Analysis

  • max time kernel
    7s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/12/2023, 21:13

General

  • Target

    f87ecd991b4b0aae8fb8570a8f841ca1.html

  • Size

    430B

  • MD5

    f87ecd991b4b0aae8fb8570a8f841ca1

  • SHA1

    747169f7ea276aa6ceea2011e5320273c350c78c

  • SHA256

    b3b5b03d399a1aecd4b5db697b5cf1ee02a233985c3a98c6c7125c6a38367e46

  • SHA512

    eb8ced6c4da5a8490cc03094a55f467816ca70e53a08d02a39f96f8d9f7b11b63c6405cd3e4bff02cf7a918fff21937bad7159ec53a81e522eb155e74967b365

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 24 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f87ecd991b4b0aae8fb8570a8f841ca1.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2088
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2088 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2932

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abf7239c76aaac92912e6052a7e6072e

    SHA1

    6af5e5f5df0eb575a36af15d999f6d387d1c1b68

    SHA256

    f563c36c0909fc1f98f2a2a06eed557e59cc5b3787a7e81af01f40ea98ed99ab

    SHA512

    cc2e57e7baea5d082fe799c88b85c56ded8d61c1200bd147661e4013d85feb6e20d58f9cbe022a60e4d63e0cfca9d1ad04d3bdb80aa470a0d36ac3acc38dd564

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf39f484e30e3d4885387f4aec69998d

    SHA1

    5f1e4da066cd09753a16b6363e4575393c7893da

    SHA256

    11503b86c75ff21d52fcf4547c59b1a68101bf6127508d633257d34fa0fe1264

    SHA512

    ca76cbef86300423ddd20e9213dd97602f3f2821c33fe5951b4d274fd48677bbf2b26d4fcbed7771544fd87ba03f2875a2f300764b3667014030ba1379c4442f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6651d75d67a0c72d95a42625dd5a5377

    SHA1

    e375a531c24d9d30dca527f264dd196a96beb5be

    SHA256

    82e09af85cde40d7a73a1000b6d0af9af90a7f8be635a88fb88be507b5b092e0

    SHA512

    e4627c376673581fe451cabe79eee208f40fa3b53fe0cf0fc8997c12b9eadfc763a7971ef769ffa11509569bc1664c942e4d7152b49655b93b5926b6fb57c5f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4a8f1020d1ff3c5440de6892182974d

    SHA1

    033b1d24f983c07929b1b5f7d45126f289dc6a85

    SHA256

    f79fdd002ac202a6a72d1a9662dfc28f91ef4896c6969a938a4ae576bb84e68a

    SHA512

    c96165094d2788f980c5b51a8bf89acc78c112ee0cb7dca19ee96fe23bd91492663e0a2d38a37ec09aeb251284290119272df2123259a32b898902288d2d9d2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    626a1353ff2d83a67bf2cf2ebe096d37

    SHA1

    e25659c6ea3ce1a95598473d6188f6b48af57c34

    SHA256

    553d321aec1fbd28cc42b91347804cb32cd279faece6763525dd174ce3893912

    SHA512

    c0f46b880c3287c1044c78cfb17dc8efe4bb4808d1fe14f37acf368a8bac2d7d2c7e4e1dc19adfd8c6fd8ecc19416956aca49f25b387c41586fcdd70f95ce747

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5231eed3431e85525a41df05e83a588

    SHA1

    4a9a708f3b301a66260f11c2eb1882776415ff92

    SHA256

    adf4fce4de33d433f89242150628fd243b5087c67a17db9833388518db5855d5

    SHA512

    f2be3297c5f226c12d3c5e7140d270e2ea6a6e03da780649b43372217bc284ade151c06429cb3bbb4fc175a231e6a82375b1cce2c8fa238b94264e4e954f895b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b0199b56462382d8d45e9015fd1d92a

    SHA1

    fbf9a1cf2a4b8f6410b881169304aef9c5743891

    SHA256

    e2e19a156c5905273e915e889b2222123dcf545a7eddab4080cb3c98cd95580a

    SHA512

    abdbca79d4b2dd64fc0d6f8ecd0f0a2dd7ca7bfe2e0a688dc5f70db49c7a44d33426541bdc8b0136a69549c891d190837f00e9006c1929ba32f68d9c2d505eaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce727db65796938175480ba0ada68d23

    SHA1

    03b1dd2a1a6d3480e02af6a31117836d89c7f84f

    SHA256

    fac2d6a98f68fb0982dd178c54a6bdbca4ca493e5f0f9e0f3d59fa4a4beede6b

    SHA512

    cf6a48f22a44506143eff4e1fe0e33f1a7a124c7a4303ddb9fba04e410de70cc6ee63b28c050ac868679d5482b1e57e118228a6c79aee5e6eb614aa196f6bae8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4581ad44e15e60a9452d7aa5bf68c17

