Analysis

  • max time kernel
    119s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 09:35

General

  • Target

    6439ce1c61750e6d88646af648ade357.html

  • Size

    3.5MB

  • MD5

    6439ce1c61750e6d88646af648ade357

  • SHA1

    5bdba7bb09ab19f2545e6ae15669592813f4e3f3

  • SHA256

    136cc22f788456f2dcb191ef6257a840feda328ad78f4e5fea04eede618f1247

  • SHA512

    1836cd07048017f3462dec00ba278b27fe4ded8450f1ae561ad11499e5a8286b8c3edb9dc42f2460da3315be006751ff5dde153bb27863e8793b728adb076b52

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NAP:jvQjte4tT62P

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6439ce1c61750e6d88646af648ade357.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:700
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:700 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2168

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8b09fab6cd1c986d81d4afd130d80be3

          SHA1

          d62e055e5d1f8c4d9d25f15a01df70edf9769819

          SHA256

          55f0c7611c93b73275ef9e228aa01e6696ca5fc1827592c07522ea0af3c95aeb

          SHA512

          c8c87180477a73fce386cbbb087392d5e4abc14d76c927b347a1230df74287fd1322f26ef9f2ef7be9e376956afa062fc308df2f99ce00388932961e134b6e43

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          91ca1f5c600fb0d54dc7edbbdb8be695

          SHA1

          d91aefa43c7ec9d850dee080a514e1f3bd11c5af

          SHA256

          f757b00903042ae3687bedfa5fb84432bfa5688827053115fe88214da7994692

          SHA512

          5619afe6c925a2eb0ba1a717e2c3c90b1a00c96352c2317120af816a354970e487691a88ecba3f98f3900dce8aa3b253fc0e87a92926c95d04d525d0c44cfbc2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          38e494c0f06be607b65f88e6cb3687c5

          SHA1

          0fe6217deccd1d5c7f6a847e24500be000121e39

          SHA256

          53042ea9564e5ac11c5453c27909479abd9cf5efa1b2c4acfe085d6f812420c1

          SHA512

          a97363d7bbcfb1f37f952d34b5a56c691d6f96227b5bec6c32541852b6530e4bd0ac80aab70de37e8d648afc3e78958ef63e12a6ae00c3292a22c7c7119998db

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b9fefbb3cce66c1d7b9bad436cd63344

          SHA1

          e52cb54763ddc4844cb40513ea12eafb9da12392

          SHA256

          2fc11fea5feb994e19b2eb84a026e6330ee2a035b93c560c835d9c24db4582e6

          SHA512

          299dd327907e5ae4cae67ad540864c9fa99dabc728513a4c869b38c4df6b30ae8f99f42819e14e9a1ac06b6f63bb8f36541f9d3821088450da748e233b67078e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d4d7ce907047bb00e842caec04ca44df

          SHA1

          258514b02070e4a60159e7543e566fc78e59ccf0

          SHA256

          1da547fd2d80ab80bd6cc3e2579eaab7f03e222e7f21b2afe050ea7376a0f41d

          SHA512

          d80c874185a222b64f1a1555b5f345cc25b0ec766c1961c2b2ea77ac6c5e988324bfaaa4bd12e2ce8aec99b824caed22f4012efb9ad80f81e43e09c52c5896c1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7fb58bf9fea3819e197238466ff9a34c

          SHA1

          f167ebaf65a9d4eb3c5ac1ebfc0d8854c2c533d1

          SHA256

          e21a5a0d37b0e0c4717c817d7efd899bd05b98c0fe1800a1e8133305f5d3117a

          SHA512

          070a5b7429934a79f7919b8427576129dd48b143210498e642abc8c59d2bbc5c7b516d67ba8aace50aafc1bae25dbb970db2f0e5cdfd49b9d2ef5ff601438935

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          352aa0082d4a77332a22722abe49ab26

          SHA1

          71574d77ebffd7a191e5253bdc289f65815288e1

          SHA256

          4dac299501c8b1125949bbe28ec851d72fce079287106db91609dbbf2f498bfa

          SHA512

          d20d5372798f5d39aaeda7e3e5f133b015f93b002ab821135dc98350e4e1d449dc6eb3b704511f7d978ceb3c543822b7503f4afbd370639329250681c52fdcea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          187fd356604ce219811bec57ca5b85e4

