Analysis

  • max time kernel
    145s
  • max time network
    186s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 02:42

General

  • Target

    4d7123ab2f33bba675e9825d4720fc47.html

  • Size

    19KB

  • MD5

    4d7123ab2f33bba675e9825d4720fc47

  • SHA1

    8c0cd34711a39be5bc93726e178a29c5c64937d8

  • SHA256

    e478164ef68930ee2942f5769d9eace31ab0590f81268fde86ccceba698db460

  • SHA512

    70c4b1785f16189853b635ad02cb3fb591b6ab1d4f2d21e19fabdb2ac360a2c303efe3f6b51309e541e25baec313ab809dbdbe482d00585dab985f849dbdfc3d

  • SSDEEP

    384:hQAcpuJLbiqhLko939f2VanNDgPzmJOO6ISL2V:hZcpu5bEoPIY1gP6EOF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4d7123ab2f33bba675e9825d4720fc47.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2208
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2208 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2404

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7ef399ecd5d54fee977c6427202c0ece

          SHA1

          5a84ecf4271f4787fc8be5ac561f9931a625909e

          SHA256

          c96d8e7af9394291436acbf1cbf4b95ccc38b17823a031530aada616be32c45b

          SHA512

          690b33e2e7c6da794eb958a5aef22a4c6441bc54068bbb10d967a7d01f02ba311d3fbd3c31d0fba8097eaa3b992e7561742d8c7050e0f9dea178a6d8fec69655

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b2bed9ad75339e4daad5c43e9b33a0f4

          SHA1

          0c28ab20d4eb907be84842d16ee071224fc1b257

          SHA256

          c0212bb97b55dea352323a38c3768b09a72e54a1b3929bb6c5cb5a036b0776d7

          SHA512

          5faf5fb070577b2068a919043130c88814577a1ded30facb9f885d46d5bc51a60c1fced3db4fac97c2fe6608eb1d77ddf5768fb23d9d24bc9e836096fd98a060

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ec89b081f959b25ba57f4fd970e602ec

          SHA1

          d3599765219a833843c71ceb8c595e21cc31850e

          SHA256

          a9fea0e6876856e23372b557cc37d052ab972b8df4478e6801520a5f865c6428

          SHA512

          43b50fa2c306e118076594ddeafca3919966d5a6758af7b4cc2896c37e1f129382e75bfc7571e4e5855ed8d068e5f18b80c1ad07e5f5021b1897f758312df9b9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0a58a93ee82f78b7a09cedb1c53b3fc8

          SHA1

          9598d34f9061de90cd51fee539b556254d583a16

          SHA256

          7312bb22fdd885c28992724ebb1eb363baaf8ed99f659bc167d22c1ed251f407

          SHA512

          8102991bbc27e948582197b14356c55df9dbc4171793e9b275b48d5e20b27b48064df8a5918d6d3a4e180ca7015a90ebfd20dd03ae4c2c93db5d5d62d1a48362

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          309ded5120ba022b7e92bc0240cf93b9

          SHA1

          bd6a349003d2f1f185b04dfd2c202a0991294423

          SHA256

          947a375c29fb8b2581b73f387b8a7208bd85d2029780fda6c6fc62ddf9d8572c

          SHA512

          d3ca5b4e1f2a3e088926dbee2c805487359c90d285ffb924642ccb9f15f0bca59bd78a921a6fa3f6571855269dfe5fe0b624245d3b3329ed5c17b46b62ca0dbf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          103e81f593575ebe9ce8f4c57f5db5ab

          SHA1

          3ea30f101a2810e75c734a75273d247d1d53793a

          SHA256

          20f90ec9cdd071600c2bfc8456ce97055c178e459b39b307811db01f95b7422c

          SHA512

          38bfc0f94346cc11df2fe67dece4726cf853210c7462b754b94701ca2a47ca6a078ef7275c598166e571c97ea1eabd125274e25968050243b8f08c9879305433

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c80547305405e0916b0a3f415d9470e6

          SHA1

          f05b3e9d489d09d8e56c805c1431c7e1cde0dd80

          SHA256

          c9d44915cde6745f2de05c97ac13ea24b65ae23f57817bb71834a3a3c045c03a

          SHA512

          bc5bf5d9790505e7ad56aa4a61b32aaaab7e5bed3629462a6f53cb158ad56fe7602237ec0d06036e6d66dbffd457acf07684ce99109907494c840b9cf5bc09ba

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5b4418a1c8e00255a18ba8128e2c4f2c

          SHA1

          a5fa2da19b4cf0698fec193d3ae6727cb72eb2b8

          SHA256

          e45edad9b12678f23f30dc889f4c20bcf707d22b1f5d4cb14f02bcda4d7c3feb

          SHA512

          69365888e7da1c9193882b4f9749ad0f953af9bedb554a1fbaa150cc344015fc8571ee5e9733dbc905615ab534064d76b18c710389124b702d4f005560d65727

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2491179534ac7a9afb30e94abb0146fd