    SHA1

    0a5b96431cb3a8a3d26257bdf389515345b812be

    SHA256

    eced680b372397354f687906d1450c01a09c9b139b807a99a30975e06c9181e5

    SHA512

    c6e90ab09c9bf1a9489d9cfd4267628b98baad19001590e7d7a8366ad4afa601e96172cd353db921336f99c7bc83fc6b05261731e4aeebddc2f49df55a18f6e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc566ecc2438592a1c55dd0709c7b0b1

    SHA1

    ae75b6acfcc582d88ca7e9348d627c4fc97d1ea7

    SHA256

    a7efc8f34ceb10e79d9689c854dd39ec1f0af23bc49e0ad06df7eda19d60b1f7

    SHA512

    3478affe78494e3ae82fa3ce5ed8ba3e903095606f1660678b6b7ee4bf01a4d09b6baa3a9de3fcb2c88d0f138adb0899b963acf37308a0f33ff5c9190e2700d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5744deaabd65e386c635cb62c10b420d

    SHA1

    e1b1fee3e3ac53e17d12104bff97d1065572336e

    SHA256

    0b69a4111cda1d452c1be9d5f632f4f923235c51ceeaad620a730cfb322d02fe

    SHA512

    eed434dc3f31caec27732ecf552f7029405959c0f9cc25d0c08e69cf6dacdc6d990fb1ea0095476b1218a0b20c878f698847f51e0b6a6f5432fb78e1cae067dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    311c3c0d3939312443076ced40fc258a

    SHA1

    13baf23b0c2ddc36f1169be883cbfa978b7b6d05

    SHA256

    a00cf844ff3899348eb66091b3a0375d8811a761a5f6aa082ea37c74262b6c3b

    SHA512

    0b6d47eafbd230a1dcb4ee0e788074eec86b202671fbb9b561d2f26d5d7300f60237b9834b0356bf859c3d6979f0ed46efde1034ba268ce1dbc1fabb6193d4d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfe5f13f7ccdb710aac5adad441d7a34

    SHA1

    a1dd6f7325cf889c2149b3c509134305eb6ee069

    SHA256

    23e2e1a40d000cbe156aeef8664edeb2eb9bbe85e85a20d36bb9fb6038b9d429

    SHA512

    4a48aa26c5cd539f265e218cd6181b7667ee72844b4445093d55284d71f4f613b9ee18a784357c7b96388c9c4e3b3433f876a26268280c3b48bca6c73f880332

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78927b506f0a851a087c3ee4187bc47e

    SHA1

    f07eeb23e42f2eacca7acba803096df4901c7674

    SHA256

    81420ceb074e209b173114aa3390b6af7d0c1859482d7b41b14c58e2584f4ddb

    SHA512

    b057878ad19112fd33c0ad9a7ff937d973e1d9ad2a830e63a9d48397a53f9fc5c1289c95e2ba6fae7be1d96d69af111ec392884cf305690c2e79ac1e971809f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ddd71266e45372764de39617652211aa

    SHA1

    3724c0a223eab2a1dfbdfe00058bc02d7e364573

    SHA256

    68dbc2177272ee82e2db7fc283845a1a39a144fc233518381637fee38d80e56d

    SHA512

    1e0040179577dce8df23ecea3d750401c46183f35fbd8ea3e6db2a4d398370b1a4143ce89c52a040ec11c3e669754dc1c0dfcd93c64e3f47a8d7d18984db11f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a85d23f81b58cbb7a07566c83e7f8205

    SHA1

    759c2222324e8d440c6da17721ac23047191a1f1

    SHA256

    4ad0511c23eef5fcef5749d7532d798d98a126b7690562414147768f1848fd1b

    SHA512

    ad786090d3b83fbdc70007035f2ef7dc07df3f3e09b6916a4a466e0ab1b7d6dde5cc78ba3d9aeaf6d4f56848fa2feb37db0cb1e594d0e011ba74ba5601c80afd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dae42b4dc93b8ef8833fc257da93ce4e

    SHA1

    ce34249df47c30fc769e8659ee99c37c9f424ea8

    SHA256

    9e9e1cd6a416915f6e460b36873831be5a1d2991dc02743acb6eb3a2b51da5bc

    SHA512

    4c0dfb5c029bdb5f180aca2de7b11e1e42a5e9a99f043a7b8a37caed0b22b1b81367237d43c6c173b1d888fef38c351fd7bceacfa2ce8098f297175f69bc29e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf6f06e7f3d201ba64c0d8e954d47258

