Analysis

  • max time kernel
    118s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 04:39

General

  • Target

    54e0d78128c59e04d02f62f894fe8c5b.html

  • Size

    3.5MB

  • MD5

    54e0d78128c59e04d02f62f894fe8c5b

  • SHA1

    c9ed436fc041610f87c2527adb75db8de5d96517

  • SHA256

    637bd5b296ede806d03806bf01de9036401b5db86cc5f63300bfa2b8f8d0a6a8

  • SHA512

    4e34b81ee53bc548e69e54245856a3de9e9bf6cf563351201c37201151f0affdd32e316db0020af4ffed0fefc9aa77785a565386be9cb34f2f54d62c716320d0

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nfm:ovpjte4tT6Nm

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\54e0d78128c59e04d02f62f894fe8c5b.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2284
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2284 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1952

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e561b828fd55dd9454cc2565f2f88b5

    SHA1

    9c9b6c68998521e02c6c232e4d16b3ad223ec467

    SHA256

    cfc1507b38ec741d59374a39135d8256fe8a6bc9699bb68e91263bb36ab22f50

    SHA512

    af339e2015d631f20c05f9119c148f00cea3d9ba4365ac9a8b7260ad30d57308fc836780f883a138873a1743632342887527986e93d5ced3609775d7f65992fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df52bdafc539782c7d51cfedb3d995fb

    SHA1

    0018e881816fe4c57c55803239e1023eea77ed24

    SHA256

    1fee0f97feb863be16b91e4799ce27958291e817bc4a178b7d693a686b7755ce

    SHA512

    a7c0b709f4e98a6737aaabe310d194c985c588c29bd3b6a95c8dc37eb8e2646f123b217391db4cf36cc76b507f8fd7c45a8d165f551b08841395811d5c849ef8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd5dec035dc4f9a54b78f8444941c88f

    SHA1

    560d1796fa6383f286a274a520bd501fb61561ca

    SHA256

    d6875d513670d5be55406e3369a735c9944832c8a7522698e7bb61c8443ef02f

    SHA512

    1d59a09208e99225ba8c22e6df1657d9e03b232f32062e6ad83a8f1cf90c84feb7ea496f0e38f51c4c35ef61293cdfa6fdee555a08c210afb7d804b1bef20aee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eab5ece57ff865bbcb44619fd95932bf

    SHA1

    470d84bf08a2012570600472073d5f163e34d3cb

    SHA256

    4dd55d8037fd12c9d7cdec06b3ebd9acc887b80f5fcf5fc23dcb606b974b36e4

    SHA512

    202479515b9e8160360fa78009b35d07b7026e105ee364892ebac39e4bd60dda16473badf59b3de1bd073f35eb1e3c45984390da977c21ef24ffc8770beacc64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67b2d23381d7362bbffb9158d0eb1edf

    SHA1

    9aae7ca6e2d9d1442554966efa7f7b81d37d0438

    SHA256

    69b019d9b555edef04c8d0080fb178d55ce2f409b997511e554cae3ba98b32b5

    SHA512

    c91a3af7fec5490657545bc101d70448370f28401ba11d386e149b51e219a7f7fa5900bc1253b4a8636f43104fc63c265081dcedf60f82d2f3029e5a5b32f95c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8842a1691040bc9326ac4aa86a5790ec

    SHA1

    56784a46b53fe53774032d0aa921e804552d172d

    SHA256

    20f99eed9137da27c65def460185a201c01e1db176050168fdca3e4b15e05079

    SHA512

    2fb63e1d879fac4c6ab895b1934787e939d4575ace04340a332b88b5731a1466c25f694d82ac55acfd5533b1188bd06355b9b5e1b87e97774494ad1f62011084

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6060ba25348856cc67843c5adf3085aa

    SHA1

    ac98be4df6b972705f112a46bc84a26e0cdf9563

    SHA256

    eae60c0b2952f07d1f27da985ac10c38a43b65f5dc4032e2b0e0462218c5e454

    SHA512

    0cf710739b7ec4810c9e509aacefd42c3b3055148ac10c15668fa13a28e036db451a707397a80f6081a47f042796dd06628e35aa26f2a3b635e5d90d60656848

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    480996abea81aa9823214a0c514c9dc3

    SHA1

    15fcddb90a1aa69bf256ba0b2fcafda7f7e3b64b

    SHA256

    2b17ac1c93ad1d6ba4c188e2da41d0358ba0b7ff3eaf6e1ba794ede5201c6e2c

    SHA512

    67ce3abd446c01a08bf921cccf7344fabf51ad133923fe219ef216605d098212cf87cbb9ab87c505bd9953b27e8937c2f2c1c3be1028ce613470e09ae812dcd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1da6cb7b6c903d3632b610fc07bff07

    SHA1

    0f7ac66279714f222b847be77f564d8ef647ad92

    SHA256

    9b00ec514cdb7a15faee338c9ae31f8c0d113cf7cf335940827e3bfac5343c38

    SHA512

    c597dc714562a4ecf8529bd6a886dbdfd3061bdd993c096f2059330a0c37c18efcd74a715a46262e6435dc1e895de15b6601df50a62af1ba25c76356bef619a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca2838b1ee3478a7f5cfdae807e82351

