Analysis

  • max time kernel
    122s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 06:14

General

  • Target

    58ed0fc1c5d44133e5f55f9bfaf336fc.html

  • Size

    3.5MB

  • MD5

    58ed0fc1c5d44133e5f55f9bfaf336fc

  • SHA1

    017dcce3f3b1379b135eb4f283f34ae471b0a625

  • SHA256

    1228ffc20165d8d847a123b08292e7f118249a30ffabcfd7baec66d180942016

  • SHA512

    c9b59eb01f2788922bb6b45c7530f32453a1c8afe44655fda6fd2e0549a342656b23443c6337bbaed6f543312230f1ca3c716e524252e806e9d6767f82a11c1a

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfR:ovpjte4tT6NR

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\58ed0fc1c5d44133e5f55f9bfaf336fc.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2752
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2752 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2780

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36d6cd7277c1170c863b4b5e60cbec71

    SHA1

    b011abbd320d57c2461bdfe8a5e368bddcea4d6b

    SHA256

    8bab65b97c64124585e98ccf7732025c5e3e60179735a06ebd78e766a8abff05

    SHA512

    374c8607ab8b81df32fb1f2dbafa88dd3b235e46d31c0f39bcad0c88b098c134983dab6856aa3db977349b1b4be7d5bc1ff20bba9b79672c0f75f15774b5a525

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    786014232e2b43c9e6bcb19259d50923

    SHA1

    40f557387c25edb79f3496e1da6efc5a972402b7

    SHA256

    b7de1993e58934e0199bdd752a0dd55d6b51a72af0c6abbfaca467ae714cf2a5

    SHA512

    44bb0a25e9e4ca6b5c8cea770c9b476435afac5ebb3d6f78efe584a30128b89951711324f8c02f71c9fa528073a73257d93d0e97a4601aa1365d7d94f4334f86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b20c95439b0c9cc4ab9b6a24fc7827e2

    SHA1

    50b980f1e8d218b63a994ce38f2d01bed77774ac

    SHA256

    49e7f403042c8e55ca9613bdde43cd0a721f8e35fc42262909f20f6257e160f3

    SHA512

    299d460c3fd636398b110d041431beb2009488a176b7026c4fa4de08b11afc7526909e2e133cd4ec2f952185a841e9e87b119f4f15d7d28800f31051b04b52b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52de2bc9db8309d15e88eb360986eb83

    SHA1

    7ae7ced4d2193273ff558dd5efd2d00440204b16

    SHA256

    e5d65e306a28def455f7b5b7a6f4a01f34cf7ec45f80c6fa02b47f83178a5f49

    SHA512

    1783b152cf9f7bd3c2240a84d51809aef600f37f629d1066e196705506a7be8439483bb870aae4cefa5ea561e815c0c7bf177397c79b965124009f045b69d4cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69bca9f3c2d6863c41f3b99de4af6352

    SHA1

    ff6c8b09caf7061a5df630355b75260ef406d920

    SHA256

    6f6cf62387f2dace4ff65088e99e787f19cb01d6b9db2ab63968c8ac143d8dec

    SHA512

    00f352158a19b6ab019bd69a396e97e91eb5a2339635afa7d987da0dc31152e962dbb9e69a771ff282843a84a6d0b182b54f5dfb98728e6f91239b0800a18214

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    996f9df2379cc12ca30151895f9a3406

    SHA1

    28d80901d77ddb0178de83ff1700a55dc07110bc

    SHA256

    2d9e966454671878d3627b29b080824fc8d310ddeef89335736e9cf9d6de1d97

    SHA512

    d1adb86ebc11b01009af5823ea14caf29610ca7995dc9f3c06fbd164f40157a5a422a9389a2c27c1d86ef238959b8f44ba50d3bcab4bb5d3332fdd8627c5accb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2439232312489cac7f3cdaa1d38128c

    SHA1

    0ab0465b4b83860df2901450433e7a13fced9bef

    SHA256

    12bc281a5d21fe49cc5dadabc1a52a4ec8503933205435e664ec6c63cf75f55f

    SHA512

    fd468d1e34bcd9c69c960d5878e3d7aaebd31b96746ff59344ca5a7508333f12e06132936e84a5a543dda17d4cb933e66bfd1dbee8c6fc6bf999df26edb5c889

