Analysis

  • max time kernel
    135s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 12:49

General

  • Target

    6fb64a844d189034ce47367fa049beb5.html

  • Size

    2.1MB

  • MD5

    6fb64a844d189034ce47367fa049beb5

  • SHA1

    af97674633c6d573d89fa5c6f4ba599401555a62

  • SHA256

    dd98e77ad3a9e5a2618c34baa0387e2e2b7c577ae76c49eeeca83f072202b1a1

  • SHA512

    1d2e382e9d338aac863701e195abfd9072db3f455597425195603f38e7e6fa532da2b8e11ecf74dde3fbfd776448454321ff56999b98c0faca277dfd42da2374

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfL:ovpjte4tT6NL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6fb64a844d189034ce47367fa049beb5.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1752
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1752 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1416

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2ef02a6a744694d3c53e65df0ca0156

    SHA1

    93017b5462b05b869d956eb05bf501cc1f0a57c3

    SHA256

    42d3b17e038710f3b9dd348c7dbad2ea6a99439212ab07fb92ed34a5c2cca9a4

    SHA512

    e12ae523bd1040d1b4bb8e97b58ed08c601526c3dff01bae9fd8cfb2c9f4a3249dbdbb39e94f2a1a910fd387d8505b2cf5705ac95b7f63be73efb0be5ccf3bd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ebd8db73f60363d153180c3d78cf8a9

    SHA1

    f265d0296ce185295e7d8d8c8fb381d47780b107

    SHA256

    da3f5e41409b7528f28f1c4964653c6810e1e3a3704e8f66d3fd6bf07d0490b4

    SHA512

    3ac3fd6d4032396eb0c045759652e2f3c24ef6bdd15ca07d151087f38575cc8456f3354d0205c16c54e5e5e6c4e5f3452b1cbe5c58ba12d3e5966f4496afec2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4c415dc99d271f18e71d98089089c4b

    SHA1

    d09350249ce55c6df3026a7c6b0965a81233b876

    SHA256

    a8ceaae18e5e86be7c17a07ffd77d92b4aacbaa9698ea903461540d2766edcde

    SHA512

    42c612bd35225863a1c430b51cc0ff4c9ec88a0a4c68ee3e0d44a4ea46655d2f4208bdb2bc85e475d512c3964b5af1e6b29a2a20a6850d9ece7d3c734997c41c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42e637bbfdacf8d574303d5355472497

    SHA1

    16edb32c25bdca277cf8d215db10393c77d1924a

    SHA256

    d5f07bc9bf677665df4cdf3344d897fa2cfb99558c850e35db74425ce344a31c

    SHA512

    a6ddc62926843dcecd6faa96c379163287be0a87c6073d19b00a522394275e11ab285fac06acafcb21d21904716c9d58e93896a2830d1c3355ccebcfc7a0fc8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0aec20feabea58dcca5da95d92e04ff6

    SHA1

    c719cb63404c40251c053772ef2e0431b3b9dba4

    SHA256

    62653928d4b36c62d7a3341f1797419a282c702f49a04d2b764a902af24938b5

    SHA512

    b588e7f9a29a682178c504d7c9ba3ff9317faec5030938b474f1c802b427a2c7dc2b6b781ef63cd02a28bfb34df064bd49a36f4c877650a3f598948f6b08ffb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff215ba74d39b485356e06ed8d2efc86

    SHA1

    8c5ca7e179fcb8921b52c411fdeed0c397fd829a

    SHA256

    32ead8d1df52793ef37778fa2220fa34dfdead5a4ac2d0a251838d3f1745568b

    SHA512

    d028635e9a3cfee5e94e9de6e0d35eb9ee976c234c4e7d15b642263e2028f6fea46cb794ffca47dd871157e044476d4fbce7418da4d40995eeb84cbe13c55f95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0da39754f1508b030370b584c103f07

    SHA1

    b36a852b96f4908b667b6fc56e13db6697cd80e8

    SHA256

    86a00c8f6d4af75130503d932b6bcf15400b201d4ad3019057cce021ad5e6b4d

    SHA512

    d46f80cb8dfd8db1d69d1bded025930826479e7849966e4f0d0c020717424873e19d0c0dcaf85e6ad8d744b28e7a67d44fb28be0a55f3f92e7f13bd58a8d58f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37f4fdef835fdf8325944d228e07432b

