Analysis

  • max time kernel
    142s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 14:48

General

  • Target

    76c8c7fe81c9178a32a6008732093280.html

  • Size

    430B

  • MD5

    76c8c7fe81c9178a32a6008732093280

  • SHA1

    57920c393774b0bc89dfd5716337d3222371f34f

  • SHA256

    bda2c41d496b951aefcf3a06422d31cdb4d93c9eff41c73822c72087bfbfa250

  • SHA512

    7754010a98e856574f342f1f6f15b2d5d063bf8b51b1b198bdf6d566d2dceddd431f121b8541eed23b56359af3ac9800b69b347efb25dadc57073cd81aa01217

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\76c8c7fe81c9178a32a6008732093280.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:700
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:700 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1092

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    867B

    MD5

    c5dfb849ca051355ee2dba1ac33eb028

    SHA1

    d69b561148f01c77c54578c10926df5b856976ad

    SHA256

    cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b

    SHA512

    88289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b84c53855c0e4f8e70764beb5d9ff44

    SHA1

    1e117fe3133051e5ed50f42bb21d44f7078c5380

    SHA256

    8c8b9240fd697a493f0540b10001b698bfe9b3ea2becb5364519d9bfe650b8c2

    SHA512

    4e8f140f794728981ff0d20edbf8bf616d7360fe14dc05dced2abe119dbb84978cba6991a980ee695091a3e3511858f3a706b4f1817ee24e7f99960b9ef2c133

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e28803e3cc100b9012cc498b77022a7f

    SHA1

    7c1cc19885e4fb77d378acd68738272975c20be1

    SHA256

    2fdcb0ef8d17730e7961964fbe2746aca456885613119d50b3b740fabb2b731b

    SHA512

    7717af2c69768bfd231e025763c79de802c611873ba33e3e93eeed6f711a5134c51a18303d7def99e82fac016b9fc236383c33e07a56b23f8566bfdc3dc01727

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9e9a40f9f0a075e13af39f91b26908c

    SHA1

    95cbfa8bd2d3292c924d06d5f54a9b3c4d73d192

    SHA256

    b4b60b89c91fbf31b50958d10bd9f8a37fddf3a4af30665b3e462f2455bc57f4

    SHA512

    114c969fc8cce09ad7e979ca358e41994e948082528e9eb583b09a0c4f7fe2b2e256ebddafc0561b5d88acf11bdf7359ebfbcee249a7b979dc2a866a0c894c73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    097c445437d89e796d9e9a81d5fcaca3

    SHA1

    6e1185aa799e1ba68c76275fead19731d046c17b

    SHA256

    497347226042e4be5a6860e364b7012861fda61774d90ac28ef78070e117e911

    SHA512

    c2d6293b737c4d037318b2efa7ba28bf7f2828320e08fdfc0ab28ae2a89b9605ee1983952b674cb8cfa9ad19161054a4ce83bc3eb4adc453fb2ab6061a81e872

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e93f378057a32b0a79603135a1353359

    SHA1

    489b8af34ecadd426dbeefa98760e8beb39fb722

    SHA256

    8d1fb2d126bd014debabff6d8debb446774507724c53c7bfa4d8c4470f0be267

    SHA512

    2ba3de403c507646de92892945a28780fd608f55c802dfa462c7f1a0df5c725653cde312dfc030cb0d39790c1eb5619477a550f3d0475f25850d334344021ef0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c55ea25a6ff83683017829a0d6e9bb5

    SHA1

    f1541c3808572ed129c3df6fa86828761b8121a3

    SHA256

    e5dc7f5a2b954472330fa49fa5a562dacb6311ce7caca4d8c351c9ee27a14c0e

    SHA512

    7086c491701a1e7a9c16ff617b05e18f540dafd531278cb5a3212a0db67bd5a6fbee0aea9fdca0fc231bc80ea2b8599e2a96457b5372c4e7af292b34b0982dc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58c4772036ede2028cd8d64ef8718742

    SHA1

    34acccb6c087d0c61761bf05a1febf25b9224a68

    SHA256

    b3c0db6b4d46f98486d3c51492d660cd7a27a9522fa590abd20dcad4fee09479

    SHA512

    b304168da1cd7f12add95ee167f7873bdea613de7e163b5dfb00e377560df12fad6221a803b5a2bc7dc5e76d670b7e5a5f7c3d341a6ee8ef9fff51be870b1f06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    079a16f0fa76dee47a3d78bbf0065f70

