Analysis

  • max time kernel
    118s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/12/2023, 22:07

General

  • Target

    fba63f6ac581b0f39816db9f5e27c259.html

  • Size

    3.5MB

  • MD5

    fba63f6ac581b0f39816db9f5e27c259

  • SHA1

    147a07ae952d1ddcec7a6023f0b19dd6c15b7b93

  • SHA256

    54c99e3c3909a8962f6cd9f961c033051deeb4819c5fa878e4bbae861ff5644a

  • SHA512

    c7a655809dedfbed34ae9765ac6e6ac8965018a7d830ac602507cd9433850b117e828fe12b26178b09f901dcad5bbde18eb3b87dc866a21c0c469a17d997da45

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NAY:jvQjte4tT62Y

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fba63f6ac581b0f39816db9f5e27c259.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2460
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2460 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2392

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          553264b00f2b0d08648e62aca58d59b5

          SHA1

          78ce9f3792719ab36d26018512e472f3fa97019c

          SHA256

          3e3145f913bd13d30d2bee04f96f9fb26184f517dbeef4204c7118c4abd99b5b

          SHA512

          4d4eefa034b509591d4bd923c33ea14915d15d6a59bbfef7c85001b2bb50944cbad6a9af9463696b77a0a429b6f21ca8dd89138c3b144e564b33b6ffbd922914

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e3a53494fd045f833dc229b5210c10b4

          SHA1

          251ff9842e161fed1b0d1d52d3189ef959b8601e

          SHA256

          db4260ee069680380c69e17d24144aaa026e42de79c726f60fcf0097f243e14a

          SHA512

          2090d3bb419285311ad7bbe4f687ed85d4fd4bfae75905172047fbafc7805199ee8e29388d98516779fa828dc800d3ebb440fde9d1b01ea0dd955d0c18eda593

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d76838aa9d9adbf8c44c6c8127279de6

          SHA1

          4327c32ce6c632abab4da625cc8fe4888114f157

          SHA256

          5c72bb91b501bbefcd7314052e187b6f92a4af7d1d3bfe772bf3ad3afb7a663d

          SHA512

          cfaeaa0f85a5425c47d14674fd66dea540dacdb50d0e68941881fe58c408fe7b0ae70ba7c6d78730e044d40a728194caf20afe2fe2d7b5f8f4b6b75c6c8bf30d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cad0f5a0c45f40c5b8b959b32396166f

          SHA1

          0b80e6ed5ee1eb9229a047a0e95023655d031b49

          SHA256

          3006ce5795e1a1cd57b8c928d50cc3c584d784428ba1bbb13b278426453393ae

          SHA512

          9372cc914bedd73214b7e8a8fa6b2e3fa2a686d2ae04a0f08fb26869aa83f7c2ac5c35412acdbb0fd698cb6521c8fdcf88d30c02934c1971be6186ba70e17543

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c08038ba8b20c1d58c12b10e316de89b

          SHA1

          5a9a79789c1e564a530fa56dcde5f06aeed6cfd2

          SHA256

          ee7d27ee3319d8dcc9d1b8a350224d6ae981c2b2eb1caa75e3c4f24cdd70692c

          SHA512

          1e264c9d1ce52d0907138b59cdf63ef9a513006eb223dc1aeeea998514e07902bed3ba727649eaa1437804285e2861bb169ff8bd827574cbb1baa91b90a76b1c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1b719d1660e344b6644fb3a07c17e09b

          SHA1

          e051d3e4e2af7dde514d9514f9eb0c63ea545e0e

          SHA256

          aba3e06220dec7835788bf722459d668117c5a1d7aa8e037c3b05fd86c5198b2

          SHA512

          5bd0a8a6b53de48939569dc5443df9ea71dc26a89a5d146e70462e61085c74674df1301b03736391333cab8f4b5f3cb4098a3f848aadd6505d415ff795434b66

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          55c18c1602ef9a6f737ca33832ad1296

          SHA1

          cd6bb3034dea5d3e4ba007f2f8e01a25259b98b5

          SHA256

          a8b3a6131039cef7244f4cf0fd44406953c25101f198f70f337f7208a444f8ec

          SHA512

          eef964b8d8f5a51d4b933ce5eb27de6bb54ba2137c68f130849c62dadfa449f3d084497c9176f3301af625b477c37fcab4a5f0337bf711c114c7eba00b6ea880

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fb318a70b0c8159350a42eece841f188

