Analysis

  • max time kernel
    1s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 04:56

General

  • Target

    55faf656d1801f64115704fb2b3f7db0.html

  • Size

    3.5MB

  • MD5

    55faf656d1801f64115704fb2b3f7db0

  • SHA1

    9f05d17a8a11fbdf0187c0d8f14593368e536cad

  • SHA256

    621af6edbe9c82594dc170d73f8971267706c8fc4698c931ec59c860b892338c

  • SHA512

    c60e8624dadd75599410a5fa9c20e21c0edbd91ca5f902452544ee07f400fce8511beb5a87fce3ebf350c904205f7d580d5cf59adf368337a1677fb38557114a

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nf2:ovpjte4tT6N2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 24 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\55faf656d1801f64115704fb2b3f7db0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2932
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2932 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3044

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    cd26f315b9531aa405d76f91f55e6c79

    SHA1

    d95559c5f4e8ee7edfff57916899becf6917331e

    SHA256

    fefea1c73bcde904e8e1313566e88cd24b58d190754df4ca3f226b4a02484ff9

    SHA512

    f0c4d8adb80979a32f4905dd5b7dd637bf7b0d05ff8b502a2082352368aa6a20fdf083daaf22d0477bb1b9a0999f587430ec9644896421aea13ec9b01e5bda34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    994f2b8e22bf20513c5e4b61de019ae6

    SHA1

    a31f1d7dabdda08e50386e399222c92fb318389a

    SHA256

    6ad0634554df91803abcb225e4d42ab753352557ce6698f7c0fbb1247b1c5299

    SHA512

    7d1fa06d2af8f01d2e063064fabc22a214a198241c60b72f23e355ef7a346e1add06a1df505034243a485ec52588e8c2314540ebd3d30949f01699be51ef68d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3e2a3b13538de76ebc488c2917ac585

    SHA1

    ec4c99027eea021263908759f7683144452eaaed

    SHA256

    9112e22c4aefbc489f043d2941f2f402fc8fa361121b32da4c216f65f337ec1b

    SHA512

    7acc85f66aa97e61e128e3f1bc5e446e0cbbc984bd3c094a12971cf3131f8a0d901d942e7e33b35857bcc0a5249c83aaa92e828d93b381d734079b7c02f1be85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d1aef3614e737eaa1b7a735049a66b8

    SHA1

    60d8ef49101f142ad25bc236d47c2d4747daeb58

    SHA256

    237b25864dd98103ba5bfbe31136d32039c0de21211c3c23276b913967c6f4ca

    SHA512

    399925b5057434015fbb3c7af72c84b0e3d2baf54b71a75050f7fabac7602f1742814eaef2850e5a87c4444fd4ef8dc4ee03faf505b36751abf947325628ffc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ad718df27e6a3c804be00b396d0f554

    SHA1

    31cb9625ad10f5cdd09b8281250de93521d05d4f

    SHA256

    520b0cf505c7b78e7610c9fa20a12712f9ee168df12690c537ca68ab55542447

    SHA512

    6300cb71faaabd640033bb3aa165b2ed7a1c426895248a7857ba2574ce5372b3d153a7c3d2afebe3789b5c4620dd5b80ec527222034d417e95840429d0aa1c4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77dfb2dc105476756b935259ca0e8969

    SHA1

    1e55b84f5ec7d6a543128ba86198ccd2163a04bd

    SHA256

    156497540d1ccc30188f7cb0f96b22915fecb5fea0c4f7a04de2e5e0e44880cb

    SHA512

    ccc0d77e3ba41f0fc635fb91ec9bb6174e8152a870d5d840d34f8226798aca2cf86444634e0026836037382090419be68a35e6ab8ada4b5496780d9c0317550e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d70739f51c4a8a6d20735179ddb3d40

    SHA1

    42ee346bb3f86dd97632fbaff4902f2f8e5fd0c3

    SHA256

    488aadbf2e772e8907b14955eea17b164058c3969c6830ff86df236c7f0a6174

    SHA512

    6ccafb9fcb485a59df352a172b95860687ce81b5a9d124722fa70bd971b2edfbda837521ffb30bcd9d00b72b0e286955539ba732df55a2f4e0bd6981eaa8c038

