ee56abf37276c4c57185278965ab056f249ba0e643c6af31434ae34d1

    SHA512

    1272636b6af651302ae767c4874dc9ff950434dc78fc8544fb54072d093d4658dc4651170971f57bc64c47547c8d76de2ff9cd3662a88ab3afd381e18ca0e6b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ff8741b5e7993f5e7d48d1937c77b94

    SHA1

    710adeedc2cd8174c2be6e076e4db18e55e15883

    SHA256

    704c6f37a355569c258b0edeab3a9c45a604ac8466d61322b4418c76b3f4057b

    SHA512

    4f855aa4e25328ed8f4b60051cba870526f22ca7916089ad654a135c2768c3b4c0e7407b824b0550d4e8e0e8de59b91a49042da3afb964182ee219078277fdd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6989540d39622f8ff6d343383cf9a49c

    SHA1

    15fddfaf52d83285f1e195b19255e0c27a755d34

    SHA256

    e441d5d3be502288d291ae20846641858f34f6758efe66998c5ccb8e119d84e8

    SHA512

    6276d675a7799474bb563dd9fc2a8232952b2b1d28f0eba10500fe37857e5cfa7dd0ec373f32925437f7cb3041fda11fe42c050ca074f6969ee37ddf966e89f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3cae8e49a56b87cf431b0efd3b920aff

    SHA1

    763d8ad3c8f67449ff30442fa3f251f7f491644a

    SHA256

    796e4c1ce63a05da74cd7a7230fb32e0e79538435e9d06bbde2955877bd8df0c

    SHA512

    3ca4b7f5f4a3f62f727401822def3edbe02caa2fa64f1a8c2843f4629f7db88a98e13d24e90c645a9edfaef18e94028ab293ce96d21c708ed4a3be25dc3c2af0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3e4723c1aa2ae0867db6d32b2c2fce2

    SHA1

    1bf6af49dd116ed0cc6e1b033bc4bd8d87d72420

    SHA256

    91bfd9bdb42de1ac6cb4ee068753c24c17ee9d266d9248e56766dcb9962a783a

    SHA512

    575e764e53114c317778de57f1e2bf797fbc0fecf191c00312558a711f54dfcbf9778eb35a2c6b864f7d1045b164463f6fb296c3c8bcd5d09fef3d925cca50fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c18945c261794bda7752f6ba5532318f

    SHA1

    c38749387e0a3d6519457bb2c182b7a56a688446

    SHA256

    e13adef7c8ea96aac7a8e72a1b5865d8646c49757159f5826ea86066e2765501

    SHA512

    9d6514266849885ecb98fa4f5f3fb2671f478f9dbfe5b4a0ec5e6cd6fd16e0105c2144f741afff260f8f21e587fc3bf01da65aa7a3d944c54c2238e10a3b043d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    522a5d96f89592908136c637b4996849

    SHA1

    e89d48fec6a984798d6f6eac0ba3af724785d2d6

    SHA256

    bb64ee2f2e61e2e82f51d4f177a6227a3a0d9d228b146ab03e4a03b9989bd6e7

    SHA512

    6aab083c898777fa47a7fa38b6bfcb3d16304efb40d84757a45b46c0d685405a04579cfc63c830e709c27a16b695cf9cd578e413ceeb65fb00a4cda28f96962c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed66dc3ad217944531b05b8f1c390a10

    SHA1

    0ddab5b8ed7dff2c5270742360b1cf8bf2e82bd7

    SHA256

    5431fbefb930103c225d33ed54cdafd57638fd2aaa1411855a1967e76ed02e07

    SHA512

    1d4596b8ffc94522d4ccb32243558cf2d822664ab575433d58c3730a4746b996c1bcc63486881c238a32a683c6cb4d8d4268e2c9a3959c7c7c88b685c3cd31f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1698e5f8cbdc5d1667ceef5eb92f9a76

    SHA1

    d6660cbf23c5bc90034cd6786230910e8db3d912

    SHA256

    e293f734515fb5c7b846f8cba3f94e78dcd265eba0a1e41df521da1c3b0db168

    SHA512

    237b48dedeefe59fcd8c77a5d747e28fe0310b0ee4fdbbf263c6950d46bf61ac3d1f505b8920e7ded944335a32a2396448a2269d80dbe11cd654c490f69170df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56d9eb511d3071ea0827942b1e3287c9