          SHA1

          aae287593aa3911bbd4afc14562770daab8829e8

          SHA256

          0f30355312a335d93f47ef9fc82a81d90e48b8e3f5d6653b2e743e8407e070d7

          SHA512

          cd4aab6beffbff13d460e2bb7295578645f558773040a1ed8239a74f6c778676faf026667c20ac5adaea4c97459bf9759aaa8c007a7e15464dbe297abf3c1f21

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          231967e2bc89ab9240ca701b93521f66

          SHA1

          08c7ded5d260cf99dc131803a40be6d85d6e4101

          SHA256

          b080a26a083f801076ba068493729800e53c99a313b4fbd2e776cb244a88bba7

          SHA512

          ef614453287fdcd149b1d86825d0c0c4d7b207de210c5d429b41c4f53d8a55004543d7935e06a901ea7825dd8bc96b5383175e7334bd2e4cd87c00b107db67f0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2d9dd9105aa7a371fc0cd212d3e581e1

          SHA1

          86cdb1d9705e7cce6b434ab943accf49a8135991

          SHA256

          90b58f812978472ab7ebe5219cd0b29f0926cef59c118dc3b6b3923b2e396116

          SHA512

          6eeadcede7bd6742c79558db50ea395694b4cbf5f6c3cbc23ea273fc7da586b1f62ae9153e6dc8856446f1a6565c1bd24df5a0a9121d77746e84387c4d3a18be

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          037d5f196db791fc806c316cbc29db35

          SHA1

          715026a83cf882b61433f1cd2bc26ed465f92ca5

          SHA256

          7474e2bdbb52ad71ff5e593ca60fe27615520e62a86d64a2d7b5304a1940306c

          SHA512

          b2bb27f93c2c43bbff7cc958fc3f58045128bd9ec63241767a1ae6271627e22b8deaa1afe897c43f8deacc3d76621de0e22ddfa98192756fc862e6c41014c2d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          99a53c79626533091eceb7115502130b

          SHA1

          48830f56da42745d4ca858ecff8561b40f7059eb

          SHA256

          f7b7cab369e72955f101f76a8155c32c433bac894077c1fc858d5d19b3ef23b4

          SHA512

          3db57e9ba57a3cd7bc3dc0462caf7cfcae16398aaa44a431289009dfaf4b105d4fc3db17d173b8ea42654a8c731246da38e8158d86a92f9eeb7f2e21b460f808

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          776dd735d1557dc8458afc4de49e5676

          SHA1

          06c90aa999b9398425f4db7e4ac012c5f3616278

          SHA256

          2215b79dbfb5f9ab0ce0c2b9ba6faf22f12420bf00877b4e0b1dc6768fd1b8b8

          SHA512

          1b2873e61d5abbf7b3869d2f11a68b26e78c804d07db82e816e17efd178d76bcd68a0c2464cd7f3405b556fab427612cd9cdc99de0b31ead8ac593a159e4af58

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          096a74f986b72321aeddb53c1141e7d5

          SHA1

          d72e53b57ee0396990642da2b838ab8e2f3976ac

          SHA256

          5650ccd750df9029d2ece16a122518b36727a5a4a00e681763fbfa38cf5a89b1

          SHA512

          c2afff1b0410ad379880ade8fc5abf1d0e1d9111187bb5e113d9630c2d03aafe6ec7beed2b1b9188e76edcef0ffdc8257b7f95a89e7deb018019352afba54614

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1bc7e903a03f56304c2fe2119b5a46c5

          SHA1

          21b713240db175212aa1a83ab09d2bea7bc0b547

          SHA256

          eb1654249b916ceab7a277f0a440c8c31e56e52fba71225af7f3e4b7f6122bd8

          SHA512

          0e751d80a50eff67ec012dc7a6ae1078d75d22c247bd520ea9f24ba718a92366a6e4007573e0c22c739593c47a88fa43a1c522b4b4b69ffe2fb9ce92fd0500d9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c0d222d7c83c704c19363ec17a6cb6b3