    SHA1

    50abaf07e27181a45ccb3c211add55f3aa9122f5

    SHA256

    de5e4c251ba944d25837ee2a7fa11f6a2a2524080a58b2622c5df4abe9f94251

    SHA512

    f9fb866c3c787e68a3393c6340ed2a1ea6d0bf57e61b709fbc7353f6a62539e853f28351d5db045f8661ad4d8466f66d5321af64677ad8b6fb333c79e65f1994

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60e24ecd2b125c3d392a09d6ee49179a

    SHA1

    3aa0bd670ff5dab041feb31317756d5d0c0fa21f

    SHA256

    0c0cb995a8b942caa2c96b423959d01f17b71967fa4f9b85a9277640d2cad7db

    SHA512

    10b2fd5c190a0509196f7807a150b69c64e92585c48d206e319900c12c05cd1a19eeb2d1855792e21a07da178fe1814674bd08ee3160786bb8df3353b41a4116

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fbb9ce25f15f72db998f73ef41019e0

    SHA1

    6032b2a244192b6e65d8e9304840e330ad9c3485

    SHA256

    0dbc4adea21f04653cf15eabc04f4085bafaf01010c00e1c699815e30e22aa4f

    SHA512

    edacf080d324b1001a07f604ca196258336dd68084523057a3a68e3a6b2b28058bdd9e5b41f13ffe14976ace950f8668c2bd2aa69e8dbdaabf9ddf2452bfc03b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd6cd38cdee2b542b8fad964ac35c81f

    SHA1

    973a2dce4a1863f05c3dded7fd5fbc09f305806f

    SHA256

    97ebe099dfb046c2c90b2dee87fce0baa90c460abaf2bf9fdfe9a7804d1a48db

    SHA512

    91041e8e22e7bef1c6ab6ca601b000c4b20dcd0fa90ff5742856f2e13de662f0a183d23d00dd24fb4ee04211830ca5a3c2b0f0d1b4fcc0cd122b61171c9209e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fa0951830d23e13782405d807bf5cc3

    SHA1

    b333964bb754b79456a254b1c3e7d19d23770910

    SHA256

    a44daae7946923fa432cfc4bba7bd43d6f919d1d242ad84b726d34712944cc53

    SHA512

    7a8e0c1e712759d20d9a73d4f30df7ce434229abf5ea139ad2ff506bea4ec55ae2ca8ea9a5ea150607d164cfda570988669ba8b256c0604fc3c930402ec8ccd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d1d107622d200c9a744c4b32c133892

    SHA1

    1502579fdcb81bfdbdd56d0acaf654dad56bad6b

    SHA256

    ad3c867ca9ac61f1e0c3dbb727f00736e96ec500a3e7f493b15e1fdab5294cea

    SHA512

    9ce3e378ef6e897652a7866785609cc57a5592ac1377dcb1feb5464ca03cd078605028b43e96047a1018deb022e783a04514521132730b0e06ee47ecb34ad34e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86d0ca4ca1affbf77e52e2c315c2d3ff

    SHA1

    76f688265b1d62b34a32d021befefbfdecfa3f71

    SHA256

    c4b031c9331f87d5b5970dbff95df5c78f81a570a104a4868ac21890d867be13

    SHA512

    6c0c1b245ff2509df5742c6f4b96aa9b5f15a7b911c449b70b61a1fe6d49d41ebcfd4993afdf8473116079a40e3296bf6b612bbcc4e40e559b82cf8140395795

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2573481eb198ecffccdc7015429fb529

    SHA1

    38be6525fe989a4a407cbdf14d2557c99f041c25

    SHA256

    f809b573600639b565823ae9000d60643d22ccfaab8191c65639690b127522b6

    SHA512

    dbbd5f37dfc3fd34f7d29d1d0b09a67149a9b044ee18b6064b37ef435b25d3f4ceb82e515337983e43848a8d5bd060f20601e4c0381bd46e6d3605b5d919b328

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9551830fa93407165d839670fe955aa

    SHA1

    0889b9f8b5485f05c8744cd27b543e3d2cdd20d8

    SHA256

    d7b5b7270395418ebb52a6f4bf91d088998f7012b8cd5e9e84d602dcdf81e790

    SHA512

    619aa10d8cb4e224e1861c279b8295451f78c4b7f5527c97f0940ed8e15697f24792e220e9db06ed5929f9f03c1ab08273cca87b33d1eddc5e39e6347ece42fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d87ceda9fb6b974f8231341f811d0b49

    SHA1

    421243fb75f8a98c24808fc6358bb2de3412de9b

    SHA256

    d721ed18db2840c48f8ed48ede25d3318d0e0e0190b1ca88eca6ac6f9d98422d

    SHA512

    f0b5d72b17c933522b6562b49f35bbe1564bbf076bc7458cf009835e9383848ac7373472d70d3f3ae5c43e315e3e20bfa25ea7bdb674487f8ddb30645d609d2e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E3F2LH07\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HVBRC7A9\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JIH1AB02\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab2B27.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2BC7.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06