    SHA1

    e6a0a5dc213a0e6abc327d8d424bc9df885945f3

    SHA256

    03ec4b7555ca643dbc9bdd6f89183c21721c55175ad920685ecf0968d815c9a5

    SHA512

    0e3e2cce7b29aacf293c13b3813286c44552b4e15092685f636dbd86d9872dba921c8fd585bfcf8064e45d0cc3f25df214eaf2c38e1fd2a6746edff3c88109dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb89b9c13a3f68d4c5a7a86bfbfa5d28

    SHA1

    36d2a718e497a7ac82f483d8a9157ae67e7cea0f

    SHA256

    5c9c333e3734cc27270bca6238c34f05a2475b53eb2569a8b3052e1d95b01581

    SHA512

    0a0dc3115c0c19df00769c482d9b60c31b47fb94db5738e94692955522e71256d9368934526f27d26ae70a77b5c61a427da6c19eedec9f27e2ada4752fd0ad4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e17c94fc58ab57888951ea4842a62227

    SHA1

    f345c7a6819d292f161bf74cc13f630d232d1d23

    SHA256

    f693115122b1c53a9fea59ce0a44ad865119210e8373b2ac771d6a1df0927d5d

    SHA512

    0f6a2c2bd9b40332b6dd3e651adae48346485ef8de74b9a034f866db183d33f3eb72a520cdcb1f68f43f6c1ca00360282179b05a9cbfaa614129165e81fc87dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a48f39ac8993afa518c77d79c9af944b

    SHA1

    4220d11477361cbc400c41f05489f9091d57b752

    SHA256

    aef28959a4336919a8c904f747016c7126cd76b1a6368879f4db245c78cfcf8b

    SHA512

    9761e632cbd549defa9cad8668a8ddd119328c84ae5e6aa48aceace434fdda5b0246c27757670d7fd7afcca2c0b033b258c4c2a5d155ddd83f5402fbb2fb6e66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b2faee90400d4a7ef76600b65868086

    SHA1

    1ef64d4abd3d0bb57aa310a586587cf6f3ddb4f6

    SHA256

    fc04a4c31f576be89ab800b257aeed144165c71cc014ea487a9a582e2ba447f2

    SHA512

    cdb18f350f9f9640629be25ef3da287e836f9ab01802a4b8ce5899d27c5302d218623da13b5bcb60520089b375f905b2ba290641253020dafadf2297b447c4e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed38d65448f95ea0b276c32888153c79

    SHA1

    cd2405a0f14ea9f7d0f37c3b17348c0bff674893

    SHA256

    f7d1017be9393bad9dac4f86424cb47753688727af9597917a7813d6de502b6e

    SHA512

    44785b969ea025b6788919fc937ed216b78f61a69bdea9f1098684a811243a6e01c7fb31fe42165afb17be7c133e9c82cd159850a3d5f57f5305f8b85f8a85d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ec172b0911429bec4744ebf3b28c301

    SHA1

    a7c2f1e31cf73494cfc8df694d5e0cf4a35b62b6

    SHA256

    7a05ae1a584231e064cc17eb405520298a278489bfc018e7c21f700e6a684afd

    SHA512

    1cb919c0b6ccd3dd894853c7a1920cfc1e0b829590d0a20d95e6db1ab7776f8cf57593e98dc08b5c39632d9a4a3ab1b0df977c84febc9101e1ae30d166cc96b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7e91063d58b3cbd185a08b91edbc03c

    SHA1

    781d714355975369db0496225fc295821ca6794a

    SHA256

    425f7a5cfaeb6ee7812877720a84880f378b58b6fd47da6925a276c35715e940

    SHA512

    0dcbefa7c5ce13396124d737f33cb95ed859b0e23a3d98b04b585b23974ebf6296340ae56650894b080aae21498644759c4c182218689542c657d3170ff98925

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\b5orqwt\imagestore.dat

    Filesize

    1KB

    MD5

    6897befdd5b370fa63108e09f220a593

    SHA1

    39e08bf059b73028b5e975501bca6072102144d5

    SHA256

    48c1bb2a99f4db497b63f5bf279a6da722cb82a3589b48670e11082b84fc5938

    SHA512

    46ff40bafe41db9ef89dea1fac43ee62cf861e99dda5b6da6db553ec1f3a10a6e8eef4020e0e773464c2a46e2923f6ec0880020b5058fba81bb48d16421b7dc4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFTKP12M\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Temp\Cab4646.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar46B6.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06