Analysis

  • max time kernel
    119s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 23:41

General

  • Target

    074501c9e6da685b052e74429309a8aa.html

  • Size

    3.5MB

  • MD5

    074501c9e6da685b052e74429309a8aa

  • SHA1

    9f9aa2b4a228c25e682b15441b83c71197f0a2d6

  • SHA256

    805ad93e82803b4d453a642531c617c1aa93b64145aa6e52ab97e5dbe7412873

  • SHA512

    c836516e1fa5a8d13d388a365775236a6d93884af31f26ddb0b99ffd139ed2f12f310d8eff6ff8bbc6f74fdf15a1e4680a852a96087f5e747a6601d6b2b30648

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NAq:jvQjte4tT62q

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\074501c9e6da685b052e74429309a8aa.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1692
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1692 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2704

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6ad2b230e447ac0436d7a9165b16720

    SHA1

    6482384e131a4bc6a3c310ca1c8e609f5035529e

    SHA256

    997f7d57fc1524581f5de021860dee463e23b20106cf04b3b9ec279bf4bce0a1

    SHA512

    5d22ba5a5fef23e88cca277494b9bd82c6faed1dcde13c5cbe0971bc69b227d2a1718156156fab6f70880ebdee45c85be1a559c126c2934e053fe9605bc1efd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f80ee09f32f6769383e45e8f94c309f

    SHA1

    40699d9bd0e10df7f90f20f2a6223a659a20eff4

    SHA256

    ef36d7d668e6c11d4b02924373f2e9efcb0bf9bbe7db91d72a07f9f680d0a2ac

    SHA512

    0edc3568de6177a10fc6fb2da7bd41fc4cab305b35d02955e5ee129d3c70c30abe171e628806a908f4285f9bc2b14f8fe4a4e31d2cfd9342cfc6fde37d70a82b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9139c497587429ac0b493bbe96abb91c

    SHA1

    e2e2eb6c037803fff588b39464585232c13dfef3

    SHA256

    8267bc76156c2fe8e2afab158f7c8f619abb652fdffabb59427029c3ff9d0302

    SHA512

    c3f7b4b7903080973d5a41164c47b1b86f085e01dbbc5e87e5b7008cac632650697975c69db86ae4f585274c52c4c244e35621af70ca155256d5cd223ab07a82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ff25b3dfac0d1ec400be95fb1a1e55c

    SHA1

    a4a3be9df515e164bc8bbf24dbba769d81d7cd3b

    SHA256

    cb6778064f34161968281f05d9d66f68deef8f8c80c3acd62ae5bc2ad9bd513c

    SHA512

    bed177862d2c21d15f371beb9e1beac73d8dc34a8f148c7f00baadb58eb7a9ff808b6728bbbb58a3d088bf47dc6897c15b45216c8d30ceedaae2457cca761b46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0daea259ddb9885f8ed7689764672b8

    SHA1

    0ad9ae294cc55d58d550679c60bed4bbe11548e3

    SHA256

    ca6a1121f3cfadcbf3fd23b7be19aeb5bc70d8f3c30a6de85c45a72233579e65

    SHA512

    bf19f3994d198730a1bf7aec49226169ef7a1e3a0e410b21b05a209f15187b26fec6ea822b524b3bf557ee38bc8f58e4afa93189d7711f919f8c8481cab73f3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e9f48bd2bb049db7daedb5621f7dc70

    SHA1

    d6cfda5a6999ba2e76e70be131eba7c85ebe011d

    SHA256

    7a23fcef2d524f104d1939d0161f2799481c7a41377d02879a901536812db068

    SHA512

    7a8053b6a6c4811e79cc78e7ed5c29f8b0dd0bcf55a28130fc0f498ced7b32d2a778a5be3d9b277e9570dc7a443e15dc759ba58296aa110b3116bba3a663e500

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d0e72355ad0bc5cb4eca943e4cd0276

    SHA1

    dca7ed9aad14ad77dc70ab4faf59222968ddf0d6

    SHA256

    a71ef3112385cf547b3ae56ce1d6b5cb37fb24da4c3e8d6f5ceaa4e0ce8f02b3

    SHA512

    e75972b42abda2d5cdca4c207c8cba92ee3e733a4742d05c9fd3a5b48945dd72191214e9357b87875c7432513380b85cbd639292a8d9bbfe8ece1d72f559eb39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bccab908f1cc967508659a2e08ee722

    SHA1

    e1de31bdf4c35fc641755f33fca4587459248f51

    SHA256

    bcff12fa6c80561568f014adaf0b4997885b394a8cb8a6e00d28221c5665d9d0

    SHA512

    cce1ac5424bc1d965fc1eddda27cba6fc1b0e37b3a33bffd9a196112789051add12f8f233ff1c7d9306b91c5a71255c4872fd8d340dcf0f5f124efd224084d4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d92f5ccb5a6c422c6c3b4636f2da2139

