Analysis

  • max time kernel
    137s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 11:45

General

  • Target

    6bda9e4141c032c43b15f32866a623e4.html

  • Size

    15KB

  • MD5

    6bda9e4141c032c43b15f32866a623e4

  • SHA1

    6321eeae06b0fb7e537bbf09a1f49f8f9846ee4f

  • SHA256

    7fa40a954cce548841553f8ad1dd1fc289898f64441c7267773b9dba8d172e4b

  • SHA512

    771ee3f58238d1faeb299d79031fe3aef7527f6f9d6755cf3bb1575a30ad42378ed3d014ba2d9320bac3cce7ecf2f51f8b841d3d86ed4cdc4cd1f74700d9f346

  • SSDEEP

    384:S2t+ri1s8G2cQADv+WHQI8ojq8XTW+zc/21wdvvdL00:S2to6s8G2cQ4vvHDjhYn

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6bda9e4141c032c43b15f32866a623e4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3048
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3048 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2640

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f482305d75056974f1d2f9d4090f28a5

    SHA1

    16a6208fee1c413520c3c33f8094edb3ff05dd59

    SHA256

    a5fe0bef38d3f603a1e682651a39f2c8fc5494dbbb79a8e775ad3d1c36fa1790

    SHA512

    5b8cb3233edf0abc3a67b8e3aea73b2026e13e6bf446c47e7c5966fb3b1282ab27487bfd03722bc3ae02aeb9d49425066d1e26457a3446797bb80c9ed33c9496

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd7b88fc66da637171cc29127f89ec4f

    SHA1

    652c087ad891f384930b844872d8bf0fdd3378c3

    SHA256

    54bb3e2b1f9b73f86c18b873140f1382f537d27f729dfa272724c0ff1c66ba31

    SHA512

    9cbc4db3784ad09aded4f5e8c90a81a71d2f1f7c327c273acd66ebeffb05a1202baf768bc1a80589c37db889c11f6513069d60025d2ca1bc0e6d121194026c66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3687d30f9b4296f547596ce55977200

    SHA1

    8ac8d4b7c5229ecaef2e34a180e6fdea95dc18f0

    SHA256

    391e6d840c3a8bb775cf0ec0a0d0d9e1d7cb073d7c556b4669b28e0f8456ae2b

    SHA512

    ef61ddab9a07f3569bbc7af0a7fba8bad37fb7a55326d166ae8b8bc33d64952833dab2020f1e7b9ae9ecb0a7fff6a5fdb071284640f6973ad4a9ce047268eeb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d434780f380dd50dd7357bcedf70f1a2

    SHA1

    d1f461323c2ee1d0668a0c5c8b2dfb2383341476

    SHA256

    bdab810ddae82877892b6d54780e2823d6366d1c2f69efb4cad5d0732e83d435

    SHA512

    f492bf00e2720c65d64cca124038448b1b7158fb6659be5401e5cdb1f0296e0c63dd87229b67f8244ed9d2992cadfd89ff7905544bbe963795ac624e43754fbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f915db334f08e97e16e9595713121fdb

    SHA1

    15c2bb4a82ac9e681748264130cd9dbb531ae87c

    SHA256

    0af603bf5544953133089ac7185a8befc8e7bd0cf2f4006126ed0694e0c39dfd

    SHA512

    9775f6b3741a7d1abb5463eaa1a132d9dc4c422e126e8106f04b4228791cb4c46f6182d8a9b3730b75b639341991a4440e5f7d08be7482a55816056ecc208e40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    470b93b12ad39ab2857d8d550a6f0855

    SHA1

    6c4c1ade6a6d8d80a0f45a26d385f5bea65dfdee

    SHA256

    cc3f1bf67f2cec2aa8cafef54387856ccbe008363471a7d02aafbd051e26534b

    SHA512

    17423a48e785ec479351cdd4958c73869951e2fdb7de93cdd1d58c4fb3a0d7ce7f57e615b219d463f399caa33ac29100b3764aa68f2cf98d6cd1856efbc7bd87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b3b27110355ea33ca9b8c084b2c984d

    SHA1

    9ca3e79519571c232a34617c019ec9473b08be15

    SHA256

    434adefb5b1a40f196f3084a579b046690798d90fcc1f330b5aa1408336cb4f6

    SHA512

    40b82a32bc84e78f82bdfa5c5dae8ed2d422397cf7bdd5afa2370fb51c1c52c168f391b7ae6758032c1844ed61c0859c9448272c49fe9ed38df4fd94c608fbbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    971407a9c6f38cbca51b1f11f5b72cb6

    SHA1

    ca6ef56e6cdaeebe0be71e74ba6a0b7fcbbac09a

    SHA256

    c91fab9eebd44ac3df9e17643b8cd8ed473c071f6f7a22da5c2becbe66d4ff8b

    SHA512

    f35bf5ee1271e1185500d028300d4024fb2ebbbcbe497d3889ef14e7191c4197968c6533ce39e9ddf11119ed3971db858b2cab5cfa7a50eb89ddd1265520ac8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c634acd3b2e39c2b68192ac755e0538f