          SHA1

          7ddffc1a1f4a32c2a789e5232bc6be6e8ba1e630

          SHA256

          ef6c16660bbc319b3d87a32a04808d1d0ac77bb33fa33460817090933d2c2840

          SHA512

          93d747f48a59ccd3a741d4f8c36be41ef49f05ea58650c6c307a55d95801e733b567764d2e979ac7d28b97276913fd88227fa090a5590a9813b4610947a37cb8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3ce24a5a931b57f58aa5c517bd241708

          SHA1

          c6a1cadc3c501a880d453811c37e2ca834d7a198

          SHA256

          b5a7a11f793e25947be26e96e175df5be7d6ad74a2e7f63c0b990eb0b4261a93

          SHA512

          bc90d7b9e54cb0f384b92453d97b8ef738fa545096e7a98ff68b7f3cc170d26027376fff0925937ecf75f537d49bfa4809481185c46a4497f05a0d90a7ce7c94

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e73cd820e4ae54bbb9534980b90dcf97

          SHA1

          8f5ac23275d622c7c75a5a84e91d0e4a9ad2a277

          SHA256

          7be88b6379de23e45fa7cf234557578c90bbb998fb8bd4162435a1ff9dae626a

          SHA512

          f328260efaf92e1e52a0d3a1cfb1c15c1dabb2603b7fbca81cb52cabc8f8f88868359e7d837b19c97acd00ce9f1d3a765694edbb352b82df4be8b52a03ae6655

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          61123c577df490ddb68397db3aadd5d6

          SHA1

          595c65c39acea5d1af23763d737a8d08963fac5d

          SHA256

          121daef358a646d52f4dc70eaf1db28108ff422875e1beca1a52009ab090b7ee

          SHA512

          2356fd0cc167a339e30abf495bb37e52cd225da3927842149cd4921ce1a134c32775322c0ca08688cf2d6ec46cb853fe9c5fd8d567535029cb844ba5f6524b8e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a43cd46645d2ad36d09bc64dd4fc2a4e

          SHA1

          648811c8506fc4e93e819f20ff3c11ff5cacc4d9

          SHA256

          adedb959f8e2a4f5f2e38de800207a6abdb5c07e421466a50c7d1dc7f78ed046

          SHA512

          842e0f80aaa9ccb746c7c87885677bd172db94deb1547c535a79897c9ca33d2d5e4cd22aa1655dc9c639f3a1344388eb43f756951c14fe87ce95fd1705a2c49b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          178a29cd5b20fb0079a284bdac47c3f7

          SHA1

          2d0f996f0b364fe487dcaa91ae19f007b772f6b4

          SHA256

          74d418ca32f1432f3d4f1ba30f4c885c9e784e98685765a4092efad288c688b4

          SHA512

          81c4a337eefc279f980f6931a96faf8d3a5f68bb4fc619451599aa4a6d1407e202ed898c11ea7bb5030799136aa18c3e6c600d9cf1c582accf46af5cd95744c0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1367ecf4d4406e472233dc2d3d92a264

          SHA1

          70a8bc3deaaf8daef8c7f1b6942b0bab9e074225

          SHA256

          9838e5a8723b7a019b9af9a50aaedf2de6651d8127af894ffc5c47561933aef9

          SHA512

          8fe86e00728ea4cd98e1514bf63da9986c4ad9bf670bc21057778a6b90e28ad4124672df603375adb002c2b95a420c150150adb1a93c9b7f0e90bfe8b7260f00

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E3F2LH07\jquery-3.1.1.min[1].js

          Filesize

          84KB

          MD5

          e071abda8fe61194711cfc2ab99fe104

          SHA1

          f647a6d37dc4ca055ced3cf64bbc1f490070acba

          SHA256

          85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

          SHA512

          53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HVBRC7A9\beacon.min[1].js

          Filesize

          19KB

          MD5

          dd1d068fdb5fe90b6c05a5b3940e088c

          SHA1

          0d96f9df8772633a9df4c81cf323a4ef8998ba59

          SHA256

          6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

          SHA512

          7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JIH1AB02\jquery.min[1].js

          Filesize

          83KB

          MD5

          2f6b11a7e914718e0290410e85366fe9

          SHA1

          69bb69e25ca7d5ef0935317584e6153f3fd9a88c

          SHA256

          05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

          SHA512

          0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

        • C:\Users\Admin\AppData\Local\Temp\Cab2177.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar217A.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06