Analysis

  • max time kernel
    119s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 18:13

General

  • Target

    00282b1a08e3a56e1fd2e44570c46911.html

  • Size

    3.5MB

  • MD5

    00282b1a08e3a56e1fd2e44570c46911

  • SHA1

    6e2c18abbc426a9a646df04fc5902dda61b33c4b

  • SHA256

    3e6935c837c8634cdf6829928c44c5c304835b60df5efb8451e03619aa87226d

  • SHA512

    97a923740b451bda32ef92126e042cc8021e25fec00c1baccf47eea1d23cd462b4b4ae69bd706e972ac5dbab79f0235c0ed8fcd87e9c3fdebf2ab760613882ae

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Ny2:jvpjte4tT6s2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\00282b1a08e3a56e1fd2e44570c46911.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2684
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2684 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2688

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9c6039a9fab63f48272f2161ecbe0cf4

          SHA1

          b32855202ad42034dc3599acbf7c9f148c4b22e9

          SHA256

          fb11ab638a9396e81e48773a0c812580d7a60c5a0a8c1dc8abeabd6ddaf66d87

          SHA512

          05da7f1efe8848f8505d53950455ae59eec16bdc4b4a02c7022279bdc2e1f018af9e3650490024e77bc4c522d909a820fd7c0d66775d91cb6c46763125ad8d75

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c0b6ca4f8fc29cbb1316c1bf3186ca6a

          SHA1

          5748e8b6ab1a349964d7b72322e643d0cd17591e

          SHA256

          41937d2235b44c35d41887eaa09feea44d5d732f038ccab4299c5697e2267240

          SHA512

          71727fbb179c6a9dda39f65075da03de4b4ea91b779d8927636719fff808437d68defe8e1c345b2fee12076e2df9aee8cf3e6510c86999957473b9e1b43d1ba9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d9113a52cadcfe3f025816fe7ba49921

          SHA1

          9f538c3b6b7d036eefe01f394493dc29e54a522d

          SHA256

          9a074b0814745df5005e3d1bac280b53b1e68bad164b074f5cde873351d8bd3b

          SHA512

          8699a67128ef0dfc954cfb0cdcccde40d80801f3bfebc9c694d170664bc06c194c5b032fc825dd2bf7bbcacd4943da628ae17c8d71edebef1cf7145bc1f86dd7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1c408457dbc14c8ede5cbfc5b3f0af16

          SHA1

          95b317c882dcb2e8d7f06bf0cd49d82235efde85

          SHA256

          7c3886286f7597c8a35dc11735ef922a249c70bc766d947052ffaadefeee7ffa

          SHA512

          840f939cf109c5b511845513849fde29d9c2047bb9db184e9f6451359d6c509f88abaf9134abf28a6b0564034286077985c855bf257d8bea2210b9a65cc3a5d9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          28529a0a72df8a97e9a38fc43118b3c0

          SHA1

          48f58730556c27b5576348900bc72796e658079c

          SHA256

          68d7d4545cdcb66d50307262478c2cb7dc00a0cda4ead68bc976484454692291

          SHA512

          cd5e92d2c5bf4f8a248194d85ea4f21e6b93bac9ec150ce19adaadd3d210287947ed1e6eb7f88e94f3e1c709fb7cfadc6e30cf873f285292b23b80be8582656e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b7fe7e8b3e23aa463b20c3acc5a2f720

          SHA1

          967e9462baeafece35ad23098af22782583b7afd

          SHA256

          b6fc1fb39eac15e0c73e2951c49480ff34df0fa0184886c7649f314ad7e1c13e

          SHA512

          a53129d3a3527f5978d6dc307fe989a59b17b3efb3adf3b56a6a7d435bdd922cd15f9f28a21943905b8ca031e45c7beeba68dbe1575cde73e5432fd3d114521c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          aa650dc95c8ada472b055ad4d64ac7a9

          SHA1

          da50bb37fed1c54ed6fcf08a92febd91d1b6b06a

          SHA256

          ff552c1ed7d4e98b222709b8cc8178c9d9e453f4384ad835f5b58f5cad92d575

          SHA512

          d80b82d6b88e46c33826f92a0f66ae34aa79934a9a55a3ab37db1c070381cd2c144d867980c14e66bc903d08d4fb8c1b711ebc735a703c513d775ba3ec00a8d1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          56404fda2d4586837ba0a79c366a5e39

          SHA1

          1764afaa2d6ed5a3c1994ddb8116bc6193cd2f17

          SHA256

          b6b389fe2fce7c6e5ca832f923a8de01a7763baab9592db78d22355ffcb3e5db

          SHA512

          3537bc7db7134d64b8286e488e50b0bff0ef2516de9e0930543bc3842284f1a1b973d75a561df430bfe96ed81eac3bdb21a53402a6cf5f9827d141672c64bea2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          82647ba7d76e318c6c62baa589468b77

          SHA1

          b1dd1ada3656e751378cedb95485374efba0bdbf

          SHA256

          ba6bc06d87db6731f37e682546bed1e7711188af02ec9389a7321e70f6850d03

          SHA512

          d8fa711916857ff34b657ae29f076a082dde51c8c7942f4d7af774275f8ea919ae2dbe8e5dd0f05531c8b111b290ec62967507b2f71bee1f8e5a661c40ebb7d2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b7345c703cf05ce1a19353139bdb2d20

          SHA1

          808f21bf4a47fa88228aaa7454bfbf0addc8a675

          SHA256

          d08af6d295d33873039c0f23df4ab5eca9b4373c6bb664734248d206ad7bc4bd

          SHA512

          1dee337484a4cd83a401457a30724c0668045eafbc62b38168da3c3227cedfc4d4393a35988a279104361f4b86697941bc60b2ea0587c9f07c4173f7ac3ea13b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          62007e4baefa87f7273b838ab3189a7a