    SHA1

    1257dc51086c122ff89a9398ded1f4ecd4cd9475

    SHA256

    204ada3e1a353c3458e0a33a3b66a80b4b7992ac4f6c8c7d37f109a03aafac5f

    SHA512

    561d5949bd7d44f281883599596974e9f155283a32c4c3a8d49cddac59c33de2c04f26cb90697a9e4fb1f1cde725226de42fe565f5d600748654e07a3a7a1aff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8980b14e78826af1a8a46e79ddc6f3af

    SHA1

    7153880160857b0b96893209bfab7a073551d2fc

    SHA256

    04af04ab24ba5f86d73b77bc70b2d9f47887fe33ee3ae41b63f357f61fd22643

    SHA512

    ea4a1916467728a574cfaa8e9e090884a96d7c2eadcfab6059a7880d9e59a8b32ffb635a44e23152a8fa7cfc4c08a05fc260ce3b92d51e32b72de02a756ff12d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9bea95e5bc10b0bd93646b6689980fa

    SHA1

    4b42690dab282ece3031e13b695ecc1d5946b4f6

    SHA256

    03c7cef939b538240869c45b2753346e38825fa6a5cc4715495cab2ecc10b343

    SHA512

    08c6adf5a15904b0f7d4dc63bd2112bdd9769d90103e93092ca7aa070eecc1b2253bf51485df1b204aec811896cfb580dc781679d727e73bab495af523f09c6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cae9dd0eabd8635f85d49bcbd84cb780

    SHA1

    fef2e34cc39ae2040fdcf884808a98fbfc8ae9ca

    SHA256

    e2bebc8888772be8747b4f91be3b1a288b86054b102be28c2bcef118819818fe

    SHA512

    cce8b9321ac92de8db45c9862bdb469abe8d471c0f562eb1b7d2cb81cfdb86549e72c20000fce5c608b50f2de8469d044c9ce43fe9259bf318fd81e7790820c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3dde44f9933bfb02919c88ae660adfde

    SHA1

    ea095f61841da577874f18393629dd503c70057d

    SHA256

    31ce090575ebe7c95de880b1ee2a518c6beb97ba61852c997f5046175421c14e

    SHA512

    e7e0863ab56464839373539ea8dc93a2670162ffc682289b5cfa06229f426078ffdf3280cc57a60fd589c1f4ac7bd4697831d50be230e16c45759bb7c5530e87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fdeabde85084cdc75781138326c6ec0

    SHA1

    f9dc3bee287f01319e886d44ec90a6dd50c668fb

    SHA256

    8502d099d43336cdef410d3c904a86e0d5ba7c90a2c5d06fdffee972b368c79a

    SHA512

    962e13a63d27cf8db8a51590cdb79a7b4ac56b25a5f69a8c278fbec1acd24bdab2b88f5cb71d11df1fa516904fa4d0110ad6b9964712bbbba7e42dba0c39fa07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    404b2fafab40e3eb410436f8daec1e11

    SHA1

    f14e4b6370d665235a190fb7fc8e76f47051acfd

    SHA256

    35f8efe9b08b120514f288ddfc66db2a4595ba18e9ad58d75a8474ec0af41dff

    SHA512

    55a25fc36c401eb51e48639ab8ba7596662994298fecfc9e84c67cec9516a96feea2d0bf0bfbca3bc8eb958bfa1d8f0abb4e02fe7b07502793a2dfcbecb0bfb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    007534b0a5490fe222c3b71ac3701cd3

    SHA1

    389c8024dae15e6c5128f963c3e7862867b5900a

    SHA256

    8c8500724192f52e0f0597efc742e32f4e04ac22aeebdf712f12699582016a82

    SHA512

    5ffd445ac76a8171f469ccb27ef077900e2203c6032737885612963e7d103e8d8a14b08616f63dc71ed6871931588861e77daa3b2605e048cfd85e7208b7cb28

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFLWQ602\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFTKP12M\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFTKP12M\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db