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4137d264e3a9578d12558f8fa5756f1

    SHA1

    ddb4a9a2fb13dc46302052cd862b35b456614c1f

    SHA256

    e8d2aee10975838952dc4d21377e7eef4aa42b541aa80bf227cbde61f39cada2

    SHA512

    77f10572e6c62ae2384480ce5f4b31a259cc4a15960666dd499f9e756244776cd0da84fd518357a637d9cf7984575ea8c513947b4ab18384d69e066736cef1a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6078ae91f7eed9c8a5c43e4d26b36309

    SHA1

    d157f7bb6ea58a9ef7940fb7aafbc2825671822d

    SHA256

    7ec04e4b0d35c1326b44b82699d55b81f053d79f73c59ee9dacd3eae88078018

    SHA512

    3170ac2bf158a9ad75b886ba7bf4ac804fb4c0b4583b6cb2d0f3c72ffd617f8ed83dfb8562fc868d9c19adfd254ec4265914d89143c4704fda7618df4741702c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d917cab8f001894f39d23545243d6110

    SHA1

    096ca43f9d67e68b42a684c35ca173c1a07f24d6

    SHA256

    fc9140d5030250e7cd899fce3943cfd7c2c859347b44438b49e3ffc9f5fa0ff6

    SHA512

    11b98417f8aa2adb2556e9cc9b588597da9a27a6ce02f2df368964ca6cb13a8e62635f0f83c69ea48c1726912e5b0dcc508b141125194b3e47f0c18f5323c908

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86009272a98439e28144274234844e4d

    SHA1

    01701860d690f3618d5a3fa024943dea32040970

    SHA256

    3f062a514ac5a661bc47a82da320eb4b04eda04662386fde6a31a5d158b05490

    SHA512

    0741e70ecdc4332b82353774ad0e700b48a465c74608b72ec15b10896ed3afd24f5bbf6735034d3bc2509eaa8bbe5555f02976450d67adc330830caa2faf4542

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    757145013aee61877ee964bb44204d4f

    SHA1

    a19f3ee036c6850138649949968b00ec102ffa61

    SHA256

    406159b3f8f42a92556996631a24f578806e522226b5439f834e27878561f676

    SHA512

    2c5e997f21a3cc9d4fc2267249c8c2aa05dcd3a610d641ee6f8f8debefc6636a94f1bbe67bf68f4c113198253d1a2cf049b79f8fb030663cc7c9a195bc976dd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8317402c687fbc24608c7141039c9527

    SHA1

    1ffa0d960f56449d3f6581342986181eda05292d

    SHA256

    04b140dd7eca47de9dccd7b9202a2fec4811f6408c0667dbb12bacdd2f01ca92

    SHA512

    6e97a298ba7b91d616194581e180e24880c948ca7ae7c6d75105df8e319eec032583f331da19ad5d1556d8deb8e487f31f4580316274effae375c0d594b2aa4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    724e9a68d064f1be5e6fffb00cec0883

    SHA1

    f8e080428f38ad724eb3c047b5fdbb2fa7531530

    SHA256

    acb964705e81246016c95a2ce496b8ccb1cf5776eaa81e36b4af8c6d013e1dbb

    SHA512

    d5ff6dab97eb8a8ad25cf2690ca8b1787c75083966a7b0479ccf72ebb0fd2668f4e185e13ecbac50751352221abc0d4dd1f011cf0a60702da8af429c4f9ce605

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    317501b848d0d85021d01077a954148a

    SHA1

    09c0eb23c56a98d8e9cbe26dcb3627521fee7d26

    SHA256

    f8105ab1b130ab423baee7d55a56af170f3a8268e2bb8d77f3b6bc7905071bea

    SHA512

    dfb8611098c0ce4b4ebb34cce7e5eeb7ef37d99bab96c645c78625a037ba54a787cfe0faacb9f4d218501a20350d5a17f7c4b2f5ca6a5d4a77c88a012711cdbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2eac8e185ec552ef6480a9b118a2d55

