Analysis

  • max time kernel
    122s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 18:05

General

  • Target

    000143d89de81ba25df9625a6058df20.html

  • Size

    655KB

  • MD5

    000143d89de81ba25df9625a6058df20

  • SHA1

    ee8c82fa993d3ddc508c70e0c9bc934723625fa0

  • SHA256

    9a53abb93d094ba3f4a5741fc9530e491312af7ffb1aeda4c3031e770c4db3fb

  • SHA512

    c26e334a4c4ac6749137413d79c55a3f86a64deb3fd7aac209e1dc9c671050842eec72e4b6628f7690f75bdb2345b3c3a345855fed3feaca9e65ad385d40ba40

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NR:jvpjte4tT67

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\000143d89de81ba25df9625a6058df20.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:616
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:616 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3016

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79e498650beae943b22c5e4c864e26a1

    SHA1

    57162274f8a92bf7ee76694bae2870079d3f7c5f

    SHA256

    562a8f05e054e154e2885f59f598ac4e7abce603df0eadd86c8d33ce80599f59

    SHA512

    83c5e83333c3f279f7e83ffbdf4b861e51394abdda5714bdb0076e7ffb391cef53b048034f670abb0b1e37a9cd50e452ce899eeb7e1b34c6f331f513eade235d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52a63df205bc8653c592820925755c54

    SHA1

    1b38211bb0dcca9e0668028cb925fe6a2f6ca81a

    SHA256

    14207362109eed713ee89e42d30edb6711f1ef26675f6da39a270e2d591a0e1c

    SHA512

    2e95e8392a302e8eba57f1ec46af75425389203f853cbdfc31f3c6acc35f8e11d24c41918150061e9849bb9aade8a0ed413ffc2206f4840dff46c50d4ef25bdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98b164340d6d615cd695759d4c4f9e12

    SHA1

    dc739af6390cc8f3d2fe8f2b0eb1f1093c83e6c3

    SHA256

    a9dafa65c505920ad1abe557af451ac28956eaf9dca98bd90bb42434235e9b61

    SHA512

    3444a564a4b08230769d9cc339ae96a1d44be417284e4677eb52f8754f4898fd461e71a9efba9b10b7967e5e52c6a98d7fb12299669d56a827d006695418fac2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55f1b014b94541db3577fc01472bf738

    SHA1

    509a6afb30f45478bafc253b41506cb32bf3a352

    SHA256

    0f8949668012313a169595145b49120f1604f165af6b6ffebd9e24dd71fdec47

    SHA512

    66280f4bdcdd333343dc117ad1125a30fe944a4fbc1822570c9de042a32c0a79d86971b8113fa4a49da12e4c33f21bccb22e7d60f85ef469c46eeaa7f81b0f8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5868e65e59e13c0216ec455b21708f36

    SHA1

    997dc0eff9561c1c9d90c1eff9f542a47a1aee09

    SHA256

    b7d85b0a9af977fed24f89e494fbdb6b12b7d0a766b06de2afbf548893b7cd34

    SHA512

    80858167c0800f38722ec40f0f579ebbda45771aae5dcefabae71d2b1503b152647ce23620b8cd57ed721f1618862b8e1136faef589d60d99b00bc02520d2b3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe95bfb8984ce7a5c6c82145fd658e7c

    SHA1

    168ccf6c9f789f76a30d5be57cd93042cf024568

    SHA256

    928a3537ceabb91c207ab0aa0fe8de7aca873a4a85e872cb574539224e44dcb8

    SHA512

    6c25a445a207389e3a367e3660790c57263b46b72a6f3d4ce1cafe8c6308f0ec80211e879ab620feda2934707c7d5966c445f6a836d234bd72c7c0636421d909

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9afeb06de88424ecfa2df7c659e78563

    SHA1

    06b7ffb6534c745d2ed0557964058fb54b14f8e9

    SHA256

    0864f64b8f0a0e90ee6eef32e1f8a57d556158b4574358496c7fd0fc1b28c2d1

    SHA512

    1fda54dc502857d9131255f2d94f8e616e7c46380f474937aebecb4914303cc433eb7def22997b38d6a9eeb6d45777d4a514c0d03965cf0ec084a72ffd08f9ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30634fe5c97120eb37797750e9d2eb09

    SHA1

    17e4de733e207c0a23b323995863d1f170b2f026

    SHA256

    c63091bba185ba422c9b3454b5b848be0c85e0a07f7e7db8b619651b026fbd51

    SHA512

    aa079421e686be0b075951677fc3ef8b437e38ac33859b6a2a46622b9fce692d50a6a071e1e7023db73709cafbdee24e769993d8a4c18a1b57f7a7685dcac704