    SHA1

    966ac062aa70671c98457d4ad7946f8d7aa3e4da

    SHA256

    dd42038fd7ba4e82410133d4ba5c70b36edec20bfac8df35317b672f00e00065

    SHA512

    eaa0343c85c887d967d6185f087f79a34b8a3eadd00c671d057f1da0f09f5bbcde40da7cd931317730f7af62bdb7602127e3a32e97c8d77c1ea3ffd271337c8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b60c5bb1013f341337564fd785994a7

    SHA1

    55d0ac228076dc54ef73a10cf6264665244283be

    SHA256

    adf6b3d0467146c898f3f2f024fdf41514f9f90dc77ecccec1dc6d81cae22f86

    SHA512

    a3af606587f1b356acbd9f65a529d0ab8e71bd412c1bdb0bd23ee0b9d0b2204762ac85a19390b9e9da048ea1996c7d6001490444086774fc7d99c269f2ddc046

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fc3881c5d8250e765c3268a44287ad5

    SHA1

    a0db56cbbe05f694af12627b63f27efd39edb003

    SHA256

    b76d90c1f9014226287cde4940ffbaaf653ce393f39587a3d10593db79f18d1b

    SHA512

    6f45f38f1fcb5f458de7f23d5fb157ca20e028d4cec77b1d3483f987ffc072883abfe3ab036105d0f6b4d5d9ce42684977b13ef6ccd9433c4f7fa50e0614b364

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dfd3d71fec3f7e091fb604f1bbab6bc

    SHA1

    4412db34eb7adbe4a1b7be7069e469f773aadfc3

    SHA256

    3abc430a5ceca2c0a5afe37c63dfb9c28981b9110aa15c4621af78f26483ee2f

    SHA512

    ea331b52b56ad133e624dc12e2ad7df19138ed52756617e161b867860523a1f3e9dd3437ffbd88677ed514e251960e979facb9015f7a323e99e1b6b72b3ac054

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    207a2cf0161595f113d25088d2b6946d

    SHA1

    2b4c8ad5f6ce84f4497d7a9cb84031b06cfda626

    SHA256

    0d70eee7220ac9f61ac340b72d208cad5ac5e903b35c4a12d27a8cbad357d2ad

    SHA512

    426eb71f187cb1d67c372b342a5c40f2094f53836e1b584d9770c9166bd474e060b08f25ed30a6e97e939fb761e22dc81bb2d9eae24c4882b6618898316e52cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0316df67a3a476644c8fb88101bb727c

    SHA1

    87bee23d911a6186abc00e69b5568e3fec68ff35

    SHA256

    aa70011b0bc8661378773ebff769e17948a69b5d6dad113f7d1acc0a110f8e9a

    SHA512

    16f543470189857e900b942f3be65bd3d21519879500e5e9721ea5f7e0ad1945ac6aa31dadf0f7940d1df137f4e1c118966313af1d7e13fc7b62e2e48f063703

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e854fba0677f163ff6462e8140e1ae3

    SHA1

    e74c80c51c54d64161f9349276014d6a58ce19e3

    SHA256

    02b9370b37a680844e898df57e3d0e284337306003f6120a4a46e35d1abc7860

    SHA512

    cd5b6118d62bdf622ddf23b0fac32e3ff6c463ad6216ac83acea0cad98e5b538634b82c512874a98dce49c8d3ce844e514300cdccfca2fae832bc7097c11ebd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8c3c1bbc8f78b1db8ee070dfc57b7c3

    SHA1

    8b0ebffee3c672bc57d8f5d778e9dcf05dc0d017

    SHA256

    0e3595b86b09c22eeb1c1d3fbf6527d27ecb9e754638a887a5a8bc198f2f11f6

    SHA512

    4a53002228e33053869deef42fff3af50fdf8208cc5fb7208e1a36e5c283d5629d6d5bd8f9fbd8d7fc835a5256b3854c61dccf7814a2a205e9910ef0f245062e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    951fb3c9fe91b219df7ec21fe9d7a4ba

    SHA1

    8c2da6734e5d9a887bd1f10b09b29238c4d99ee8

    SHA256

    05a93e507cdcae4b5f56009d6aab7e269fe78ea8c2cc3c8e77016168f1a4c95f

    SHA512

    f73586fb2dbf339337189790814e8a37cbd02ac8da0f06e9f36e9256bb9b31c5ccbe3fdf280ed23a931b77e6f2c076acefad3168a90767bb3d86d2904c99b923

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7557479dd05c8c46e1c252ed7f6d7adc

