Analysis

  • max time kernel
    125s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 12:46

General

  • Target

    6f8bb29f5d284f880402c442f1a548bd.html

  • Size

    3.5MB

  • MD5

    6f8bb29f5d284f880402c442f1a548bd

  • SHA1

    ba2de8d0b090d2abac6a54134fb54563b3a2afa6

  • SHA256

    27d223371ab131f19e2f10771113a82905e17cc77b6166392c7395624977f9e8

  • SHA512

    0c0eeb79017fc2e37c1ce1b5e37bc0322898ec9e1cb933a7035ef1e2b990e99779f88dfd171722a637db62cb0478b7cc971dfcd428ce7feddeafc6e27f766cfc

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NAV:jvQjte4tT62V

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6f8bb29f5d284f880402c442f1a548bd.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2040 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1944

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5add57453fdaf498d2516c437dfd6070

    SHA1

    3fe4b85ad703a0377453649f6f6a12a78978fc1a

    SHA256

    f3a24af81503b95437c4d3d2370ebef937e4c0c7e6a4137b31e53639c3185d73

    SHA512

    0a6bdc483bba37cc86861525d65d9adab14aa9feccca210bfccf242b00aa721d63e3df50c172ad6d716327a449602f266be0d53231372cd01a2a30ace6d72f3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af7c49513f737bc9d90684b65af4e4b4

    SHA1

    c6962e3b16a517075add1b3bfec265624ffded88

    SHA256

    4dda9b7068427fdcbd31475e6327514168aedc01cd126411406e42818c9134d2

    SHA512

    fa6790e12e26e11f2ed70a376393d488e5a45196e4505198d8aef9d299c917b28ad43b1c5c210addfb7996b51650ec98c000638ea237d820bc4d5554dd32945a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aafcf27c5f10c0f582da6d448c0817d0

    SHA1

    3599cfad011d968dda3ca9fa4037f65ef591ee83

    SHA256

    a4c99d1dc60a4f519f1703a91b54e138b4791c9421b2d2238304f57f5e164c60

    SHA512

    3a7c4026177ab1608fb63534c41f7530c628fffdb2055c9e82f5a040d2fcca226041fd9cb4867e683eb9e6cdb6fe86f0279130cd27aee609295bfc8c54f76bc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94ebe2cebe70221faa1ff622d93e5b0f

    SHA1

    d6cd6a5e675eb1c56dfd72857e11045b455f51b3

    SHA256

    2d1dd0df2b6d25ff95803471b849e453106a82d85c32844082229958b65cddf9

    SHA512

    544b0203376168685cfe7ae2e0d5530f810baadd25b3e359af389b65c6e5766564fc3ce7212e8f236843bbb9e3a7009469dd008e5016deb734b20a78b3074127

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19bbf3dba6ec59681911f3cda83aca77

    SHA1

    2bdb4854f3f4d5b2a2f2b01db4ad124e7b212030

    SHA256

    adf1308e928115b9a25f1b5fa4b5d4102d48c5056b16b091b84b3327eca012f3

    SHA512

    9e913051158a0a4d21a6550072be02181278ab6dd31f8fa3c2272b84f3eea86eaaaa3806b2dde31c63b128d337399e0fdd63cc45c70dd52169f139dc44a1b0b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e118118497f1be4d6b3a324872910e19

    SHA1

    8c6742b166d71e483c914eb044a2eb5a6be343c3

    SHA256

    e078553efbbef5b8b52dd1b0e217e1f436b73222ac6134f1c1fdd5c2cf61ab79

    SHA512

    471172730c6165f16968b3e37eb255c7a505801311c4cb26db6a6bd734a37898e426c9a5efa28fd49ed01381419e30c96ba91de949fd897484408a80553857a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2d7ec5aca9b9a17c8648d0894814a76

    SHA1

    02af91b06697e587b0147b43b88007db1854fd0e

    SHA256

    1c2a6741ac1bfbb8c8d22aded2d3a36e804a2a217ef59ccae088864bd41fc055

    SHA512

    2af2d32cf81e59eb345f87467c676495b293cd4a6c0b5f320e0d0d9f921dc3c4989e11d41470c7b7ff170598fd40309993fb8c633b94aa681e65953281f18ad7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c7bb3415f0d1fb6c14ef3a73a936039

    SHA1

    12d96da6d2e1082c3db270c9cd71eadd9c6e722a

    SHA256

    83ff58a32217962c3c2af994e10494897235e5b4634c7840453d8b206c6feceb

    SHA512

    7aae2fe302629477acf7e113c4fd18e1b1190badf2582ee4f5488e1c485fb78aa4cdcdeabadbee08f446c62945f484c0d0484d434d697f7802c08b711fbf8d48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c7353b115a1c3161a30264afe20aa47

