Analysis

  • max time kernel
    120s
  • max time network
    182s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 18:40

General

  • Target

    00bf943ad1846448e83164c81e490174.html

  • Size

    3.0MB

  • MD5

    00bf943ad1846448e83164c81e490174

  • SHA1

    cd466c8775a40ef62166902f41496bfcf702bc33

  • SHA256

    645774a3415222b8066eab26047014d0ec592240befac617147b21f741914762

  • SHA512

    9e80dad89b49ba1f6dbb1a38f7bf101a824b2a39b2ccd9a9ca60a2b33717ff95d44d01de2eb81a7907d1d594c3310a4dc05b5bec2801258b7fcd3980aec979bb

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nat:jvpjte4tT6wt

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\00bf943ad1846448e83164c81e490174.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2468
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2468 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2604

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8770bb8440ffd2d4f0442df21948a306

    SHA1

    833ec5ba95fae34799375a3dccf7fcc5ba3fc95b

    SHA256

    209ccac0fda3a50527ab1fcc44f38e8d70420623fff09e74c07b4d48dd5b33fc

    SHA512

    abdfd61e1081e835b892fefa5c29abc271b7e52d747189e8ddac6737b155b4ac0665ba60adba10158a331124715fa5cdba8e499190500c7e9446ef835661553a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a9017e8af3c105547ca893bdd6e9679

    SHA1

    c2e887e021e560393aa11e5d8a745347ce441fe3

    SHA256

    826f25153e0472b80dc29d858a221b14571edc0593360498585ab4bb79051aec

    SHA512

    053b840a7c4b0138bc038dd796c8904d097f7e54f3805d5cc6410c49f8383422c129fbddbd8d6ea5eadc528b640a8225dac3bf9ab34199acd9054783e24c7631

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a46b69b25f8a367dec14f0fd34faf58

    SHA1

    0b74f5fc874b1b45739a959305c75c4624a6120c

    SHA256

    159dffa9842fe3e3b35355ff0b4b05e3f239cc12d27d01de957c59bbb7b84fc7

    SHA512

    a016adf70df5b142d013b7bf50d90c53288fb5c391564ff29dd716c6b0cebee98544f68517ec7449aee60cce52a3fbef110b26aff9a83eba03317dcd9a365542

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09e433b9d5b1808491552430df2394ae

    SHA1

    ec89e08cb2e182142e236a758267a4e83df253f8

    SHA256

    54b1cf790ee874427e2de3fa4e7a69191ced34db9cc3b100c349de79545f961d

    SHA512

    0710b49b66d2bb0463f48ee3f091072e9a8d577ec6d777a8f44a5fcf5f763110dd5446f902a893d30ca8ebaaa15bbbf347ffb77b24e16dac3cb76d6d0df29825

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e63687f93933df59770e572c7ff52b5

    SHA1

    3b36bb3f1c599c7dea9a453a50612c126c7a9dd2

    SHA256

    39680778b3005da7293cb7dfcfabedf9f9552a4126247d100b9f0a25560afe66

    SHA512

    6075d613ce7fd0af4801aab1e1aed8ee26944184c902886fc51ef3efe90ecab5bb89526760c5786213535af31eb66cf8a44aafecdd8ad6cbb3ca29aa56cbab4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de70394b63953019be9ae00e1c4e336c

    SHA1

    452816d098711fc05fcb1460600cf5bd300193c5

    SHA256

    265d513f19e93ac193a3644a3a6240490ee617e863d3f7bb27d9e33258a55492

    SHA512

    95eaa916ea248cf43765652a34e341d6f306c31feb90e5a1a8a04b8c4fb5c66adeed79fbcafc931af871aa2cd04f2cbaa42c744a2b7cdd6c2c10c3a9544dfe44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8785aa72407c3c35f966a39fddc5a9eb

    SHA1

    63ebd4d8cefd1978d7e9a09465382b86ce0336e5

    SHA256

    fa8dd7228749ca3a350ecf163a7d69a05026fe0b99317f93110240cef1feecdc

    SHA512

    0501b837f86fcff4a0a5177c6b1196053b596a18d4e33eafc6ef9282efe251513ca18ba73cc2c188672b8c862787487c47d2e8108818b81d076a2e96d89d4872

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7830472057cc4fa9a1c632c206f29e6a

    SHA1

    fe8fbd2fef1bb6d4500e9764208f202691c2b9a8

    SHA256

    87d6c0d76b94c22ee7bc3ea5353420aa560821ff9aff8f0ad8df00d1f6e3f5be

    SHA512

    1923722e06d423d4606bc5fc102c308569df8f08634272cf32c4178bd88431f5355ac88688ce14f8511d3ce0044986a35d0daef08c05f4f1c0a0c78f64fb29a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    658c9464199cacd6bbad3a0609b2cad0

    SHA1

    2b95896170c7742c38dc8066135110cd0dee5c9a

    SHA256

    42d636aa3f9fd27db71ae39ffd33637932e1aa520bdf7f8f25d7919b5df0d35f

    SHA512

    c46207edc5801db66bcecf9fa1a429c3053deff2621d83c1b1f717b51aaace801b4f61781e55819706dd7c61a25369d14f092caa0dc74aeffda0d021c3cb2e89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    674e28173f3a5241e0fc75f744a75ea0