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6b454cfd17c5e250dc7e61130ff52ee

    SHA1

    a4949020c8dbe88ac20d5ae1006da19040421005

    SHA256

    edb0dfceedde8861861f863dae55512705e92f00276be7f0d2ad45d6316009f4

    SHA512

    034ad92851e07b7baf408d9931bf80c7aa21adc426d0bf81fa0254ca01b8e7bc8d6ae94cb9708e8fc764aed2ecdf59e94eacfefa74c7ca6d7386ab8f191876c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50ca674f8133057d4d3006a1c8f00f09

    SHA1

    e3982de2dd4be80d00a6c542c34c72b31391e738

    SHA256

    477d77e499032ae8c5b5227cffa8bb22d8af1a2a31387805600f151c373b462d

    SHA512

    8e40e771b9ed2a00d7af8b08c192893072d0bcea460d2b9784e8fda57be68a9289271a678b4f0a9e9d53884bf0ed5e9dc0af41d7580dade08f89f56aedcf17d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b73013af6eb72d9b3c7f85f56af1f1c

    SHA1

    fbac670a1a219f2f07b44731aacd0ad17b70bc6d

    SHA256

    2195bad93e0f30034d0583ffe6883450b68e9306df615903b4c4909968a4c8f4

    SHA512

    86fe741f283177ea63d6f91d6ed405f4902c115761ce97c2c06da7be7d3815898c202709761039523de4054e49796f6a9e55342ea1bd0aefc85dfc2a0939028a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1802335b8ce229d33aab7dbd2284311c

    SHA1

    845d03f5cd8e3f97f0ecfa5874ba50778aaba45a

    SHA256

    adb26d323005aafa0eaa70a799a3cc0bb2d2fad922b54c41172d1a81dbabe118

    SHA512

    c61e2909a9c7f3588ec55eccd78aa1839ec012350682f889b8c200998919248e25ac36c434ffdf6254a8a5d8f2a489fa6490f551192d4af328ff6250aa14e737

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f67f1333239370c2e413a4a1ae8d2d05

    SHA1

    ba0554f546248e85d1c874c7f844dbd2143a4a40

    SHA256

    d0c09612d02ee94ee819e0be61608f8376c63c10da6ff9e4ed042fc06c1fe25a

    SHA512

    3c67cc1413bce2ba056ba126f4d0661429efbad84f7f35e78f53d08cfd6d6b7c2b724b72821e58a59a6e8562826dee87a86d2f090a175e919d96d33d4c880ad1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fc2d9e50c69aa9e1f45f2247e09ca14

    SHA1

    b23379c060ac981b86aa885c404dc5edd05b8727

    SHA256

    bcf51513262a028aecf30e9f5114f202bbe19cae1dac13a332008852d666679c

    SHA512

    5aa7223c8d38907dfbc19d28b40ad923184b230c6641c36f32dd90bf6aa75872aa454efca6c9c3ccda1262592e52f853e633b8188e0ab461f6ba26197afcff53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b7cdb3e125cfcc082e611743354fbbf

    SHA1

    4da1ad8a92ccb0228372f81ef74ea7706993d8b3

    SHA256

    8f73cad6194db66e88d9ff8f4e2161fafbe43a5655466868ba0717102b9b7fee

    SHA512

    92d802ef07f26c320f4e20b968392fbcac2a8adf74fa97e7b1b7db548ad3b4d2cca82d8a989b36484cd8ac85e1ea785b153de73c56eeacd20d4ac3e645b9f39e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e39b97d4cc6f04376f37cd55d0dc7bd

    SHA1

    3ebfec8b552837f1e07976985c7ca069fa8ec63b

    SHA256

    84e26581a6b5ee9a174d269c949f5b6979d1b2a53bbf5a24a078d9ba28596698

    SHA512

    2fae6c9bea002668caa2b1ec845e4cc30cd575bdd585c30ed1cf3119afa2557c6d671f16ebace5fdf2e0f80dac877740be2f17e2b22edc743eb00ae9956ab2a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1006c5c45898bfec176590ab4ec5435c