          SHA1

          524ac90bf5d8d832d10a821f47b2661c6b34e279

          SHA256

          df56f31e58e24e2bff5b556b0b609a35e413c02775622d5e8c759b3e75672273

          SHA512

          7d01c07ec33bb916a40160f26301728e78430f56d225a8ef7ae9f2bd822083655c1ef289104de0a20d06e36b829bbe8442c852b5d6c6c32653d5a31746a207fe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          61f99a1c9869c990ced99b333733ea91

          SHA1

          b047ff2628705fcd8ad3f93f3f2c4cc535150fb8

          SHA256

          3269fcbc90132d619a1656644542979e9b781f8fe291fbfa4304a4df76ecb8ef

          SHA512

          1cb25589c7167389dba80c718fe8e4718af58f3d5ce98e339ad9703e120fdb6b9517253a2f8eebe2fab7b7bfb2662438da3688f7ffc96bf6bd8f583eb1dbffe9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d87e250acc1c4cf17a6bc1106ee0b2f8

          SHA1

          7acbdf84c1720217fcec6b196a3720e39ca479b5

          SHA256

          f85cea932aac9c8c6c355dab2eb528f3927345a5e66e4e4a58eabf76bb50878c

          SHA512

          61411c2e6e6bee1ee59e15ee18c68ecee1b683b0f472f52f7763efdd761dec3a434634971daf525146a56c92671b728da6d5987d6bb62b17c9fbf0854d346773

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6e96b7c116963dc38cbd5e62a7ead5bf

          SHA1

          9370bd256a03536dbabb34e1195d6114d320c056

          SHA256

          c0b18ff34921acac4d463d105866c9d026c8d2bb0839b243056e3fde5fcd9cb4

          SHA512

          8af74f0c359bd38db2ae4b1aa20e2454437a0b3eaddc5e4b0343c2fd503be1622ff650e29f2f4caee2f14a2f6aab7a847b5189aed1f299ae8c4c70f749520440

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          87f3ad00d5e0207a29367f9a87060ac6

          SHA1

          025770c1e35ebbc4e08bc385a2b318ffe1f39f19

          SHA256

          ea6838991df99368034e719dc59b3e388aa0f57e9daec51a27da5edbe36e4800

          SHA512

          1d67d45e8becc2eaa401aaf2e6c5eab71b00cfecacc17d0b118d41db81c39835095e6b49f65b19c302ebc125fcf9600beaf26ad0472eb55dd8f93d0c72349b7f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          601973caf68d86173209a1c7b66d1451

          SHA1

          97bd5342db6fab6ec95ddb2cf22b17a39e3818c9

          SHA256

          51b2a72be0f3dfc0fb9764c2b0fbb8517479059436bde3efcd2ffd23e184cccc

          SHA512

          821983cd7134137f72567f34394ddcb7b08ebb89baa6ec185d454dd8c080838ca997a7585325b5177a913cac0fc55334f6fa93ca4557e60e1394fa3742ce6914

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          88fd842b115140b36529a4d42667c916

          SHA1

          c683a041b0e92c23a5de6eaba55ac4a54ad2a652

          SHA256

          aefadc9a0a3acb324cf94b530bdaa7ce7ad2e5d3c252d0b72cd3eb39c1c1bf87

          SHA512

          5c667ce1cbef1d50c8b92c075916351b71400a2f9976fa13363f8c79bfed393f163722fc774deee1145272f304ef928c287ac2fe17a3f255b39ffcadbf4312c2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a95d8d33276b45d334e55a40e22782fc

          SHA1

          9f61f0c2c481e10877fa99b58cfe77c569fc0108

          SHA256

          3ab11bb870b86251f08ab120f35f64ea6d3d82b98649b892e4a37e5a6741f8cb

          SHA512

          c3badd355fca4cc948ffb39589d01bf640e5c26b7a4e51cb9fa794833d0ca418b4206648ddc1f1afc53c54cfd21e7cc807597834ff5d455135f2ce52668d6fd8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          49c441796f60d86ce9efc2992014a4ae

          SHA1

          6c9fbd6e2d78318e5cb0ebf75729aded98fa55ca

          SHA256

          56355f8de6995c9ef3ec006abc6c757d65d0ecf6aef911877fcb57d08dd3d2be

          SHA512

          ac647e63668805b5e14abfb82a9f0358d5aa38d89bb660a72bc530f04ee25b94f6f87acca7fd6d7e3a2fc981195bf5059b0eb618b388b8df37ec5f4f3581f083