    SHA1

    4f8e62e8dd6669add04682bd33fa3d2ae602a822

    SHA256

    0a5f570f7ed90635e6377fc0f5acc43a8f327b9d397dcffab88adac6088831f6

    SHA512

    1319683ab88b4245bb2fab3e171381ed312fb1c3c98566361c66b90cb920a2b6fe3b2bfa44abad5ac44dee74755868d92b476d636b1c7aa1be87f9897f39e5d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ef623d1c356e9e60f708e19b9b9fc24

    SHA1

    d0714e8c978de170da340a13a80f3bb6bd475fab

    SHA256

    fe76f0f778d35d50b51ffe0746ca5fa069b45531d73a989d72eb323bd52a90a0

    SHA512

    90a40ed347f76eba4c12ed7655fd25b949a2a842df0c392c690a30e62007b5499e0dd8097b4873113ef8b6246d317a9fc3215475eb579acb4e3cb5ba88c3d427

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b70b238832065a86398b73a1b68ac18d

    SHA1

    8bed2f21601d21adc89421e74cedf0500cd3a6e1

    SHA256

    c2355a2c105b6ea4efa90aaac95415f29a4541f7a07ca9ea9e0b8ac7514c39ee

    SHA512

    f0f85ac40f2b5dd281cec1e76d15608cb40dbd971b32cc78a1cf9584839e30f5bd0a46c8520dd64aea30e59f2886b87ec7038cf557b38caeda717f7c36eaa727

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4dfbeb6f982e86ceb411994a2e8bb658

    SHA1

    6978c1a4d6e15539940326ea2e3514ae06be7e65

    SHA256

    f982df2616c63ba9617e318159725e93504f2d7cf66d198c60d5a0157d4d7430

    SHA512

    a8a01f3d85c8db05a9251cbe242515bae70d17f959c73cd4eb1e950d5668b068ec1c53f748ee760fe92fff6dc11c9696ac0df639e7c808c35a601daf6fecd222

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66ebe72899a90a4cc445831388609705

    SHA1

    6cbb6ce9722e5e931100ac516ad297daf5b9daa6

    SHA256

    f79f21f7c01f311d37e6a75ecaf50712eca5b518ed211ccc7af0ebd4ba0d787e

    SHA512

    9a4b1cba4f5b56f2a0e63dda17603b65790bd961565c8dfd2c969ca2f2d58e37edf411da5b4331a7361ca544e63ccf43755a1acbee514602bb639ecf1ee7e470

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb4aede539e1a2fc75c96383088d09c6

    SHA1

    36c3c40e57101c30741cd1a8e42a063a96debd1d

    SHA256

    76af0ece444ed3d8f510385808a767e47b870991fb47367a1b5e1c10f0554dd9

    SHA512

    bf768de1c08adc8dffdd5b7294e0a8647db35d7c69abf15f719797dcf83297630e5ed3966fa8e3b2481b1da7d2cbc27c6210157bc44c22c60e13ffaf32790aca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    303022cf9dd697e5c2543a3f235f98b0

    SHA1

    a1228e243eeb0df4ead65dd13e7621cf8d36358d

    SHA256

    cc884ea29f05a50082f8bf50c9dc2bd4e61423d06bfb617646946e1b4ac8c22e

    SHA512

    dddf2d25a4af548ba168f30f3ab4c5117644b65867c4e53f92c580f47e87d3c319fdcd263ca3f4119f8a6f6fcaf7bdefef77a2b44d135980159a3239b78a3ef4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    70ff4d366958b350c612d9634b721371

    SHA1

    5b2264db1ae90cda8e9d97b13c29f520aacf8b5f

    SHA256

    d45921b6c43f9beee0c8bd3df07fa1a75657e34ea7574d8164078930677005b3

    SHA512

    f71d173d86b11f26166409bfccf0502c602475bc204dee2d1634d86dc967ba20a88599b548d18b29810ee54b95ce7375fe3a9a69146e321a0c613b7a35b97b30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\263UGGHF\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7YH628QE\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SCOR53WG\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab8B8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar92A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06