    SHA1

    6778d747665fad2f5c05849f1bc0932e7919048b

    SHA256

    f89c9de9fad2588ccba42e7a262642c641aac55b0f2cb0e73a8fd85878df180c

    SHA512

    46e035d18af65456dac335296e506c0112ffaa1ac6553e42317475a1858ea3c4bf8dc7b29036fe4883d48b023e52882e8f11cf74f1b77e6b64e48ad19c5525f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab61f8f891abac3830db46337403b08a

    SHA1

    493258e44bc9e58f119522f6f90d4fb7e41026f8

    SHA256

    c141f37a3c0c733095c8bc8235f685f2a20e5e6cbd728b3bcd2fdb7ba04705e2

    SHA512

    c88c138655d18ff8a147acb54edd8f6418c0f31bf90e996bcbcd8508ba47715d8f120dea0db12bc54b1a58fa0d5e964ed4d8afa5dcb358e34656846c218f71f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd540f4644381090ea573e233f2a95b1

    SHA1

    d885716746a083bb3a571591bbd550e99fd5e87b

    SHA256

    c311ea865a3b8fd27a16dbd60924fbba5c7cbb9b574b83e5ea720795537f1f32

    SHA512

    568bfcf4d4f9e807b790d68e04cbfa13ef464a08f900e3cdeb0d8222c12f0ffb88e5f15e3757514c05639f981649d98365ad2e47e25cb8889c75b7175a6d34da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62fa33a6d474d892671be97124862226

    SHA1

    4c872ffcd3672fa1ae762fd80da5c1aa7dd01b88

    SHA256

    0270dd828e37d20228a418ef96ff789cb814b058c06525427cc420a30a490939

    SHA512

    fc5281a9daf26ef6e344fdcc909e55487c0fea9373d5b075753984500f49c4058992de9a32f0e276c8a1766f4b949cfe7c6bc4c19c4feff4a1c0ee82ecfe7590

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7dfb8c9ad8e1305d6535e90f00d75844

    SHA1

    f81bdf491731aeaa81bc966f2e47ee56087c52c9

    SHA256

    0eee7b02b6d99b200df3f5a1c50e4ad88495319d9b89dcb16c153e21f40c6e2d

    SHA512

    3ef3233fcb2143e3620cb5765d80eb2cfc85a3dcd42c079888fe0df718a6332f511874487facbac0522c61e0864605d5acfc27cc11d8cadf52ce096c23a456d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6602f46dc6716171c516364c9b72fcbf

    SHA1

    119295745295d934d7cdf4ec2c0fabaf4016bb21

    SHA256

    ade7e3d64dd4f5699a13d2f87888ceb1737df4dab4fcb42901715df00355ee1b

    SHA512

    9dd84f89c070739f3ad0ece6662b7bff3895ac3a1d0e9e7de372d414463b71347c92a898fcc6ebdd7549d854c6558e40b65b66049c3dbdbed19443e76ebcc5d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a3e7d61f6499491ab007405a3d6ecbd

    SHA1

    7385ae06fb854453900f620d31ee500b5b1f56f9

    SHA256

    ce58ee9852c4ae50f522751bd283700229a508650f77af62abf54f6fc65acf07

    SHA512

    6a20a01ef8b09d92b8ad2a5d0ae961e62b5ef4e2fc815f829ff60d6e366b61cd2803171321ba1220bfe3d05daaaecc175568891b7cd6dcaca160c1cfe0be75f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39f660ea487c9901092fe8d8077c06f5

    SHA1

    f4afe23ac6436172a8bef8a1a5fcd402b6fe05bc

    SHA256

    92df6cc409cb044da46088e0c8c4532d6f98eebe8b69ee1c56f3ab0878a91de6

    SHA512

    d547c8b9fe816a978f4829d2542ee0375348b7262bd7a8e2e0be05e52d3614eb0e4806731f9b5df8d217f838a3daacd1a4975b5b7f1201757ee7c3a8c08cd8f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df72e21decd1866b4ee45b38530fbde2

    SHA1

    29e03ab0d943539c5998fa64ec810515459e1368

    SHA256

    9d2cff968cf2e96af5b840b1a891c26ea2fe9c05456f34460f80c8560e9f7f1b

    SHA512

    3df72e6418777d8e22056ea1f7eba2abc52dd8f3e9d5b7ca1ab4e2f0bdc325c3ab2795ed36653ed2c0312b696a0870e79a3c695b478cf8120ae11a4ee900cffb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W79VKSP8\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab764B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7718.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06