Analysis

  • max time kernel
    144s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 17:00

General

  • Target

    7ea7f379c9caf763c89c055d37c7c9a4.html

  • Size

    3.5MB

  • MD5

    7ea7f379c9caf763c89c055d37c7c9a4

  • SHA1

    5a458a5465af3023be8d753319276368af7eb26e

  • SHA256

    4ff13cc72f34b610cdbdc08c4e6e01f3d46c2946d6aadbfb37251c1b00098879

  • SHA512

    1c77a9b034044da44c71dcd733aafbd69868a902d83ee4efa64b19ee6ce9113914728af558e3bcb7c765240c02b6237cb24ccc96f300553b12bbc5cead1bd43e

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6N1v:jvpjte4tT6zv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7ea7f379c9caf763c89c055d37c7c9a4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2156
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2156 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2692

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1dabc6f5c1517e0537f72f16d96eb31e

          SHA1

          8d7f8db72460bb15521d8be3b902377971a83c0d

          SHA256

          8780f8fefdca36a259f6635b2157d7922527a4ed8b7d3a6ccd3a63059c5a848f

          SHA512

          ab0454ee7af3a762d54dd0b9e80a4a692a0c7173a224e2a8187c9d4dc19b4040d8625e1e8a6bd924fefff2eafdc4c7d997b28b058c66ab421929e8af56743e62

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ee41b00c268dd4d8387ff1800de38a35

          SHA1

          68781ee96e6e3f11c28d0a30bbce3bb5230c8ca1

          SHA256

          9c841a66ea8a557112724b9b06089da926783531e118742e253a37e01523b3b6

          SHA512

          4e8093819624e03cc123fee2d87e251c7818ed08e14c53869f69cc7b2f0b20afa097baa78c4badaa4098d183e5fff96a6e0f7416134fb9e8b1aee7e4ff24c5bf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dc4cc1deff909093bbfa530646ead6fe

          SHA1

          04bb3451d504a9d974fbc86c13267752c4e2d246

          SHA256

          22e636ab2bf975af7a3e13109a2f33dd837e97824e9442b370602acd4f8dfd72

          SHA512

          dae4568e0761d8d89985f5d86ea159d890fad384a23ece99626ea28052a2a547497496b6eb6a681a34d0ff3f4186af3721ee4ca66388f79455361d730e769af9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8dbd42a092e5c3a50c639dd4d57e1dd5

          SHA1

          9bee227f166149b54d60da87069f9ebdc0c36086

          SHA256

          5d23fb717d2e53916435191397de3bfbcaf0260ea4acb476b1c25f5914adfe7d

          SHA512

          5ba2929c9e9a346c0bb39bfb0830dd8823346fdd5e2c8bce15da44f329e62c273316606c877ffc0a7355483d96da30c4c480509ec4fa44c3c57c946263e59c2a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c1bdd0c11cc30ca3885b6906352ed36e

          SHA1

          7393fc426080c6069566eb295ec1c031889ce8c7

          SHA256

          22c25d588571874bb86ee85a31cb6a6ef9c27796e145d6d8e09ce98f1a9c77bd

          SHA512

          af6884bdf4a1964b3c0ae1977eb33cc938b00a0f37ceb29f77322f93e8bbca2bb6be3f64b5ae527c182863860541280aa17272b96ec73d09287fdde45430029a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f3bf6895cecb4a56a3ff9804610770fb

          SHA1

          fe3b4e1ded7ed45c5d8a6a76d742a92fc6ca1e5f

          SHA256

          ddafa01dc93a3d9c0f3feeabf48e868b8b9925723dc98a7ae7020bfa8c2325cc

          SHA512

          975aa88b275fc1730070a76c14ac640e53648d708a5cd11a8dfddfdda9102af8b8277c55ab66aff715173ae935ca4dca3f8c7384d828824e2104be67fbf1bbb5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          53dc5bf69c84d24c49e2d9f5f5a33d30

          SHA1

          daa4e4d69d9570b07bf3105298efbcd678b64823

          SHA256

          cacc50b94909d80eda5f91c9a279590283457653e2b6e546ac9ac1f7ab0067e1

          SHA512

          f5fdea1f251c9900e029a101891af11bccbd4d19eca64dcbbde728b7f3ac418e524156023fde0eb1811ec2e29a503f4519f7ee7f1fe4ad69f241649c660619c0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6623f385e2b6e9980fa27e0cf3c47eb2