    SHA1

    1afd77dd1d22da5a908c06284eb3fb5a46be5eb6

    SHA256

    680681f3dff2ae453f14dc423176a7e914ebda8a73b3f32505daa081db85875f

    SHA512

    d86d98a45d69fca5947034045b4e34e1b2e21902e28355f6edfedbd0a70aa07a0b8cea8e7c0cd85d9941f71bba3e353b0cb720efdeb04ba22eb904d35a60bff8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10e8f6e255f606009b512c263c1a1db4

    SHA1

    2a5da4dd53b32e738f6ecc8a04e320c79e2a8549

    SHA256

    adddd1ae7355e73df32b66274957b6d7f3118f23e7c1cfa939afe4f5876bcfcc

    SHA512

    9b3a261b59ff3d7de34424fb2cd15dce0fc577b878d7250ef4e19853469f751a5dc662945e6bc191513ba15f719c59a9b1f88dd34d0706b8b25398343394de1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77c6dad322702e882430abea8a8d2b90

    SHA1

    68b56204c5759526d56a53126038699a9e1b4889

    SHA256

    0404cbbc04f6e97ab3da8f859d70e9dc5ba8e4c6e2ea8b2b92a5254416d3bca8

    SHA512

    01e85e43edd2d9aba5df3a7f1f4d5147001b744d22d9be7d923c025deff84dd4e5fd98e7aa3e052440020eb07c04af7ae1e7634c44b759f216cc6fd14d089618

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75d04e5351982b4ade7d7e3ea69fda2c

    SHA1

    2995ce69f49f94f55841d58bbaa9f1418bee5e45

    SHA256

    e5b753fb4a839ff8dc746f70ca9b6cff69b63e461686e4cec3d9cbe7c3ba2efb

    SHA512

    9f13bac1a1736b3525550953b3bf83b5c37b6774812f02ea589f2a40476ca01409d68931b0a0ea2d46137961c508bac73004e48a26956be739f88b5902448498

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ba986d85d02ea167c9af2c2a72d89d5

    SHA1

    5a51021d245553c4b3d3b21b4fb12f938387555a

    SHA256

    5dd9e760b2e68e7e3609b5492c1f8f6817b9db9af01a39cc5ee98e2a686cd461

    SHA512

    9b6a0a41b36b6572e91707342a355f2a6aeaf0de167a12713ef4b32aeb6259284b77fdd7ffdeee3ea97f0cc4ee57805dae6a0f5b164d471a186e78e11030a9d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f772b755a3b0a3ae5b8cd7f4bae9f0fa

    SHA1

    a0e40fa14e2aa08fa413951883573e24ca53290c

    SHA256

    76a56f70c0b360cdf9f72b05f74d1de8b215c2e810974524412c9e0cd855666f

    SHA512

    97f4101b3b9d529eb40ced94a7ce447feeed1a3c07cf8490d1370d5dd581d49e6c281e7b6535dada7a480728332e8c8d62975822f95a0d69df993002885d7d4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67f35de2140d3592000f18dd452252d2

    SHA1

    b4fa1ef873d05771be0a18274116c115f85866b3

    SHA256

    aec7acb988338a45fb31d9b05afd9a045cc27f6e7836c19294d6d795b8451688

    SHA512

    165bac0dbf6bbe56d7d6cfe9a3d3f53f95b8031d75d0c5bc06dfcefb9d3e3361b27930e869eb5c2e5d7ea76190c712b9202392c46ad3380dcdb7d2feedd90209

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6b6b4aaac7f91db13fb102975eb5831

    SHA1

    1b8933edf9e2db7aa886f1f5616e853aef5efb38

    SHA256

    6df02f720e1d235b834894a1fceed7dcb9ceb3eb56765e01898ee4685f95cbf8

    SHA512

    50fa09106a4bc1151616745a0a8102501868719f88d0f466a47e606ab7ebacf274acb119dae046f0332326fdda95c0cf9471c4cb31da93bfb4be673ed3d26fcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b664fdc8a93e5b49987fdf6b47b5b4d3