    SHA1

    0e4b805189a02c9f0f9b27a1a9f0430598d87a76

    SHA256

    3a3d32ca449245fa786356934df60b4f6f79644798886bf26d92006f23e4f513

    SHA512

    2e7fa966c54541b789272c244aad43988c74933c8227962c5aebddbad2a8b06d908793026fefd922165838391463f04d15182367305970fa778d6f1e0bda1379

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82c98565d01c98eb4e5a9588d8fc0d48

    SHA1

    069697c4dbf2611f9b62401b27742fa3ff7b4b4e

    SHA256

    bb9bf6bbb5e27a46bcfcafc8e1f5c667eab24270838e36520398152d86dfb0df

    SHA512

    4a9107a8198cbe9e6badf622d960b56a64a9c62036f32bcb705a398f0eeb3fe5187eb6ce90c5bf0671ffad3d60aa36283d1ce5f32cd1325feb8c3e355c694f6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e80aeb4223c9bb2f23eeb28ab236a0cc

    SHA1

    94eb80d2131b51bb370df7b861075584c7f1c91a

    SHA256

    d66c7788c2b1ca4474bb004d730bffa1cea1e3d270fcd416b99cc819467c3932

    SHA512

    a8b7192b204ea3c17776746a4ed5fe5e21d186c13ca9def95e6815dafc6e1f4d87e311fd34661f11f0528ff3f30ba0daa086388ebdd5b09bf2e3e3e3be200fb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58f71fc415fa207d993bff9b2edc6a70

    SHA1

    707e1cfec4d3f0e5b9a542c1cd813ac101db73ae

    SHA256

    d0c2d3ee98aad0a126e66253e8ba5bba0afddad5358a0b2a4914c101710fbe4c

    SHA512

    e95b4f4a8643bf41e80a06afe3c7889e1c0ce4441bbe509fce1967d92f05c7dea280889a5f9b4235b23a065ebb099625810abd215190a86551ced002ed3f3b23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d64258dd74a3533e800f1b6fbd6062bf

    SHA1

    3094b01dd411eb81433ea27d66cb9f3f7653d849

    SHA256

    fec9659bd972b8939368a6018cee27060fd399e0564a1060ae5de4cb5a282ffb

    SHA512

    786897e77726fef847c90676d6fc2edeeaac13c324830c334852592b335ecf042f051457f944340a50b1c0c85fd68f1f28db1e30d2524491539fc02e95ef6c2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8475a8925921480db055d086f2a5cb6

    SHA1

    b3cd5784390fc33ee1a5183141f444af8846d9a1

    SHA256

    836dae86f68542f54b35d8b74191e32cd021e6f21d8fb02ebc2f0ec55526a815

    SHA512

    c1a8d555c255baef45eb4057387e9e190f8f0e3dd72f147fe642e4b5c83a5321584975c29b27cb16a8ec05b15f167e115a7afff75a58cfd69a56f76bc5d71ba9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c82208d064b7da0c25cef77ed46b21b8

    SHA1

    ab03594c1842e674d7dab243ad1ccee9938c231a

    SHA256

    fa65296f2915f575b06eca46d2ba389e2686afec57c0eee2a9a243b068ccc09c

    SHA512

    12fb9cea182f949a814822714dd14a5fe7a24a4df6364f90771c69a3ca0f45de0f208aafc2359a9b0448ce3b57d18b2e56e3f8a8816c66c9a760872236c4aa88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d329b7a6ca32221b2161b698c2a0d0e

    SHA1

    48b03f0fd3c35eca075e5d7db45548dd99a02faa

    SHA256

    48f0f6940d217b56f3493810b97744701a3db60f0455708be3843b06bb8fb416

    SHA512

    dc05ea454ba61361893e5314f9a2716a467cd4996aae14a7c02719972ef15962ba27d55a2e21adce808ba46473662650ca433a6e9b35f6ae30373be955edb5a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82f1ff6ee31a6ac786d010dc364e2877

    SHA1

    057b4e6ab170047c4d95d4ad7706690f6a4ec987

    SHA256

    8146ffef0111becde7d8b2e6ec53f7dbd88005ea2f46d555286761c8342df7f1

    SHA512

    84d0511e64c817401086a00f4eed46601e31a8c1b8b1c37ee67605f4d00c5de7b9306d965c7814b2c12dc4ee7b2d0d661169b596a33968456c64c760e238107c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5dcdedc3ff30898f9319cb270bc01887

    SHA1

    6bf711ac04d65cfbd941701342367188a6f2fbe5

    SHA256

    0dc7069bde3e31b75afeab17630262ce1570817882d3357f11ef33736719300c

    SHA512

    d5701f309b1cb787c4f317be14a54d87c99f6232fa5f3ced2928dd7490803a3bd7b4b1437cf147049c16e4b27802f84142aeceb1077a10678eeb29b2476763fb

  • C:\Users\Admin\AppData\Local\Temp\CabA527.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA9DD.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06