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1a78694e6013f915dcca52f985512033

          SHA1

          f304c45a4651cba1fbc813eb6348e54a1c2a7bbd

          SHA256

          9747db87631e88d09cfd88dbbd3cc447b4ad32784023a37f93462a9b3bf9b8fc

          SHA512

          453bad65e725e54d99c6031c908602a2eeb5d6b8b097e6cca3ae7f82dd3773feeafa70a78623e8425f34d0aa66475463e74d5e99f10f5054cce8582e130b771b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          81fc05acff5b667c92a5eba775b0a519

          SHA1

          a8c68441e0a365c64a4446daa30f863952d0b5a3

          SHA256

          8d7908cb748199eef44fcf07d362dca021e316b4770b0bb1a9efc16839221014

          SHA512

          8a38010fee7346e03b9b491f12053738a3fd1b2a03151e07cee9fce89495b0f59f2f25094fdc6b55a624a8f256bce8bf1d48a16c57030db6c8a704cb87d86bd2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          976b96be53f2850d1f93e6d606ef5419

          SHA1

          5301e1280dfa01bd527e75a576e1f58e90e1164b

          SHA256

          fc0cd7c40f19d1953dc57e72850431ce487cf9549737da8bfc34c4e3fa465915

          SHA512

          8104902cc1ba9b5c00a4718534ba239c94db0d477db7ef792fb06f9a985f7b603599a50a05418a7f3cfd1d95e0397717c97e9fe57ca437be76bf1970e60ab46e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          30db0af3b3e40e278bbaba7a108896ec

          SHA1

          7551f9aaa0192f5c7124cad612a8646ec4cf5d18

          SHA256

          15cf30bcd3c84ef455572f1e49aec6f80213dd866b2275ce47c401d43350b867

          SHA512

          bbfaf673b224fa3cd46952f57a800dc2c01ad3973cda3fc694f118901c2586276ceb054839bf6b0900569dabbddeebe0048636ecdc7cad6ea73412b59e8ac708

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8e4c105449b706c2b75951a6770e0b1e

          SHA1

          9aefe8117a536422430a1f4931094bdacc0c0181

          SHA256

          f617fd8af96a66d6c6078b756a623c2111af78b6c4e589ae5189ede4fe3c1ea8

          SHA512

          5f4d494da87678688f9585a97ecb7afbffa72a3e6aad433d6c0f032188c5e853122b501cf8674b10066d57725c982e5c7cf50b100a100408c3f8ccbf28b7555d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b3ea0506bca5c5f1637bc4a307216adf

          SHA1

          8eee646de49874a47a801a3073fada693a90d574

          SHA256

          a73694b041bb6b99b60794cb7934698febb4b21049979bc2528e025c9379e892

          SHA512

          7c783da5c720a1a6ac478f6ec93a88b0ae55f2ae2614158fcb807a677538d3be14def9d4feeceea667ac7141f231df275e60ef969231d1d22f1fdce4368c65fe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f44965a87adb35c27662fb731e986a22

          SHA1

          af644e43931237d2070a0781bc5ab45076a1db99

          SHA256

          5b9b8f2a535ec3823b0ba3508b708e0da1b9c01b0a993ef83655e2831175d6f5

          SHA512

          275e6db7d79e71145b879ac1d7bae7c14b04da9aefeca05c9aa33dd3d9ce9e536ad8be2a8089ebce11632330d3f1ab820d21615ba243d82a49f2db76901aba2a

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4K0WM73A\jquery.min[1].js

          Filesize

          83KB

          MD5

          2f6b11a7e914718e0290410e85366fe9

          SHA1

          69bb69e25ca7d5ef0935317584e6153f3fd9a88c

          SHA256

          05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

          SHA512

          0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JGM5U0T3\beacon.min[1].js

          Filesize

          19KB

          MD5

          dd1d068fdb5fe90b6c05a5b3940e088c

          SHA1

          0d96f9df8772633a9df4c81cf323a4ef8998ba59

          SHA256

          6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

          SHA512

          7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SP6DRJYJ\jquery-3.1.1.min[1].js

          Filesize

          84KB

          MD5

          e071abda8fe61194711cfc2ab99fe104

          SHA1

          f647a6d37dc4ca055ced3cf64bbc1f490070acba

          SHA256

          85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

          SHA512

          53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

        • C:\Users\Admin\AppData\Local\Temp\Cab4896.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar51DD.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06