Analysis

  • max time kernel
    142s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 18:18

General

  • Target

    003fb95ca0834569371f02e2dd15dab9.html

  • Size

    14KB

  • MD5

    003fb95ca0834569371f02e2dd15dab9

  • SHA1

    2868cf9f03cc8ebad4973f61fe159374d38d1d29

  • SHA256

    7a020e93626fef5c54049d2c7bf9f455cd62cf1a1da2bf66b2d995af31e4fedb

  • SHA512

    ca077fcb2fc19b374e96e51240e9a1dcbcebf1bb91f6b2ea1cab22ed62fcc8f7bf3e72f24e8355ea2c0e21196a6efdea32020a01291ba752355375835ea90769

  • SSDEEP

    384:qwRjNmcvfMzRFLgtho/greazaMM5x/Dy9:NhNDfMzMHo/gwMM5x/Dy9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\003fb95ca0834569371f02e2dd15dab9.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2888
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2888 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2776

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4ca88a4f773ea8f72b2b04b59c6309f4

          SHA1

          ca27ce4420a5a541ed528351b525fc9a616dabb0

          SHA256

          73b59cc97bc48a5edbf5329dd32f3c4bd978a11fbfbb175f1bd8897742a510b9

          SHA512

          58a3a0b71c577d58592621b371c2f51e90cf00cedcdb9adf4c45b7c80d26fdf909b0aba1cca485c9a0044f57df66744c4903c5844dc7b85ac9e09fa16053b980

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          aed738d64919a8463ba7336f79e6241a

          SHA1

          f68cc900be9d5ccbd2f2c30ac7a88462ef8d851f

          SHA256

          1988394ffdcfe8d9bd17f40e8870073edc47124f214b7ad044626e991501d550

          SHA512

          81bfa9c35c2f201379cfe394da43a3af114023af696d366e7d65b6799071737b4ea1e2e7b2338deef32214d464ad6043d144c0826516e85d353d44ff18774876

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          82fac43effbb1b5284d4bbc84cd8a12d

          SHA1

          84af35106ba289a30f469137302958706db5a28c

          SHA256

          179e14555717e214c8360400ec76570401ecd6c5b1a3d1eb42a5187eb51361c9

          SHA512

          807524f8a8c37ba2a240f23a516f0dee0c3424b243d2c03fe6d117d902c017ec166e186bc524e4fa91a357270ebf1414a1cc652ad356fcbb0ca172aa2b75fa97

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7ff46c7ba6b52606f01373a8b0a31532

          SHA1

          877d3689a146d068e03087bf84590c95e376d7cb

          SHA256

          8dde4c57b14a9485802fedbedb1209012b9b70db6d9eae60a2c27e58c443eaa0

          SHA512

          7a6d4ad39f572e5a5e6b5f00950b96745278c711ac4578b89f50c17aeda74a00974d5d44ec8fc1bc3b030e6d983e9701532b7e3f292a3649ab3a4e712e3d64b4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          408ba69f2da004f10ecb62a949bc0886

          SHA1

          bf1766042629d9ca8d11865dd9c97dee7fd8a946

          SHA256

          ce85abd9cf54ae17670007ccb56eae284f9804258a724957db1787508aae4422

          SHA512

          20b3d2e880447922ef911aada9362acd4b33d4dc79d0de0ca61e5e69d3c68d66325e97332888fe6f7a22219737aed09c87f0e11be7db64c3646ca0feb6a387c9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          22efde2ef43d1003d1ae12a629e12342

          SHA1

          b6caeb540e01216d9731f94cecaf56cdcdacb387

          SHA256

          3894fd3674c9ecf4e954818545bd7d9cec78b8f2d2ccc24e7995b613f8a1026f

          SHA512

          a9c37efe2be9a3e911ff3afeb8571edee9b384c3f5fe978d01249ad9290c8bf96052324b89e4f7f4a9dab8a960ac1d3e16fec0f621fa83071ae68a8966679e25

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7d5787f90fc13c1ac567f489f58f4da4

          SHA1

          6c890d0918fd96b04404a1614530eeab3aaf4a0f

          SHA256

          74c2a520fdeb5af16464a04de560ea4da1e532f96d5334dd92f71eab74023dd5

          SHA512

          36696e756107b3693daa0d49e89746b4016ce9458b1b9be5da0f773e57ded3be9f78ff73318d4fc766820672f561a04e328a42cef0257fa94ab27a4d3071a4b3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          63a5a5e0b3dbfa28f805f00bb66bdab2

          SHA1

          f072ef51b0af38ebe2c3cb61b916e336eb18c612

          SHA256

          6de4ea9916e18af175a51469f58eee5a1497e91924e5f75c64feb2f1521bb088

          SHA512

          eb196c6996424073a8ca4060506f269bbd7c97a0583793e4e07bcc21ee3ca68ec540862b729065f34812816bf2ca1689adc847ad5b65aca49e806ecf8ea9a3dc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c5ef2c94152a035a90ae7338b54bf451

          SHA1

          75f4f02ac24f3967746c199e539771e6e760daed

          SHA256

          1f4ce155a45805a9494b89273c0d4230a4495de458e1622dd66f2f72c7768fa8

          SHA512

          d8d56015c3dd9d19b65f50ce17f6fa87613abc909752f9172ba207bda1e32fde440ca26c8e0a08afd74355aa9e6557bade42fe1dc3d51da4eb955d3223e81ba7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          43409c16cc44beb68c30b45ef4b5dd93