          SHA1

          b948ce081f4ad7c32642474dfe15fad2a8f64c1a

          SHA256

          18b900598ef8dea80da93517ddd07d29d55c4192ba75cb77b9ffc916beefbf88

          SHA512

          d9bb0dc83d3c16e024e32e017cc4622a6926a74e2504b19c369a7b95972aa4c6db409c39de8c18eb027932d5277c8e504c6624ac0d9d5d049e8e50a90c3db5d1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          549590ea53d21d93e9d983f40215bd4f

          SHA1

          766ff80931be2ee6a62b8de96827f37299ed5471

          SHA256

          5bff67afb0f48d87788a08c74d0cef5f5707a955ff5f0bd14ff2eda0a8ff48bb

          SHA512

          58b2359206fd01c7ef4fc1fbe87be36e8f66003ee9a67c47b93334d5cd7087234d7846bdc47d45f476cb57852caadfc0557f73c7b7ee20b442215ef22568946c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2fabb540ed1c6b07148475e87302a3c3

          SHA1

          7dd8775714973f290c74cbca127213ae3cd6fea5

          SHA256

          5fd0a27040ee6c475912767f76bd6ce1ab98b608bc2ca66cfcc76381ae17b4eb

          SHA512

          a7b172ed388585604479391fcdb3bf5d3fc0e4181746f0b596053f4d9a2a9612c6b56433dffbfa13429c83e8c7fb6a55ef9d4059fba1c7b07dfa0718bd88ccdc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          de8d8444c3678ca5b2f3b1fb3a5bf8d2

          SHA1

          8952c7d9f217abf33ae2ec31762c8b480f4db9fd

          SHA256

          9cbe863e3be304614f15231230fcaf89ce9501fddfbf85d410e7e1eb418a1db5

          SHA512

          a3ae87b46dcdcdc5a5dd78a7d9109c0d5429c10cc5ce5422024ee41b263d333faf08040fb5f467215fafd9752b233658c3623525a562f348908e21402421f19f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          74c822b38adac984ab933c5c79aad503

          SHA1

          545b48cc92e1bdb82e05cb4660754215746e4c9a

          SHA256

          438fdbd2030cf235c76e1ceb241fb5e0d69fe52d0ca3b8f3e716a566985c3cc7

          SHA512

          716f9f0242ebf255886a833310e6e516dcbe40136eae510d5a2c1ca7ad59dde36e27e6469afd0908733e88c09c2e30a1d6c5987b0c21a873ebad40c036e5e768

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ef729722b36f92e268b32ece1226c892

          SHA1

          893f25316f487e62f1ea89d51f69909e15606adb

          SHA256

          94fa86b9342bc43b1736f149ff4a423a7090ea0a91ebae7ca6e6ef0b0905e8c9

          SHA512

          b50ebe0161a6b770e7d46559e2acfa13f303386cfa33a7a7f0845ee684a107c322f6d9c9957304bccfd40d4c2eea21489365cc0b85484d49d290586c9cb977eb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bb070ff38c4f224838e0d039cb611c2f

          SHA1

          e97946e43bf5582174fa891f4de7eea4dff35d88

          SHA256

          3cccce38f4df1ad20bf7d144dfa49dd5cef5141479cf60f29949db2e60633f53

          SHA512

          1fc067aa2def2d9538e3fcb7284b3dea21c00b2b706a70c01d68e8b856072ac894fd205c93dbedd295a7500b8ae3c16718dfe98305bcc93447dcfe1b5bf8a46c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          562dbb3b7679786ddf64de3d7533e42c

          SHA1

          d471f1eb188c149840eeae9e8fe22a085dc77832

          SHA256

          6b185ea7a8fe34a77f10d83ffac2503f315b4996d4f429925c42e01f8b1510c1

          SHA512

          fb8fe34cc15e82a7e70643b2acb800d569b20cbdb0df6e36b182e5d6bab98556934d5d2a6e2b52e942150c54b6999947293fe0edc295a336f3d2abe16c030ea9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6da64c986b91e93852d90933fdf681fe

          SHA1

          df2ca017f4e5b15e9e80205f1abf25d0b999513b

          SHA256

          3d92074157de9a650fb384e1903f1b29708603ae89a1b857d05a3875ff0db9f7

          SHA512

          633cd19d008f913d8d5c0b2c21fd2f7aecc7341d19c0985f27deb8b1fae9aeaa42d25858e0789a6d66688f6f9eb4b8d74decc6999f7a2a11a6a973d457182bdf

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\beacon.min[1].js

          Filesize

          19KB

          MD5

          dd1d068fdb5fe90b6c05a5b3940e088c

          SHA1

          0d96f9df8772633a9df4c81cf323a4ef8998ba59

          SHA256

          6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

          SHA512

          7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\jquery.min[1].js

          Filesize

          83KB

          MD5

          2f6b11a7e914718e0290410e85366fe9

          SHA1

          69bb69e25ca7d5ef0935317584e6153f3fd9a88c

          SHA256

          05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

          SHA512

          0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W79VKSP8\jquery-3.1.1.min[1].js

          Filesize

          84KB

          MD5

          e071abda8fe61194711cfc2ab99fe104

          SHA1

          f647a6d37dc4ca055ced3cf64bbc1f490070acba

          SHA256

          85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

          SHA512

          53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

        • C:\Users\Admin\AppData\Local\Temp\Cab8690.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar873E.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06