          SHA1

          9c428ef272fdb41145a33dd0694dff2abc49354f

          SHA256

          a67e26cd54cef7259c3dbde2d77ca284d8c9b2036e6dd1f453a42c58fdb60f94

          SHA512

          9a5ea5c256c619455e18412f6c74638ba018358260a78bfa2420989499e67a119e816eb8984e5ccb4232340e237e70a163065b429ad81ddfcdb1c83bd64ebd9d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          21b1fcbf8dfdc21c517b2222ee61a05f

          SHA1

          3bb4cddba00fea2b1a23e5e74a54bdeef2274bc1

          SHA256

          bbe9fc857692ca47e11ae0002b362cbddb64b88ae105f44403f67856b319a0e3

          SHA512

          d1d0d9450bdd8523dbe74cce3aa83b564ef79608662bf99710947e6a64e98b65aedb275289af34f0a292e6c30d65ddcef53d0b39b7f9e6e42b0476f5761ec5eb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          39a22938121ac74534b9351142215833

          SHA1

          f01cf3d5f92fc00a1ccaf5d87c4a3d2fa88b1dc3

          SHA256

          9400b390055efc90951f18b82dae07adb1a0a74e8f029b6f4bde2930774e0016

          SHA512

          8b30524ae5c18054dea84a944836d2f49bf3fc90892df6014d7aaab3713c1a6f6c13e686dd854037c16346cb767dd188c85fa9c2ea00e037ee13dd63eb77b374

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cd2b841eaf61e2e76044b87ee085ed71

          SHA1

          a5f8ab5329ccafc7ff77426c518e212e1c1185eb

          SHA256

          47260c76d7deb0fbe0e1ef659b0c286d08f9cc7418365d918e90ea2f693420f3

          SHA512

          7a2f68977fa8fd87dfa4a7a50429db9a03bff223b84cf160943c50573e881dcfac304a3469f31a8b1a595c3bc0dc2ed846c25776f9aa88b6066b2d5fa012f48c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6fa5b985ce8750e8c17767a81da625c2

          SHA1

          a1c331b2389bd57136e7f6a5518714a89097746e

          SHA256

          f554d2acfc82278d134bc4a0b0cbbc7c13fc6b80d05dcf75b6025b3e8128a079

          SHA512

          a3da56644bce0dd65427dbd119356dfd6ce9ac217cc54e45e4538ff8254f8f752bfde2b8f818d8800cb3c6d9eeccc016733c8c41eee88c16d870ce44da210458

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          69cc878938c88fe015a070fd8ed75d40

          SHA1

          8155d31c2f29cf79f5ca97bc4764f1a54cd4b6ae

          SHA256

          7f1243e4f13f69b5e407c82b467fc97bcb08d3fc2ff06af980e1e656e3278d06

          SHA512

          c7c7522dea69ee1cc8144430941a16738ff5f6cb71aa1a6d9bcea355a574e764a17c38e9493e3368e91bd366f09e7ac940aacfdc54c6214560b6f4ec1d614a36

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7fc81f3161502d4036a1f51a5ef454c8

          SHA1

          88b177163e449387e966ad7d1dc76c77d202ff12

          SHA256

          d9e16775489f62d856f5bcbebcd0d7faa99996c6e64c8ee6c07a8de7254bc3fd

          SHA512

          efd507a61dc12324b1a4203e2e851096a5a7abc7446e3f557e6d1c3a6f025f7be58232001cdf5bea1c179f54a23a66501db41a9a93c09e86e31c02c24e051bc8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8365064ae8fdd3ff95fa99ef7910a26a

          SHA1

          da2c2aadf35dc7369121e0c67b2fcc838ae117b3

          SHA256

          db5be651f8938457449363a5050f94078aba9d7ac56555a6e526a4f2600717f4

          SHA512

          5f1a76481310e127469b795f31c60447517f27315b630b3dffc6346c21410561da4c22ed0b4ade5524ec975dd17d99c13bf03bb1e4d6836d0e1598d6e10447d2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          af2f990d34c4cf2653b990840373b38c

          SHA1

          6975ca986bd43a0d4844a8fb3124612a3c951083

          SHA256

          ef9331213fa3b94ac7430d90dc2ee038a9faf3c499cfa771622dfe1c71fe75dc

          SHA512

          b97300cc27547f1a08945cf0f43704d771de8f7f7481cf3041c50f772069ff13c3699a67527862f17806ab0a4d2d50912cd16d69a2fdb8ae013d6383def25c2e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6cbd613e10773b47061a2f0f8defa128

