Analysis

  • max time kernel
    118s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 03:34

General

  • Target

    50bacc2605d489deb4baef6f2d2e0c26.html

  • Size

    3.5MB

  • MD5

    50bacc2605d489deb4baef6f2d2e0c26

  • SHA1

    155a3b720bcff939b2025d546cf721f32c5b885d

  • SHA256

    ba2c4151ea54b82d88daf518186e34872b449acaebf0ca6f0e7c38a609d29be0

  • SHA512

    c5b610e6fbe2d3ad76469f19e889c983b49e53a793e8cde0a44d1cd2add3645abb7b7e07880b6dc032155e8411a78cea634dc5ee14a7efcd5a042c347e22b2fa

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NGy:jvpjte4tT6Qy

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\50bacc2605d489deb4baef6f2d2e0c26.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2640
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2640 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2276

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60be8a446c609cf2497dd07acc656e88

    SHA1

    b613155fc433a9efcecdf8094985642d933896b9

    SHA256

    3a1a8841c408e43a6fd0d742f1b480b66d5568f4345067f66c8d8688701c92d4

    SHA512

    907d5b8b23e228d097a467c93539d64e8747f3582fa4c2098747fce699fcb31125e53e34dc949c6fe6ceaf7dfa2a388f01cd103ae108dadf5be61e7bf9154159

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be81ff12c63003606f69f4711bfe519b

    SHA1

    fe8db6a292c150db18e1a33aacd2119122baabbc

    SHA256

    291a0eb5743cb2d93102069cea20325287ea1569b84e9d456d9db458a24f0cc9

    SHA512

    b2945b69325a17a9acf6ddc26b505ffcabbee3f2b4a4cc40ef6c308638660f1c6193b44b79c714b190951ace295699e977395503590af153e6138cd66c1b1341

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00aa03c9d16e3e03fb1eb85d5d995a40

    SHA1

    f55501805dee9652d7eb1c3c8da88b165a60e54f

    SHA256

    3e347be5fabf305877a02e68f9f9c3aef47b6e6f2775f7aca534775fdc04d0c6

    SHA512

    ffffd16bbd26403a184f10b73bc6128d771403e11d687d8c3f1dfc2a595ef0ab31eea1a5a96cbcd02d12b7398e43bc90dd9d61a33967e83c4d5e9f50d875c789

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ef9575898cc5c440dcd42426ca1500b

    SHA1

    8830f2816cb9450dc62b58607b08a18179d4d65b

    SHA256

    00b15abc6e6075f80538f0116cd512aa0deced01ffab5ad9e7a441c164f65b61

    SHA512

    7a204eb4a1e3f692c90074cdb3a82f372f2b7ff5c45e109476bb3e2ee2004afd39b053e0e7d452e9a14049bf77e7b9c1bf21231d85baa2387c6470156d75df44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25d506bc1f53bdd3337f6759e20666de

    SHA1

    20e4eb93bffdeb1d279bea2c6ff2fa107da71536

    SHA256

    f628fcbd1396dc9e6c1c1c963cfa4474416c8ad496ec41bb1eb20bc47447603b

    SHA512

    26a28f17baf0a30ce2acf158792505ac8c1d83bad4659153b313582bd7b45ca32dc526451ba8bf648e427891ef831c1dbb20d4a57bdefd4f2e2972bb08ea4c97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    644d8cf754c94369ecefbd0c7b141282

    SHA1

    99e746e2a6ffb9559a8f063401a26b492d732da9

    SHA256

    f2358fe74a1961009474e27f13613958dbdad9425575076517e7abdbd4cbc5c2

    SHA512

    b7bddd48619495343f7c4f6e0c8f3565823dbf9fc95233c28664c7b8c50f230508c86584125b840b59a4640cb502d93fccd1274898412f5cbb51a583cca20f7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ced62fa3950ebfb0e447546a420da1c3

    SHA1

    d29c66f39b4725934cd2e772cfe11cb9dc54067f

    SHA256

    dbcf4160d202733fc4803ae49ce86158aa9975ab94687ebfd0fb2870814a2d96

    SHA512

    e5d3dfb325bb9f256fb0fe4594b3a6895de2e04afff97b4e7777cb3c26c155c98017bf35d6ff2e44d72bcd6b0e3ff50601b5082b987e44e7ae542258136ecadd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    746166daf5d2830861378044419f06ee

    SHA1

    59780ac575e6e1ff69f41f8e5f0435a0d83f3fc3

    SHA256

    06f253235ed2830dfbfe74b5781b54611db1db16dd2f4a4d6aee08a3afa42c60

    SHA512

    62ea158c6c8cbde544a1a6ff5176ff8ffada2437b23d54fd76a7dea592c784014296172d50608af66b7077c67ecd1c5dba2297719de88d7494d8cbe170966ae2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c85c065978b7609ef65bed2c46c27f2c

    SHA1

    ddb152cd927250cca718a1d727e9b8602a44d7f3

    SHA256

    c81e558e158b485a0858956c626fdc281ac7419f072d9161dc95593279ddac3a

    SHA512

    5da5579fc3c19e9d56bd0a15c2a23fd19be2cbc8a09d7b6fd9d987ac6026377ff3c0fe384da740bdbb8f1197b4a2a15cb98b8d5115d9ba4c76d38aa9a4184016