    SHA1

    55ecf0a5a290b1ca8c8a3b6f227b9239a4e86a34

    SHA256

    0f4ce2b673e775b8c0d4333072eaa7d2c9dad06ecc50d9ada7acead293f5bbea

    SHA512

    cdc0cb231576f950f04ee8090e1ccc8ede33cca90d27773b789e780a44b913ee86c700761c0008995ca5fbbf1a5bb085248e0b0df795a1be184dc4fee0a0ab94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ebcb78e4572a3f8bdf7831da3ab064c

    SHA1

    d3767879d3e3a5efbcef77db092e19393ec82897

    SHA256

    c8a8e335b1c6290e1f2f2135024fe268b9c71cd666e2b3951aaace8ed4cfaa62

    SHA512

    a86b04598be8345f00340e43534d31c639587a90d3101b4e6d6073d1ea3636f6c0543f6957d76b32ba62c469c9b948a374f6dacdf77da306b09196966c6a3dcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9626be36f5d819394ceb938db626b313

    SHA1

    fb2060c720d846817e695385bad914a632594b02

    SHA256

    c8f66160b46f10d6de55e9d7a07fa98428f56c7def5ef576a51aaab1865447fc

    SHA512

    99aa1215154de456bfa369b0448a4b027bd14d964b1061082dcad69453e7b64844e0b87c0363edcc02226d1379bbd96d6942d575bdc1642efbc65c1203cc126f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf36b182ebf4c2a5bb648be06ca02bc6

    SHA1

    b01364292159e0dd79e895f24e65b7fa74168d75

    SHA256

    66b44a76983944b4b1b29f483b5e5f51dcff6dbd09a2ad344c6bb9f25c7c3277

    SHA512

    024b9cedcc6bd7c16130bff0d97ef82f35eb45c3bce412e722f5fe792da960d8ca2657e9addb911af2894832adefa6080c74e0be4d9eb0839650e1ea1d73d897

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65e5876cf9bb90b5bfd95cf40a8e7af4

    SHA1

    8f1398e0cffe5c7973ad47925c6c47dd5b741cd0

    SHA256

    36bdcc12b840938bb82c87f46aa2c00d6ba4d5285f75e5cc217d68ed34bc2f05

    SHA512

    f38eb6608a31e52f88ab1966b03e40ebf3905f2e17b7f278e4a608df543ebefc21b2f2c2fc99d36035ba318ea5f38dcebb72bd43f134ab6e3ab16c358daa67ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47c34eb6b71b46eebb8432d9647991b6

    SHA1

    4c62a78b7a3bf6d1326fc9b81d334242f48b480c

    SHA256

    74c79ee5311f52665c8f7d4a1013e367c910c100f7eec337f3aaf42117c7908e

    SHA512

    d71e2be43815cc8b0068906aa3e9e0e67b334117fd3fe7f7bd32aa17274da8d1102e18693e4ce37acff6a50f86406104bad50acfb0c5bcab55e83e86078d7448

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3671ea28bbeb3c5ba34e3ca37c63f0c1

    SHA1

    8d1ac7192f78e56a7c4226e05d211f3de8d532d0

    SHA256

    852874cf33b5eb9f75166d9a77e64bd9ae7b19bb831caea2d1e2d5c87aa7c12c

    SHA512

    d81057aa77ec959703964f09ad8cbae07c899d7c2c954b5b72edd73b2736a1a388ddc70861afd30b4a9e9a3a581b12e510fa9e9cad0ee21bc7f6e9e16d75f509

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1840bd9003ed9596a857c190280674f9

    SHA1

    875526c6f6d5b91960c184d29bacadcd90ef7fd9

    SHA256

    4a9dda5366244b43c3689642a583b9429ad2880999f8d69b327029ba3ff9a76b

    SHA512

    a9a811f58389932654e4aeeeb7fe0271792d723fb94f280da89c765da19ff6a514d6bcf4b157f5314f5ead99cb0f12510df510493faac6ca6c8feef39bab2dea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c27c82a39ab4f91d98f6d07d1f55417

    SHA1

    0c112d00da1b9000b3771b4dfc96512662aa71cb

    SHA256

    737007ed5880701fabfd645795c6a46609c35adbf8d279f3f6e899aa21958e4b

    SHA512

    d175f9eee4701db8d50d5e149ac6dbba88a3fd04c79a445f65425ac72acf38cae2df29abdb99717e81b730425e80baa1172735c452f148b9e7fc7fd922128455

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48f6c91763a33cfb30bef4696d0a027f

    SHA1

    15ce6515daa0067bd9520f2e540cea04a266c126

    SHA256

    18850c9a51068cd5ec07f2ee6475de99508cad34f6126b0b9b86d54cbd228fb6

    SHA512

    62d67c8d35653ff439004bbb1fa42f0d24b046f8a676ad371da7a1c823e4d9d34f09fdcc61cc447c8eb66a73f29a4a23bc54d175baf08801ee6583a1cb600680

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LSNXCBKV\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M61DDFBK\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UOO61SKS\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab4388.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar43D9.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06