    SHA1

    31375e21d2856ff4437987a4e4291b5971dfc363

    SHA256

    9000978fef8bf20b55cfcff005334b92d745e69d5091a93a1fff37b96c508050

    SHA512

    cb8fed72789614aea8e1179b04babf640d6287a7e8f24ebee062a1605baef66b4383e80f9fcca1d410ee98272552664e269b0efd7fa4d1f620e92c3f0190ee40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b13bb11434e12857000d0643b4257125

    SHA1

    0b51f8baafbac39867a2e04853d84e2b6cc6c6a3

    SHA256

    67b94c73112226c89b50f96dc17634b24cf0cbcfcf7aca55ee0c798119531129

    SHA512

    01724179435e29fcf252d109fc1da28d49eb9907252313a86833b6d9635fe7be27ac79a474e9f07e1c8ea7c8b7ff01621968a981799f6ac96a6a2b66eafabadf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ace75edaaf6780ad39069e638c2f1c7e

    SHA1

    6ed309e07fa45b44164edbc24caaee7c2bf32383

    SHA256

    278a2168699fefbfd1cb203f8a1e818cfdb2120ae3693794057a1ae106149dbe

    SHA512

    da3c212884d65845084575e01195eecc6c17a4c5273c098eafe6962955753f5511801921cb1e8a7b4649dacdd27b109a9e6b3e09bb8b8c56963bc1193d360c2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a67f37d4b99db2aa249ffe68312d49ff

    SHA1

    8278488a9282b37085b0a3971afa182190d8404d

    SHA256

    b767178fccb92b76ab746953eac281adf2e90131c99b6c63a3e3f7d95f1e0cd6

    SHA512

    5f3d9baef5631e10d09213ceb87856405cc68ec6e1274494ab0268c08cda1e1841a16570e06f2f4551f1bf8ab84a2f405aa8bff77f3bfe7386f9ac5820a4ec36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb542300e6d75ae973537a3b97b77446

    SHA1

    8eea3135c399bf42ed6475c7ca68634fd3737435

    SHA256

    ffc8dbc1971975be94977942bb28f200dae50f19c4cc6d62a9363daa9a493815

    SHA512

    f478b214e67ba4437fdb9fc715d06c5b4cf273bf83cea953449e913848bafe570a945496ba4ae3cd622141f4c183dc6721c368588873b79db027b1feada25a58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d2834c70a940853b5003331c11ab7f3

    SHA1

    2f305f439674200201c73ee5d539629768a161a7

    SHA256

    7c933cefbabe9cbad6b0cdf0488448791243d31b059980c703702796a41aa5f8

    SHA512

    4723dea0e4d4df68aa2cc7ec6f2db895e89fd81566d0c73028f2b870fad59f9ff4eee3c536f9084178b94b386098325b4f3f3aa625f31d4b622539170df708c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06b5ef088dda7c548ddbbb28c75ca4e9

    SHA1

    71d4df7b92cba140446933abc2beea4f5f2a2eaf

    SHA256

    7a6f3296a1c7dd7f827e0699bd73ff19f9c5e214b33c6f4604420df30e3a6064

    SHA512

    00f5a7a176c7d2f9bf2d6bf065870c3c1be7508a03339ec42a8caaa2ea2bf9c6d3fd225c293881d57b474a9448bad9fa75b38dc2ab589544bbc2da47f5f85020

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee1ce22e9c7db5e2752fb9b6332d9c7b

    SHA1

    d32a2611edc1275995f8d18df51718853a433c57

    SHA256

    3e328a59b63718306dfaaabecaca87d97961947d3f97737c2760018917cdf1f3

    SHA512

    4ec9e3c79b4f4d866daac626d280ca6f8fb3c227e5be2af56d648b8cf933de9f1989455d760e8376ab81567e1ac9a37c8e8024e5e78720a1c60a71df4171c943

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23e48c1ebab5904d6514b8a35d394380

    SHA1

    f937ba59a40d22b92530ea5cb2df82b842f4313b

    SHA256

    64d3fd4653a622c88ce133bfce71c1d471bf59fe275f27820e5a61f688682557

    SHA512

    1f4ba93f9901d85f0671df67b3e83158e0664787b2ef0cede764ce1e32adc557bf91fc357fdca254d1ed9563b35a7e3162d4616135f9ab1cb41aec22a1d5d2d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5dc37e2fe70d7ca336f8aeecc94a828a

    SHA1

    1960419b273ed1ae3f8418767f4eb4746ca4696b

    SHA256

    18382c276a3b243caf94c798e0d8a94249022f8828dda399853e980484021541

    SHA512

    0df55cde9de883b274226e55f0b92b8c078aa75c0b92c5e0eaa05ff87a13b2b8b2943bbb3183e2419f5d0420f41c0f6a4be7c9bf19f05dc3032fac6f9a852323

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R90HQQX\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E25VF8N4\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\CabFB80.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarFC7D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06