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ea6702e003ffbdebe1d4d10174964a8

    SHA1

    c4235f4b429f77ca9f3b388f4f585de35e46fd89

    SHA256

    335f4d9b171354d348f2e529bdba3933b69004df14c4c2eac1eacf7ab33ba3f6

    SHA512

    fc2c70fbc60323f4740d826473c74c2ef1f130e9504a8c3fb44a1ad9eadd7e3bc72fdb4711b851c3e613a9aa09f8f012f252dd378c01ea18b8f3b25cd4b25a6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7aa31c712180c7c268d6efa7f023aa85

    SHA1

    e8fe8407ab32471e5ec58a6937b8caa86e6741a6

    SHA256

    9004d612acb92978aafee0b6c50f1750d2c19ddd383cd25ee62eb555a18f0fba

    SHA512

    0a25252219744d4730c301ae7118e69f96f8f1041f3ee92bcc3c9f89cedb283f35aab85ed2f8c94e03932e986e6d78ef87327a185ee0639812d7cc956fa55dd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2b71c699bf74c109b4cc50b73b75f2f

    SHA1

    84f22de0a3c64c2b07c3f5ddf65546876a1f7105

    SHA256

    256c965b0b855dd94909c990cf7c9544dafa407b00627c4e9e1ef276cdcd70b0

    SHA512

    84b0ff63dfe996e4bd7e5ed40fa48b3c5bba0c49664be18ae8445e2eaaad29f686279b10dc0bf9076b711ec54804b0239e4284c8be2002c82b5ddb9414e92247

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1561a167b6ca161b96d7dd4b1d8a298

    SHA1

    c0c9c55519bcc67c4aa3eb5898443db300da26a4

    SHA256

    cc5dce090543de26f91da86a7e9ef26da8c411a24b71c511ec6d20a7e82b63f9

    SHA512

    f7e0d51a57673c06f0199d76bf2b80a2960adf042c75b4b6236b630547e0333bb9aebcc8c3cd8c000dfa0f3d4b8403673c19e108006a6efd0ca5c2b6e443d28b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4df8a64f9fef85f5f34daf1edc741065

    SHA1

    b7c4919c90c101aa21cde6faf104c806f261e5f9

    SHA256

    aa3ba62e001d76c835cb77f78777d0f669a27af392e4d8c97b3ad9c9e673ec87

    SHA512

    78d136e88d6cd409deced567540589b1a08945b29abc9412d468c47bdae554b124cb9c4a2cd235a11876b3f84fa23ab78f7bbbead051246d58ec34a9746d4b6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84649e88f49f778c9befa4f67ed9fbd1

    SHA1

    6a0155e35ca509a7b3a54740c061d6ac83ff89e4

    SHA256

    e3d663f2b5fc054fb6ba9fa3ed85d35f954c2e4b8d0d9f21a4b17e422a35ab0f

    SHA512

    0e6b6e5cc18d36c5b8e7abd6f9dfe6bd16ddc8f87f3dab0fd8af9ed30fb2eeab78648b9c9e2d7d18188312e2162afe9536b2e0cbc0e6d64ecd71eac3687d62cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b113a77db181dec046c4402340d54216

    SHA1

    5573877c2f536e0ce5a8b6df640ecbe045789a64

    SHA256

    08a18a8e9025febcba47e73c4dace8e1e88bbb249f52acc427155576c215a981

    SHA512

    1855d26e38b266f5e872a7ebc227acd85a34b8895f1b9448df0e0010fc5933d86273f9b62cedc010f309722b5940e0dc91acf44de3b1afc17392278c9c06dd52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5212d9a482b87ef4eb1dc54c45b0ff35

    SHA1

    bf98c8c3c694dd28ceae4eb18e231ccf94dabd1d

    SHA256

    9217bd81b7e3cdc13d7b366d756bc126c928d167a999619fb7f01e61b984cefb

    SHA512

    c6b1ea8ffb6fc48146e22bbea18633ab48bbc7e01c743dedc0ac7a0904dcf60e7ea09509c24a3b308119116619f33fb8e8d8794770d46a640bd5b07b9c75a56e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    265f5da7ae806d44c544fa1ca2a62262

    SHA1

    2ec9216140c7f026e4435a969d2fc5f3467cfe84

    SHA256

    473ecc59c733b75b6531b0ed6e6d1ad28ee9a0c02df75524ce6bca9984e1aec0

    SHA512

    842fd7c699c809c0cbb2cc9f12a33c8c7ed0805554d0edc8df9184e3fbeea9328aec70d0ff5c602486d3475cfb2d20e45a8c14950d2e731305e7ae910db03bf1

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RU3RPYUN\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U9VC31Q9\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab62AD.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar62AE.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06