Analysis

  • max time kernel
    122s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28-12-2023 20:35

General

  • Target

    f658270a71eb8e789ae7ec3626426c34.html

  • Size

    3.5MB

  • MD5

    f658270a71eb8e789ae7ec3626426c34

  • SHA1

    f9d937fdac7035009822e49d7085d28e933e0567

  • SHA256

    108eb4988cec56a776bffad4d6bfad4f2a963fb406ebae6b4a8fbe9d4cb43784

  • SHA512

    989b0afef65257e9c842f321827b8a94317d3e82e48fe38a80ea3de71a07ffc16e828315f80d827456a98f407af9b27063e0adc825cee506e991222ec6d9989f

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nfo:ovpjte4tT6No

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f658270a71eb8e789ae7ec3626426c34.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3032
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3032 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c32dbf9d85230165a99ebd9f86c99ccb

    SHA1

    8599a044f383c8134565fba4b4fd75c9de69eb66

    SHA256

    74d63e9e975b9c39715cb66da75e5105216bd3ee0540630369323a5ce7787754

    SHA512

    c1ee64ec182e7294815588933a1aaed9660d2f774bc24955c5618cf8c83400e9178d3a8336a053785f3edac944f8777012df024442cd913d464b11145bd05339

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65e8cd7bfc8cc92bb70bff034945ab44

    SHA1

    73ce5ebf463a2fadf457597d76bdd549f36be99c

    SHA256

    fc4692b5cfd8c430837f45c8cc509a84bf5e27bd6bed1ec544f408779081d75e

    SHA512

    4ae02df192d1d0833cb9d86ed50fa2f653dee1dc79f4d424a9bfd241e062450f1317d1158629a80cfbb0563764a26261f8425b8da8c9f31bfe13fb5cca2fec69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27f600f5ad6b8ad637e3f18187c859d3

    SHA1

    0753b79862820ea6ba216f556f485b71597a90db

    SHA256

    98351445c57b42e30b3422a98df3891b8f70e75e3ac81c58f3bf3db2a5c4d4b0

    SHA512

    943a274cda32eeb1c07d2d72db75c69275ff51315ce780ca87e7659bfb06d7d4f17e6c49d97a47d0c7024a6648d1fbff647da1c570b0e888b0afc82f59f5fc83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d66dcbb098e27fb3da49804022f8e83

    SHA1

    c96f68edf758452562cf393beb104fdc5d9c4aab

    SHA256

    37e3828612b059bc7b596bca95f0f54ccd4179b8733dbf5e116b1a153ff12715

    SHA512

    b9e595b9ade596d4ee3603865a98add07cfa4d9166a6bcf27e73bb74cf0e2a3d5beb1a09421a0acd598962ab71437e7b48c853cb7a4f2abaa121ae3139c3eb03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6969589c295c1204b0db024edebc49b2

    SHA1

    dcdcdf53f575d6a90e5c33292102142313aaaa81

    SHA256

    52633a974cb40b642bf88144263f9f30e08f2e8fc90739931ae423c0c2a60554

    SHA512

    3586506854564d5ca816d039b9e39982dedcf5dbb233c5fc0e1a0c763e9e2b041a253415e04457b8277799a317ded9f0ab55494170f79a603b37418a01f604d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3958d5c2fee1c6f4e29a207497613a25

    SHA1

    b0d51b71a673330077ca76aa91809c5465b368dd

    SHA256

    76e3ee41d4fd32248b4317a07c7a3742d8931af679fc849086fd1bbaff0a773d

    SHA512

    db8b1e521b5eb2d02d18bca5ff5858523cb5713e9eb10fa5f55942c699b4827a9a53eae7b6ce7ef287aa578634ea61a22d5b79929cc9c21698705d152a28b230

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02c2eed79b93accbd3f7165561f18a99

    SHA1

    947d85598fd2a56c128f2b1c0203f47b3df82fe4

    SHA256

    4dd1ebdc836754592862dd5afe07b99dae0a286be6821c8223afdf988fb663c7

    SHA512

    5b9c586b78ac9c9c9fb5930eb93bacfde9b066478bea08bac13d975cb85c0273b7bfaee8a37f422bb26d636723ab06f3c63d7a76d2466700fa23d07ac4b14359

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    144991c18cb3c4aa12f67fb5c10f70b0

    SHA1

    f45e571535935a47ffec933a9b28e39191183317

    SHA256

    4634764adce75ce259b3aed71b4f2d5f6f3c7001f00dcf0bfe3684d5b36ee740

    SHA512

    27a43f2de1fface6ad4892dd3caf6e37aeb22d2267bdb37851af1ae7ee336a7f8069bc47ac5f26a4e8912bea00888fcf6b3396bf0aecdbd81787dd921b0565e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a497faa28101ba041559aa2070c64a08

    SHA1

    12ab0b4bbf6f804d7afba1a17a1f8a5c80ae6fd4

    SHA256

    826c8765483642f4db13d443ff62c8b927e3979d038dee3b53bba62a2cd25600

    SHA512

    75ee456e0642496b8e8fcca615e1aafa6c6a39f07cd45d2f1f078c601a9681a9dcbb40062682c38d05d0b4d19c938d2a18b5af73093012853bc0a5de87a16467