          SHA1

          aa3362ba633f251b7318bc0753b7fec84f3c7095

          SHA256

          f83e31a7039c9f35618b4971bed2202bc85045d14aaca19cecfd7a2df478df5b

          SHA512

          0226e900072740b1b09abea9d635f7c5252a8b06c7efcc44e97ec31fbfdbbd7d9a65c99e5c4571419c8317d86f85a8a4e16a9864776498db5b2fcef3edaa6bd0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          37107ebe44486eb911fd86501be3301f

          SHA1

          0a36f2e4ef8e97e6ff1c475bf6c7d5cb760224ba

          SHA256

          fba2ab813c26ee14cb9e853183669d334bb461c9a1c4631f60e2d6c660e35749

          SHA512

          9e123433fa7357899d0397316e984e4bd14975c5978598e4f30311dfb70e73304c8c6e060931c50849cbea7c4055ce23dc00bfdd2e37bd2115c12fe7e5e5e6d4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9b3195dec33ea8f3d7eb3bfb8d9a9f61

          SHA1

          95b553c3be225bab822f9790219c97b2c5cbbe01

          SHA256

          da51c34a1c99f0a7bde57a8c89035f1f0803c649adcd0f432e943e89fd678981

          SHA512

          27930b2e8c5e8232d85e04da8210938d44d5103359b61812fe47be205f2f4454c320c49094e27167e2841874381d95685b213db0a6825d98914d9b831df26052

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1e2f9316ee09918946ce5dde05ce02dd

          SHA1

          75e3bad7da8f11b73ccd11ea089e5affa0d69fdd

          SHA256

          1130b41e8d1c9412f2ab90a3d550783870281ae783620545649b9ac735339878

          SHA512

          fcb14124065d86d9f1535c59bf0019f4d67d4c42d725def3d5a3b8cc72900018d0ca23e1bbf14574e1ab9ccb5c42ad197865958cb2a669bd550631558576ca6c

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D0I6KXNQ\jquery-3.1.1.min[1].js

          Filesize

          53KB

          MD5

          0aa5982a025b3fcc76ba7a78e2139fd5

          SHA1

          7e37c67df7e13e270f5e9e30e965842e37e1f37b

          SHA256

          e9664271a41f81cd6ba4483d5e5cb00c4f6a91fe4ea76446c40faa1979c08759

          SHA512

          f204734eb402c5a04507e868bb11d32023a7ccbf6a506b717d7e7ed0fa3e5455ecaa4aa5270de066040efe8300473f9ba93046577b5790fc54478619f03bfb0d

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RU3RPYUN\jquery.min[1].js

          Filesize

          83KB

          MD5

          2f6b11a7e914718e0290410e85366fe9

          SHA1

          69bb69e25ca7d5ef0935317584e6153f3fd9a88c

          SHA256

          05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

          SHA512

          0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U9VC31Q9\beacon.min[1].js

          Filesize

          19KB

          MD5

          dd1d068fdb5fe90b6c05a5b3940e088c

          SHA1

          0d96f9df8772633a9df4c81cf323a4ef8998ba59

          SHA256

          6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

          SHA512

          7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

        • C:\Users\Admin\AppData\Local\Temp\Cab5C64.tmp

          Filesize

          36KB

          MD5

          20f3f88fc93a1bf5a3dd5ade8aa23248

          SHA1

          0e136d9be582fe63df102267c2f7a71e78dd199f

          SHA256

          e879df39e23eb05ee21191a41ec5c9964fdd747c2c3d41226a7bdee1f395c154

          SHA512

          758a121b53f1977d3bc9ca95beafa1870cf72d80d2894cd5fcd0af9d54c7409efbedbbfb8139f997fa2e3f4c91ab67c64156515a626e528e75d2089d1badf262

        • C:\Users\Admin\AppData\Local\Temp\Tar5E2C.tmp

          Filesize

          92KB

          MD5

          71e4ce8b3a1b89f335a6936bbdafce4c

          SHA1

          6e0d450eb5f316a9924b3e58445b26bfb727001e

          SHA256

          a5edfae1527d0c8d9fe5e7a2c5c21b671e61f9981f3bcf9e8cc9f9bb9f3b44c5

          SHA512

          b80af88699330e1ff01e409daabdedeef350fe7d192724dfa8622afa71e132076144175f6e097f8136f1bba44c7cb30cfdd0414dbe4e0a4712b3bad7b70aeff7