    SHA1

    3052e237e602f368de19d0f255a61655936747fb

    SHA256

    5bc1cb4e4eb85b163872c7f16d79a5c030b0e6f308111f5de79083e880948acf

    SHA512

    d22b4b278231d11f96307a42d290207ada91f8b401dd959ee2337d32bbf5bf2cc4a2f21f00f64f9f6ad26d34fac9b73e2e9b1dfdf6962fb36bae5f7d2a920fc6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43a3efca166c6f8eca4ee80f6dc105d4

    SHA1

    59cde1356f9856d9483fbd8e4922768ae0583df8

    SHA256

    a2b4c3cba9d3696cbd600c3fb63f7a88eab6541766a34eccb46ff96d5e34564c

    SHA512

    e63671285c38191e9c577b39bd45bce3de499fc5cd6935a51801f18045db8b3aee765af5b10d98bb4ce8801e6c42e2a3038cf8ef26c30bb36604db20653ad2c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    891309abb7955d85aaf8a8130b2f29e9

    SHA1

    7a7349cb711820eb7475c2b48a5e4f4c1443760e

    SHA256

    831859eba42bd8afa18ebc54e70efbd2670fc3c432eb52bffef54db781e683e0

    SHA512

    da32eeba410093a933212c97c6225671dd37bd740e9387071ec043f10bc72b90c4be4d3b23f086ae0f1d136c97a036134366823eb65fc14e96f4d3e1ceb7e027

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ec87cf7307f4e70000c65acf595249e

    SHA1

    c8e39e28fc22a86f062bb7d99f68628b64f1fcfb

    SHA256

    3510bf4cac883d8ccf28bcccb0bba00cf905d0611036c50459c1ba87338edcd6

    SHA512

    44a858215f11cd5c0dfc709eceb8c3be7b6ba30ada28e001f6995cdc72c6b2083804aac0dd787015278f422c84a47bcf69d9fea6b3c25637173ca4a6b8e8ff52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b21317d917a931e35acc207894a4a3d

    SHA1

    3e858691c95a4010ff20742b48bbe4c73e5a2cf9

    SHA256

    2562b70303acf470a5061d38986e38bda5a0a5bea4f61f3bcedae171623a6db8

    SHA512

    69a4de018248b2df4defa47e359805383f944a9ccef6ada6753fb9672046bfd4b9e6a941fbf69c488f3a7a30d0e544494ab1ac38412b048ce9bb60910568b97e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1241626bb3d0fd2ba451e6e6499670c2

    SHA1

    dc91f7fe793aaa9dc481ac7a69afa612297cd22e

    SHA256

    3deff761d03e4f1c09870863b0e0d047d577b90ae0654e5506bcc890df73f227

    SHA512

    6b5ba5caf61b9f7625dd68b6d48cc02e58556f1332c0819067ce1a3fd67795f6d38e84cf3419456ef4a6704e49cabaf53d48ee63629a6020c16a9238137bf66f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3eb6cde8cc6e78f99b2c8960bb67dfb9

    SHA1

    61c8c7026177c6644a747c3fbec463145603d894

    SHA256

    5b34e6a2c97ca16efe199b09da5cd6d30803e7ae4d3e15c8a0634a73fca3809f

    SHA512

    008cf538643f1734def0e49b1a429a0be14ecd32a2d190469e2d6953db4f48588e3531eb635f66fe44942206a3e9f9dc97547759b2975594d0f90259963ea935

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb9582e706abf6aa1ce5dfb47dd7068f

    SHA1

    388ee90798aca51569f7a044a9f0787421cfc4e9

    SHA256

    efb92c1cc300b246c41fb06932973ecf7a7d6640c83eac22926846ddd6437c27

    SHA512

    eeaa7e38337020e0231c6fbbfdca696681bcfc04f9b8829bf71e4c95cf3eead39d6b414d83474e7912ab18776fec4409bdedfc2494fea93d472db3bfdac98bbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c07e7c1da293634da40f78c33d848335

    SHA1

    3b41dcfe84c84e852d06b72099708d94147543d4

    SHA256

    88298fb22b5b8c12792123dea03193efadc81c5765a2b560246443d6797a6a66

    SHA512

    675b2f1122fe87eb4752b0ad583a20300a41e6d72557b8faa2b37f9d5ac451ad2462ddc4dbf5e313d8837a3df5f8b97098a36018933fb1f41ed6361093c3d8f7

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab77B3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar77B4.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06