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a060c4063134fd3552ee03162678b21e

    SHA1

    85ed42252086bdc09a9c596f92bb8a8bb424d5d5

    SHA256

    5a731c04be90d78319b07405147bd3c7b30fa0c1316c37a75dacb84de0fed4a5

    SHA512

    7c3e8da92ba26e6fd3f852efe1764a29be0ca5b0342786e9e0ef4f708363cb67b006ed01d1dd5546e925398bbf3150713b058191fdb505716929c7e143f84f77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd4300dd0c50b0419c27e5f472eea684

    SHA1

    a8d444dfbf2774d571c1ef74c3485080c2545fae

    SHA256

    f09414d1f29457a685b3985b8f6858023ad392b9e1c40055744f467f93367e49

    SHA512

    4ba4784f5cd1b784bbf6d1e5971062c90cbc10cd9376e0b212d276f9afe1408db3d98dd8b1a2e2f10adb61a8f9aea7ab541204ab2c529fc2d14d192540b2c7a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc4d616e4efdb98e4f22dfb1c2c62fd4

    SHA1

    9e0546fe4d0e9149eb1f535a06ce84bff3f89e91

    SHA256

    22d9d71b6341c102cd0917ca44c7ed99dd920040e7c0a068083a5f1d4605a7ba

    SHA512

    44b4a93acf4e82b8a35fa77a67ceb9f0225a2ce158a76ca7b34f2f4ed0f429299bf63256c7f39b946555f7728f507c9784950f239de8aae13b9ef5cf1b8e88b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91eefc725f9013d67b5e2e418595ff49

    SHA1

    c043b3b2346c09507b4420d68cf57ae96f3e23c7

    SHA256

    ee3f39f8c81b9b279778c739f21d90c0ffaf9d11e000a031d3450d79e7256f43

    SHA512

    fa35458f9757253a10b7e9af4428eab5f3aec9bd8cc4ffd29985d10c0d62ddc08bda197688ca39ce03da8195f8a1fa044d9d0ac5dd4a4eb7d1470124b297c798

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    233a51bf557478775dce63de2c6be5f1

    SHA1

    39c8c90835fff01307134ae9d6a418c9aaecbd12

    SHA256

    15b3e4cc483affa66b691b8a474ae6460a55b6b97e271d01ead1a4df41298aff

    SHA512

    10607cffaacbac4d9d72d366f3b45b2cee091fe27740216e1de83db187451cef53ac9ea5d11246e51394cdb9348f499e828fef5c0fba2867fd3822e443ed9b6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae22c950fe886edb6bc01d5fc5e147ac

    SHA1

    62885e536312abead494cf634fd0a2f6f48974db

    SHA256

    7dfb9a6e014b5aa302464c733de0804e1f6a920f122d6ba84229662e143aed9b

    SHA512

    c84220f4cf0775230f91188b5835e2532944143979be1416e65b7537abc919027cd02cc10c1da85c8eee107bb82aa47f790a093a84555d05833611d5104d5762

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0ab725c509c69ae3452c62d9e822d1e

    SHA1

    2d3646b2218dfa7d5b7dbd8fab47909b3c0cd856

    SHA256

    61885016ffc850c5ca9782894023899d0dbbed90f5a3fee4c9648499dbcfc9e5

    SHA512

    d1b2e90dde14bcb20fe893a258d53f6b6496966c74c05ee1f7cac460e46551e306ceb1d96af3964cf2497fe3add4ed64845c544e76def8566cef1317a92caa42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d44145b404a53cd8bb1283b95be4477d

    SHA1

    37002faed46000eda8e4337be0b593e25901bfb3

    SHA256

    809cafcdc62152a89d77b21e324d865705ec3df279813112627d982be2878112

    SHA512

    29bfac962672dccbfdb3c66e8bc7f5afd1778de647683b61144dff36cbc662e633992e63ff6b4603d2053da706983b5b6b1afefe2dd4595938e6899996b83dc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c1fd158e705d49c065fa4697e352a40

    SHA1

    aaf8bf2ae80484b97fcc2ebbd0dbeb47aa69285d

    SHA256

    2fa26d621346dbb67fc6238e1a1ae6089cedee5fd95ee7292b58f3d9232f5c55

    SHA512

    4248306d8ac14eea9478c0415acb15a99086d77ff83b13c5ad314f6f6bc1b32f551ee017cf109b68c0427441ef51a0e57ecb9a766c6ad640605f5360e6cc2d6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75ca00d376c09e963e5aa3c42b4aebe4

    SHA1

    bc87b4cdb0d2a24c76841f89662865e1df6e3949

    SHA256

    5ae164662794a2674fa2e56e8989ca1cc510e90a9894ff337ab23ee6402b4b4b

    SHA512

    8eb04037ebd25d1d1ab53194eddd314bdabb6a56001892f2beccc5310a0146e8477c8c550de0c888b44b72d243a135239c91ab79a326b6b2315cb6d042f5e25a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W79VKSP8\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\CabA160.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA2D9.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06