    SHA1

    b288744e6d5352def930b2ef68700d6d6e324e91

    SHA256

    8d3e053b5efa1425abf8482d8b40fc46eba23880589f2aa23edb2b8269c7f540

    SHA512

    b7e207eec14aa5aee781e466cbd13e830c80f1077f0214bcc069aa213d60f5a2c30096113e376f7023ffc899672e89f94b7dc95bd89a2616d2bd2571c1999df4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fc8aa5e7cd2b90a232e1688ed55b79b

    SHA1

    a76d7ca5aa0c6a1e6794eabe0f70256b66e02385

    SHA256

    d521bb271d725a164244dc3c6d96f45aa1bd2df00ad0244aa4c1e507e0a0c0fa

    SHA512

    14b770cb9cbf37102b70916b37ff6642be2928223ea02d9e929702dcf6aece35b10b03c7348a59895b37bea0f68d9894f2fa1d5dd59e857df24c8b297096d819

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab0e52b4def2440d35d20fc1b3290e4f

    SHA1

    bd0fc6a1949feeea2d71c8abf408e58b3ef3837a

    SHA256

    b5eafcc36ab439e1390b7b7e9d688df307fce2bf7082a07b00115893ca58bf99

    SHA512

    63034147a183c68285d59a6d25593f8aa39f3d4cc4598f3e6f7115bdbfd6d88db76f647b2641534d9b675b22381eaba5146a32e188597ad21c3a2f5a1ba2467c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e058b8f400c282ef981c2b22ffc67ded

    SHA1

    d75c9c5dd59a4bc5b3f6de86f0c9c14aff779bf3

    SHA256

    0599390c08114ebbf7f237326737f7cfa55acfd3bdc1df99e1f82d118f958c29

    SHA512

    e178d4bf107db2a32f0db61151e6479fa394d35550d66188ee22a63ab83b437e307c1e7479c5d303e59177dcc3490a81e68b36512ee9228e0b7988fb8e454239

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d15d9210f48d5a6a1d1c1d3b4286fa6e

    SHA1

    969a9cfab7f1b1b20b3252b2bf13ffb77b1d9bec

    SHA256

    02de507781938851e8c0e4e2042b417eb04e9e6231a24d3a0587a1a11939d460

    SHA512

    b2f3cb6f9cdce86e3eed0f50e2b951179b803d9f98c34ceaed60b63965eb3ca43f92e1d80ee18f3044895500ed757cfb6859ad97aa0c11e75a8527b462c314cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    242B

    MD5

    bf93d37bf20eade75df2519fdf6dcbd3

    SHA1

    7521faa3c4c5c9e6f9d069971c2c1e1f53fa4138

    SHA256

    163615cde5e1d7140d1f385b43dbf90aeb6aa421cacc1df93c571aee6aa1ec42

    SHA512

    7daa5b4e6af2a69bc65eedbe50169c6ee3950d3604c4376c42e44c640b9b7eb3200acd4eca570be89081c30d48c5aafede11cb2a343b574424b97918b8ed0ee5

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\02cy2i9\imagestore.dat

    Filesize

    1KB

    MD5

    287885339a21aa2e411df760b44abb97

    SHA1

    86e9c5eb880a4558d20ac02209d6a630c222ce0d

    SHA256

    d047d50847cc0a986f6189c8e7f32ee89ba6598c274861c7c318dd2813e14675

    SHA512

    7a5506b2349c5636e2a611a3fe13989da9607956439e9a2309bced18beb5b7c100bd791440ea09ee2bd0290996a688f6c3f43677013ebade6d97527774f77bb2

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\02cy2i9\imagestore.dat

    Filesize

    5KB

    MD5

    cf19a0d11c6132c42e71fff7670c93eb

    SHA1

    cf62ba7999471b995521389df2564a8b9340ecee

    SHA256

    9b6086a62bd87080225f9fb2199fe4e1543c21df585c21d78230b3d8c6c04fe9

    SHA512

    5a03b16a2440c26d91bc922dc12aec339e123fc67f382256edf9ee85302aab8dd4c92a93ad2adb59174da0ef1670012e71b9ff8b921420ddce8a89ba5d9f9b77

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E3F2LH07\favicon[1].png

    Filesize

    3KB

    MD5

    a75c230f34b9296e6fdd8b0b855df5d8

    SHA1

    e0b9e32053d44532fb4e8bb55b54c3211965517b

    SHA256

    8adba20b1dd9747ec8ac6ed5a26a8dfbfc7ab82213d8051b76ac771c76b87920

    SHA512

    950b94afc397ac760f38f4c68691bda6b541832e1d23f496e36568def2b9f9dcb6984c6a42ff6b5abef0e19b76c37e40baab22e9dcc9360091b609333029b24c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JIH1AB02\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Temp\Cab2962.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2E27.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06