    SHA1

    f1cd383bb355cc625ef5c99d76a5e692396ff174

    SHA256

    07c8fdb76836c6c9357a2fe415fd28613330c3be9da334b4bb6391d4b56a11dd

    SHA512

    39c93115cffdb515917f62291a19e5711c87c1c273acabbf4d3ff951e72ac066a950f834007bfa9e80e701cf74b8c34c8c09240a1ec425478d16445b49bc63d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa53b2852c13300a3985a40d7ca9ab56

    SHA1

    bc663e555ba10a647c9a5cbd7b3f322d0df62008

    SHA256

    d40f398a5f42cf1ea840d68eed28a5280dfb0884b2ec9040d3e2c1faf620d8a4

    SHA512

    f22c16d2e6e58c48f535e35994f453422780e5af885b558c600b4e4a345f7a5a2e522ef17836f0320841599935d036eb4fa5a07f55022fd707d95e3df3f9384d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    352693f642de921f1f8dde222b2a2c0c

    SHA1

    4269490fcc362b66f728e629093c718324f13f42

    SHA256

    dbe1b7405dac5025a0789475f4d62c4f7ec2ab3c199509c58d8e3f0a4e860753

    SHA512

    099b606ed072cc66c6350bb7059e145b3775d8d7d44c99735d5ce4b79e131022c80bd2347fd40c9722f8a50821daf2299737009e0d03f76f21e0ede7ed9f047b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee7123f2191bd3fbc41f76421d138c94

    SHA1

    55dc0cc8dde40bbc6f586bb733b2261dbf60f41b

    SHA256

    6b9f00ca7997db675a37624d68c280037acf4a17820c557831c7836fafbff5c1

    SHA512

    4e9228029fc3ac18cc8d4fa80aeef82794aafe4bebe0fb5942f6d4b92610a09fc29e357ce194cb3f55ba887c0a88e87894b80968e9b323e49391f33b9ada94d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e69df72be0a8cdcaabcabb5bca3e0c2

    SHA1

    ace292381d3e9eb922819dc88e4ad9cffced2294

    SHA256

    bcc126ec300294a8f09208a65753caa43702f7ac509162fa47433682ebd6a3d6

    SHA512

    896b295d201f74c64138e09c4288763b55e06c12a28a0448b17150a34ef84d135fdd9b865ea4c38e0164ce3a3627b48d55a953e29b40b7b4223c87a5855c0b9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61ba5c6c7dce1c1f0954a61ef17fa73d

    SHA1

    64557bd8bf8a430f7940c6af808c5bb10c11d584

    SHA256

    f8743be22bac02b83bd7f68b3fcb99dda81dc82b27bead7fd1f1f47cf09868d1

    SHA512

    bbd6a0e194a9247f5aea8d67f2aa5d7f905b843977ba1917809fcd63c3ed88b3f3e7eef69881f3da4527827a2004bee5ce5c2aca1675e03d183a046fbff8ee69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e6c9ab5fd67c80f5919951094bccb54

    SHA1

    0193ee60d541232eef58c6a40d3e24cbc919f0a2

    SHA256

    7ac14552422f2b7ba14bf859664ca2745cbbc6ae612000e53c9900145d64eb49

    SHA512

    1072eda10e7df51a0dc13e7dbebd1a1739c08904db9bda2115f35b0ba2d53eeb003b32cccfe300083402f0fd9f41c9120ce5db4e091d31380e8b8c45b8084be4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    031fa984b175ebc90b205f2e6fa4f097

    SHA1

    183420da4d21123f1fc608771d805e01b4c5bbd0

    SHA256

    a0ae24863606dcf02da2eed06c2c5b3d429518fac5932630c99c9737e5aad82f

    SHA512

    5b99834a85ed126ec5a545a13f8605318d9a42e9eb59ad954368b24ad50925313c161a53df3b1fa219256d7cba073097b5bc43c311a6fd43c8b798dd5d390e49

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HVBRC7A9\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JIH1AB02\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab172C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar172E.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06