          SHA1

          93b505bacc006b9aeddade9873fe6f6c65c7b57a

          SHA256

          f9312a6b5a96ae3454bae7dcae9d9814b1de3b595dab0e453469bb072e1635d7

          SHA512

          5715d93c30af34d5338ff75518555d22dd8d54c20c7e38f637209982768bd5bc7b8fcd031bcf0b98f1bc36dcaec46eb936965daf9c196cf5c72d963a7aab2bb4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          57d90ad3bf24838b324e212fdc6a2291

          SHA1

          084482da2e4cf95301937eff432d9a9ae7945efb

          SHA256

          e3b864a940ea56204ed35098b95695849e85845fa1aaab0befe1aa121ae80f09

          SHA512

          b63e2a02495c414fecff57c56c60946fab3a12518b226a882abdd36818b313b02fd1ec43c249ea8b8ba24ab61303af845dce6bbd6f2f49cca0140e7aa18184ef

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e4d168b1e8f18c91dff4a70a074ed9e9

          SHA1

          bef41ff2193e8277367d149d759a83abf805d74e

          SHA256

          f5c296f368ce90eac8430b423f88e5e163265adecf322907d5e263ffa50be352

          SHA512

          1f9069e6f6a3c5a570a656b7158e8f7f70cf189c8c7230a6b42f00fa4da6ce6eba557e1a25876490ebaf4ad50724e88c597f61c880acb35f9b1d38042dafbd5c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e876f369a20a201182c80282727b953e

          SHA1

          d3b539e1db502607028d1c2f9ac2a7ca5a92f6a0

          SHA256

          976dda36a241e31970d645eb54685aac0de77cd3127a3fe33ff1460cde312019

          SHA512

          bc47b662b7264ac2cccb07c7ebb1521c6b76a4b258c96c03817bde4353df54a03c5849c00d562e38d8fd5817a21c808445c5eca597af6dbe60b609f809186c31

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          aef7269e931d88dd73408160445cf3cc

          SHA1

          ae89718bbbe931696616ed06ac7c893b1fe26e91

          SHA256

          0a640a319fa17b8bd69120f8addc2bfe4c8d3a2eec16e2043ab69a3a17ad5dfd

          SHA512

          009fa16d9e4500302cd563e326b4fab4d57cf1d3afb8e2624ec53263b1c8711c0d52160ec708bd890df3200effc76e7862859408d65ddb43f6789dfd9ab36ee8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6e4734f4f3d5f1824bb198594df3c559

          SHA1

          e3f9967f4a42211eff507c796e5dc3d6eadfdb32

          SHA256

          b0921f718c81128df6847815884315ec01fe7b2feb6d4e5ff264b8b585200232

          SHA512

          c6480dc70c7ff998a73e481dbae879676015fb6d640ebe69b1593ebea60578cd43b595eede49d6849b8ef83d30fd19e13bd062a7a2296203cbb3713987cdc719

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          725747c6295f33d5097d2122aaab0b1d

          SHA1

          4750d3697afb151b6fe98f8a2beb46f78e89289b

          SHA256

          65f4a9a5012f1d9e2d47b285270bc63456c227bc4dc6836621abf32f089c2c96

          SHA512

          7f3b27c9c132236ecc469be39bb11ae5196797a245fdf0def3384997d58ddc2eb307ea432d1acae30654423050edad1b81a625dc798dae18fb83dbef6fa72fe1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          24340625e3b7f43122bfb25210543a12

          SHA1

          5536a39fe2498fdf7a32ec116f5fb38be4d77e99

          SHA256

          50d3fcd32d4f091ece0c1b267e11aabbb2f0f568ddf8690b734b5b170dfd82de

          SHA512

          3a5f6ea0d805a486edbcc25086a5fc02591807ce0b2ece8df0accdb10ead551d125957daabe9ce94e28b967600f90472caf68585d9f8af00785f16191b495e16

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c584498301806f9c0e9c6841015851f8

          SHA1

          ea5f17aed87d0e25a104955f7f2c394b3f5bd962

          SHA256

          dfa564b57413a7904c487dd362d700815f340d2ca83675ea37b687f68059b7b1

          SHA512

          2133ec6964c84ebf22c15baac31250807b12607dffee1c3882db2c256ffc102f13aa5802d22ed3bc0659152ea087dbc82ef9b2af7ec57af663dc456278c67ba9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a1b6413a15a75ccd9660cf621c44294f

          SHA1

          f68f14082394a2664fdbc3a233ba40cfa51c1171

          SHA256

          1210ccde0d70d606fc28a831f795dd25ea9ac28321355f8f1d838b86e37668e4

          SHA512

          369aa658e231213a94e46b463b849215eba3daf5bc9cac5520d155c9f8893594f267234728de4fd6eb95567b20d58ad0d6dde4f570a2818ed0e3a3985653162a

        • C:\Users\Admin\AppData\Local\Temp\Cab23E6.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar24C5.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06