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b88234d2bf3f3ae03a6c5a89610cdb08

    SHA1

    594995da69fb585c8302a83e5e184690472ca4bf

    SHA256

    b62869a2888ad353750ee9b0f605f4c033d543ee7959f4056fc9d54354883a8c

    SHA512

    1fa6689b2417f63437418bdd6402b5394bbdc60b61bf840d82baf68d740aa4655b6b556035508e675333a3d1b24e610045f3afded28354e695e479c24234ce39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f77ef7c85f0b7322410e27c9e06725a

    SHA1

    381bea0a3c295a2407921cf3dfef012111f242b4

    SHA256

    3e4153296e0476d0ce1ff10892048b215ca01d676ec022b8b180f68bd52161bc

    SHA512

    3eb7a8cbcca1c683eb1f18ca7ddf695cbe546c244d89e435aaac99fef048c6a7fd665890cf70eae160fa3e61041e5785f988cde9624e1ff89a7b0448eb45e6b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3a7316ee54a846a251b67b322f7c576

    SHA1

    966455d6dc4f279cf435ad11b77183bca6d38058

    SHA256

    717c504bfbe1f72bcd2b27dfbf55f62f4d5f24677bb3807991dbec27183a994a

    SHA512

    3258944c5897a6152f450c10f62898c2eddf8c0afa37ba21cb19a5262024ec8822606c99055d6655cfdfa8c1a6cc97da07d051180e0d9b090b2b674179bd65d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb626ecdee9d5b35b5b34640e03a5c2a

    SHA1

    5f236adb5f9358ceb898846910727f226b4589b6

    SHA256

    4f87bc9ba0ef70ab51286f142d55fdfef484fe4ca264421b686152cf8189f89f

    SHA512

    a5470e9a826373b6e8603d952e78ff47f47425f8bfb82baa7d1b2b1aa4d07646e1576557319ec7f115091db8d14733a3ead0bb16664d05f7673a6d40f0855763

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21477eb7aa669229a5b07f0eef06e7e4

    SHA1

    6845caae8a5aa075241e1a93fc4363626da94ae8

    SHA256

    3efeb00d92ebfc1f31a95356026fc6cb6f11b77ff1edac5c4b809a683be169be

    SHA512

    acca57cd59960d112d48553fb96328f6bd111a6843c6497be77bee8e6e523a147b51371aa37b52717bb8c3cdafde69d5ff0e3b982888000159fe674ffddacabc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb2b8b7f1a72cfb764338c6a6d8b671d

    SHA1

    c996f54341d95b414f5fe4bbd3d9e747413e2e50

    SHA256

    af61741157df5ab9716806fc1009e01b564065210bbf0bbf07c15a247bf3768d

    SHA512

    134914d043af23b953c73eda023a62d96463eb7be4da16d0a9cf8f9c4588a5290be98f39ae6d8dd3ab1b870765a6aba4b0fb6f8b6776fdad80ffde24de92c3af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cdb73b815686db696321e9cf7ba8689

    SHA1

    d419bc26d229ec78265b10017d958dc6cac351df

    SHA256

    c257a1a3bc6912b9292005be8a9eeb64d0f05ac74fe3c696d09e6e130fb316d3

    SHA512

    056c66370cd8f13789fdeca61d1315a276035d9d12ebe65969c731265ccf1652c776da55d15c0070245b1cb27c91691b6dcc13ce8c80aea6542cad0e2d11fb91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d4bea2cf1b16c0817fc0fd373b1e5a2

    SHA1

    f495964774f69e7be14299243c83cf6cb6d6364f

    SHA256

    0a70f2256c8a0c73a4f14d2d4a95049719068aa3223a246095ea052e10c9ed67

    SHA512

    b6beb642b3969b8f4cbaf015225fed5ec2672d1748304c26d83feb269963f47d65c84a0fdd2fb5cd4c29d09b0f719f0faf5147c76d8eb836fa942942a5ed3e9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f25a82b9f36dfee9dac49359692d83f0

    SHA1

    338e0d148796f2c32d127601fc46ac0d48ffb656

    SHA256

    5650e7081a7caac9f9d68c17e9bf451154cc6c3e49487466a13e5a8455f55d5b

    SHA512

    8e25337e407677e21d46a5bcf836f2a5938e784add4f219b02914238a7a425709fad5425911a7e07355e9531a4668e9683d74fc39b6c00788b2d91fc3119af51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6a5b97e0e267187caa76da04f03cb6b

    SHA1

    5d17fd36fcab08bc5d899ab5faff2f26abb75c35

    SHA256

    211820ca51b47d0a14c44a615296c05a802e727029c0f123dc836b88d3af5052

    SHA512

    c1a8b978f31c5183575af7f31ec1392808581ae9cc680d2f0ce407e34143f500dfdc2873172eabd674556f219d3a8bf9982f0d9e52743e81871e2449ab0b9019

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E1CCB52I\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1J1BPYJ\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YV6H14B0\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Temp\Cab4E30.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4F01.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06