          SHA1

          eccc2dd681fd55f10841f5ffb4d9538ffc172511

          SHA256

          797e063b3e69d3465e1d94dde31dfa9b38f767482d352133f59aaa9fe49f0c2c

          SHA512

          df98769a53379d920efc289695c045eb56cb15aa52280a3608fb6143fbc39a3789b0ec2b07d396caaf68a86a4c74815336a6cd59c0b10ec80917da2c94c1c462

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          496a22e8927d89fcb08088fe56f184ec

          SHA1

          6983ed8140121bdb7cd3c26c23bc117949ea69a5

          SHA256

          0d8e3f71123182089e074bc1445ea593fdff9eb475313f28a0476adef9acfbc3

          SHA512

          44d62c7955afa27322e02543ee074a5016639ee6e3ddbf4e5775923eb3a46685fe68ad2ccacf79a8778c7c512c651334f40ff7e381b6b1da5613300f83a498e5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6555d3e0bbb3762fbe7f3ad7ed704aa1

          SHA1

          b3204220455d9fee3f9ca4a6446d7a7b3224355f

          SHA256

          134861039e18ba57ae835fc8bb536d831c4b0ebea5376309702ec87d88d044ea

          SHA512

          e196df0128a02bff6464d8a1845682603e6e7689b5da14250bc237c55ed9854e6c67d2f80bc337e274fef92cfb2e06e35e72430817baa94ed23fefe58e64ff52

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          55916c9eaac4ac56b776d4bd3b9d2a8d

          SHA1

          a311d789d38fcbf127b22f9a036da2741997da73

          SHA256

          bc49f5ee4425d304238c479543558738822617eea67135a9a3865b4cc89ff9e7

          SHA512

          e07fb72d482abc04b97ce57fee0fc963d90437e30e2982baeb2404fcd43c6c944636765555084e43660d10b6d459ad24153d4f2e8bace3e98d06f24c629db16c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          85a0b3fc9e486490a193a1c2a93e7e6e

          SHA1

          44b4eb0c704bd97ea5af7b187974a9a5d91ea81a

          SHA256

          9252c9c0398c85e708ee6d92cf107a99986614701d5f743dad8078fe972ae2db

          SHA512

          ae55c8840f7dd5ec7892a923a31b8faec8f247419fb78141b397aebaa0d4423695612367cc5e1944e5b4c3addd21f81db72c70d9cda581123c23f2f83236a81f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          970ae9ef3742f23e5f099d323ed873c4

          SHA1

          296f7fb2da6e53e6a62240694340c0eee7ee6b3e

          SHA256

          2cfedc3cf171db24faab1a22dade0a05dbf5540b9c8e58040ce117c01d1d2c87

          SHA512

          5d374ced1b1bc6b4797cb851d4179be5bf4f0f47dd238194f41553e3fa87bd043354741800cd6f6e2c0cc096724ceb561840e6f370c3dec1371f0c6b01371d62

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a264c0b3393a04d0f2121b3c18edfdb1

          SHA1

          1532523402f382017e18fbfb1b2eba9a66d42df8

          SHA256

          38b056d39bbcbf2e14a6b0e61a98b68a1add1dbce56b4c37f51f749bc83877e5

          SHA512

          848f73dbac326f2dacef474f4947ef71ed74d4908c6aa8635924b233c2cc757029f657e9d123f5d107c08091f541ec1c637fb5547fd36e2cc04057235dbabcbf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          59e0257fe047dbebae3e4dc83d958168

          SHA1

          a73c31da28e8ebc9c1d872a4a2971deb1c1ab896

          SHA256

          7fcfff3068866767a379d0b4f62e17cd8c1320cedc14d2cb193b7e0ec3d557bd

          SHA512

          c4cfeaaced658a6a3af06d958a2b0fee2ec2fbc1d3c2ccce6cf37cade8f6d78645fdce9d3ce936911531ec76ef252155fb63a2070e9a94ce50b239cebefa2c5c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          21ad6139f951f93ea1a93c4a7f297da9

          SHA1

          d01d36a46a6d082e567d3ca6c4851cde48b5ccd3

          SHA256

          9a0bd02d66d9763e24f792803cbf1c18254d8906219e3fb3d9238a66f5d0e598

          SHA512

          d07fe3da0c8ac8970b62a7e945e303e62535a1541fa50b33bf68f1ec8711ad8f13d09eb9a71bc5d16ac32e2eef7c28bdc0ff71318aef06f2ec52e920dd3ddf4f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          63c4ac6f4d52ff6888ecca3377a66bce

          SHA1

          b805d8b7cc755fc8cacea789686db460fe53155b

          SHA256

          7291fc945573311214d8cea5b1971f564965cc5b49c8e86a85a4375a952009b8

          SHA512

          208a773eaef0e347a5e0ae2a5a88d0d0ca20274967ae5f8af2c2c0006aae3efc25486e1109d230442321e00840cf4298ff0c07ac46e52df30a0d42cc2052cc62

        • C:\Users\Admin\AppData\Local\Temp\CabF45E.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarF51C.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06