Analysis

  • max time kernel
    161s
  • max time network
    169s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 19:26

General

  • Target

    01ade590a69832687b4b1124026ae9b3.html

  • Size

    22KB

  • MD5

    01ade590a69832687b4b1124026ae9b3

  • SHA1

    bfb21001ea735bc67065b8d8f2bc9d24bd1ae583

  • SHA256

    c61eaf1b5ab19499a851d34dbd0a3317ed1423395a1489275b5690b6b2114c11

  • SHA512

    da7afa7cdd4184e272aae26e7a7d8369f37ba85bf96fb67766b6ccf6bc518ba421ff639a5c2c3bc16108c560f6ffc407cab6780afb0f9373594980a6d53d758e

  • SSDEEP

    192:iatweGuECfhL5FyTs6Ypkau6G6papUaXpqlsdr000hp8aepdr000UpS08000sTaT:NhL5FGYTDpafwCeanXRQKPvwU

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\01ade590a69832687b4b1124026ae9b3.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2232 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2676

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2da42999cb778137050f412874ab6141

    SHA1

    b1e1b78e40a177a1f95b4b84123e94227deaf99a

    SHA256

    1caab39c6c0ce5b86c76903a988b0eb70302b98a9405173becc011854f1bd151

    SHA512

    d30e676f0b2de9e1b57fa99dc952dfe58fae785f7bbfbc81556a7e682d0e10d27e73f4c8f2ebac224fc19ff6cd47fb17607223a3b23115bb869e9485ca234574

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89cb440fcae244dedf13f7ceb0b83503

    SHA1

    5d3479b2d561ba26e41de06070f22e053a0e0747

    SHA256

    dd8c8367b68174ff4f80e898b1591790f7ac46d542f994e7fa791c85c77b6bb6

    SHA512

    6898328a097f061d8ad2a4397a20addf2270eccf756f2e1a0298de2f19fdf81cbf34db54aad42bd8fc989f3291b13ba9d50912530c0f20c4ea251a274f62b95b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31120a1a30e3c632ee2018366608bdc3

    SHA1

    eb0b6a38f1011b872c0216e21dae91f0e5db9d61

    SHA256

    4b4dc78d9f558a9b68e042a7d3aab5d45a4b4d51ae7210425c7f78489899afaa

    SHA512

    05d41eca7445d1b2d119a9f939bcb1a69345c5e50e42b611bdedde02a2fe7c5d7f6c2f2693ee97403e562495dbd46d2e1f7e597376f80e5ee0d9573ef44a9e3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4738f78c0429d5261fa46871eac56ea

    SHA1

    786efee82e31d8a63a6b9be98b1c58816b388fc0

    SHA256

    5daf60de16e15beb56dbd01e0c5005bb177ee93d02ef4abb5bb6ed08fce4bd0d

    SHA512

    8c26316dc9cadee325511fb31f71a137945739d2854c764a24120ce281ae799547142220e0477995611e049499384cec3fd0fdff54633a0d09e0bae3da372aa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14eedea4af63bd1e43c6e507bae15d95

    SHA1

    296987b9148f87a544a9bba1f268640ee72925b0

    SHA256

    fb1de8bf7a0988a87754cfa350da8cff9b14b290fd2676a2d774e138c1d30b05

    SHA512

    924b5e9bd0a230b878742b1b38115d6eda6d2cf09c0878a0adb38bb216f731249afe9ddcce2c0f84dc7b42d3f431be290741beb72acb32bf5de3bd619ba4ff36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3074fc6e3cde514982f26112a7f53083

    SHA1

    f56f7459d2d11f00a0cce51c8612545722950f9e

    SHA256

    7232d140e89b69c4b976c2efc4211fd89c94200022e16e5db0fc710d7b37611b

    SHA512

    8998bd57be9fd99fe48da6071004f0eb8f392f04057af6609d2ec7644b87acce6d85ee06ec84a78b47743216e4f76e144b832f85e148892b0302cd0dd9e9fd16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c17dd311796e2460c8c45f33f75f6a26

    SHA1

    8e15bcda150af6efb618c96280b8278c53a84881

    SHA256

    57f1317ad4e0298c3173052b4554f5a628c080d53d04872a44bca7d6a7e02e8a

    SHA512

    bcc880ae0336de6d401f9cbc41566b6387c8f4cb1b6a0f247ed73f19c343455858956f8df950b0d8521afbb2bed68fcc6e3c74eea65b45b339a3b38c87bf3068

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1f1660dd09814916ce2292dbceded6a

    SHA1

    9edac95a31688956b1288e772fb9175589549b4a

    SHA256

    c530fcfe845a9dd33833c503e50256165bd6eb3429473649e101ff8a532124bc

    SHA512

    f034f7d22dbe080dc9df0f8552e84ecd5b631b566b4f4bcf30e13ebb7222b814dda3168fb95feaef618f4f68fdf1c2ab5826c1b3b850304a598071bcbba27edb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb50db754aa571ff5ef558086e322de2

    SHA1

    803a5519dfdf83e9e733ac5444f362ea63a8152b

    SHA256

    d1f92836f473f9662618a9fa55a3cdc6f70f814f6c958e65a8f7cffbcc53a6ca

    SHA512

    d3429056916b4ab875a380fec120005fb2ca4d3e78d49ae05fefc2c0215025393965136af84d243711b9145602a0d9ae24eabf10294bf506084c3f69106af786

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f45b8a78addc120d59d13ebc45a78d3

    SHA1

    e4917904d4382333eecead638ce955deb7e9a0fb

    SHA256

    73b8787491eb75caae5b087687aa5c8fe96665d3c2f62349f8c804c27941b48f

    SHA512

    ae945c193cd84eae8fb28c23ee21730dd30eb4390d9fa48823155daff02fe7db930dab85f4934bb7720463e18ef3a5607b72785293e9746d2f54d2c500990f3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50770d9f575069a56dd7529b3c49f229

    SHA1

    0d41f4f50f1950b72a61c369cdbbeb3a5bec6082

    SHA256

    2768a45c323e9346cce03a3397b0f7cafeb62584d178c6af8fb876d176f2dac6

    SHA512

    a280cb0360374a5f29a5bf62b295feba449fcdd85aed636fc2d8a39df5edce21017508e9f55d2aa72716750482768fdc9cb6789d4e882944dc56247a882e8c4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e4cace38bae10031071dc2cdfe337a6

    SHA1

    3d7913dd8d1a595de55d984845ba805340f2a1c2

    SHA256

    5e83bb459af982be68d314bd7a3e6bbf7332436915a095527d10f36ad81f5c7f

    SHA512

    2df78cb4a918449b591aea12c785d25a4e2ac79dd6e4896a8fcd48d3766ab284487bcc3c1e5ebdcfdc1343f5a674e160d184b99f470ae42ae41b09536ec95590

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f46d054cacfe690f690b2c5f8438c93

    SHA1

    8311b25f4c3424eb17d494885407c5c0f110f561

    SHA256

    0975da256efdefee4ff80d8819b0c7576948e10cc8d3dfbd1fb967fb5adfefca

    SHA512

    cea8c41aa320c3ec2dfbbdcd121c3a0ad2106233d95707237d5f1a43338420cdef226e8898f66663389e61ab11852e082173d76f09f7f3eee3c250ace0acf2d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fba040381de8a634b89d94a0d7c721d

    SHA1

    07264f02e2da7bcaf64496757e299af2343945a7

    SHA256

    beb706d3cd076424c0bb51544f4fb87f5c6eb770e55ec9919078707a544fcf6a

    SHA512

    9e9d30e3bf8848a576b23c1243e701327e4734b63fbee0ddaa6a3b50f72fc0bf55fdd81792184581ef21b17ce7b165ded747a2e082b79b04c0f44a722d00a801

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba2f20adbbb2a12d15b2ff5c78c66244

    SHA1

    12ac3ba7cf35e91b1f736f7d57724564e95a9b4e

    SHA256

    1c983646983a279429d39bf8a92decd5d771bff9547cd747ce8d1b12eccc486c

    SHA512

    643ae9c35cb0d10ff3dc50b03ea09969317252069ae7d093c9589716a6fbe6fc341c97bd92bed496d38e42759a017567f1f86df0a38f4d67cdf8a91ab50d7d2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3f363745835b814b599964e9d7b0814

    SHA1

    3be5f2aceea50cee57c9478caf47db4d9f0e3f5d

    SHA256

    18683caba5bf78484cbc7b91c90fc359fc4e2274af1ab2fcd137a608ab86a4a0

    SHA512

    1055172ade8824eae6493ee0a29dbc8639e8faf807aa58f11b051c9299b525fe637743d1dd2c39b29e84bb4884d1ec47ed5187ae00f915877cbcb3f4a52ec206

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84e97c652d832595baf83b161387ab36

    SHA1

    1a44a1e01e2d261e12f9aed287e4ad69c941a2d6

    SHA256

    b00f286b50ad7ab956a0f4eedf9c2237a76d46db50428f2f6ae664f3c97a8d35

    SHA512

    44eb7ceb294f64e845f9a655bc9be65c6480b981fa2100e2eef6b77d11d67bb77294e97d31730d272611fdc73006dcec96ee646dc924f4a8565d3d8ebe5dd941

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02f0830bc31da4ace7f8f8b596653cea

    SHA1

    396b226f593cb037e4a4c289293782a08598e423

    SHA256

    e7b0362883a5ac836b29e40f49629a95403a1ac77066a79bdc9b61e0633cab48

    SHA512

    b459cd8372d0d3ef3d4100b31bed0fcb5290ec8cf0f1e5ce11fa3cd4d605779ec960c083de93095a41ba028979eb2af7a5825f9dd292b08583ed08798feb5aac

  • C:\Users\Admin\AppData\Local\Temp\CabD7EB.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarD85B.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06