Analysis

  • max time kernel
    138s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 19:03

General

  • Target

    012c56259b20a98e72f1edc9325a8322.html

  • Size

    2KB

  • MD5

    012c56259b20a98e72f1edc9325a8322

  • SHA1

    27b0df34639a2178231089584afd69a2febf08a4

  • SHA256

    0566fc7bc64c1fbe740eb96f913e269851fe557e7191100b93a98d950924f15c

  • SHA512

    0548c1c40759cadaf39b4d1c222b0b5ec09ffce6a805ce8c4797a1309c03e06215278b028979be056dbd6187fdca7ba62f8eb63a6003874a52c19b5f11595b53

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\012c56259b20a98e72f1edc9325a8322.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2124
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2124 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    715e30d82985e0f7b4fdb88390280b74

    SHA1

    fb047e8120d1b9bc60fd6e46c33b095faa1865cd

    SHA256

    8b15b52a415da272a386c6356e98061444b113e86c7f252452588eaffb223965

    SHA512

    57a4e728b1e3c9137d312919bd7face11e24e42f0d55d6b041373b426c7f013b2ea0e87730fe2001ea02937da3d4176f3ab8491405c9d2b8558df731bee15858

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c562630d18fcac89b3a7cd656ffc8fdc

    SHA1

    bcafc6722c4097a7b14bbd41ba2953beb9495d40

    SHA256

    c94792f469933b2930e461c136822ba433db050562d46ca2fcf0b581e1d46fa0

    SHA512

    70869df7001221b2e0c432edf8d6e53c13d05c41ab5e02787477f238c79a30f840c55f141c1a979705543611b8ab9e47084490f49e0352c32a2474c857f7150f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce9c6f42529e1bd387b74533efc7ace8

    SHA1

    39efd3e72256842ed81e78db05b95810ab10a3c6

    SHA256

    39b11f0207f8af0163b87fa6631f79c7b6fb3c5f8abc6604c2c30efc68a273e9

    SHA512

    a3a910571427707e1892adaa72b6064b03cd95602b66a2239484bf2d307b671bfd84c3c67d8188a30642d2c1a7fbdd6da55b8823e230c7deb3662e245dc408be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dda6885fc21d63e110d738b793ad4bd9

    SHA1

    e579425a11cfd2de604c8cce9eb723acaacebcca

    SHA256

    d187fffc65f873b747737417e8a1000d2667a2169c3e15c33515409e8c882db4

    SHA512

    985c2ef9c5c6fd3d3bcfe09a8c08a86402ffbcab4cdad4a296dafd7594c8c650c863cbf88620613533de563c6245a483e88880d9bedca4cacd6b10a67f991550

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aca7c16ce59d35bc11c5da33fa97cbdc

    SHA1

    9e9d5885a3c8dc78ea252a296dccc4c40cf4b117

    SHA256

    32e54f1091f5af9843d1418b8f8314121d0e652dbf934d420c78206504752a8e

    SHA512

    483afd5b8affc28e7c1cb7a3c90dc7ee7c3a6ad516460789e4b18200fa9e165ad4e8c3fcdea781d742b082a5f2f13b8cc35d55e38a8db2df03779704a07ee7a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38d254d963cebd32e3db543e3833b07a

    SHA1

    51b992443892b10015b90fd9b5b498fef07829ca

    SHA256

    c80ba2b659659e5a185513335e97ee4ff52419cc992603d340e77afa8c069cf3

    SHA512

    5e60e7aebbfe07658dceb31ebfa2d65315ff87ef8ec348291859cc7adb64aada5fb19b30b94e941d8166aace3917d0bd99348b53ce11253106782d4e1522c563

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab6c001a8f5e3b6c0a881f0203d83ba2

    SHA1

    ccde83432ec4946ec68506b82ee4e7141883e762

    SHA256

    d7d4318f52cd43695ab6faec89716ef9041012e3aef3bc79c820f61f5e3f15a8

    SHA512

    07e5049d495242e694f99f9050a691aabf56658e5f2fea87dace96ea380d1cfe2425c0d78ca9bac4bf1b967790a28cf19d0b46415c90a1ac570dccbb51dbe59d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb3950cd9d261d13d1f1bdb2357aa906

    SHA1

    1df67a75bc895a2611858613e668b808cdf3fd14

    SHA256

    2bc26cb0abdb676a1eef60d000b369cd7d612ae051aad3b823d17d6b20818e5e

    SHA512

    a728cddb21ccbbb8232f78a3d336c256a9e55e0af006686090e8685b51e0c9a68773274dcb59fdbea08ae58203451a19d021f61ce331381709eb8d121f562c0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f2da29d3fb1a7e5b2f4fa7134a58ebd

    SHA1

    dbc99912fd5addf2c38f6a3bfd486336827755c8

    SHA256

    a043cbe641698afddc600d87bf7d09fe3a532347cd0a76887002d8754185de35

    SHA512

    a0bceaa449f491a0e4c62d1dd70dfc4528ac30bc83eda7871664204bff326cde28fb84445f9be5674383203f07d0aec13d93e0188dfd80958a18e6ed8afaa846

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dcb625811b0f8a8afe52915fb2df8dd

    SHA1

    336d5dd48454e00ca08418c4db4f4d370799a320

    SHA256

    22f7c2d1a7f9c3791402d26ee2e868fcbdb016442fe22204883de3e665aa7246

    SHA512

    6ed26fa789eef6a7a88bf3e23e38a1c61b2e388ae48bdae943791869c2a10407779770014b56250b3e2fb2789e6ca066ca1232c7252ea250d91957ef4af554ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd2ab74083f275fc901bae2b56e19236

    SHA1

    907694d3537813bc254c52372bb380a50c6ac058

    SHA256

    d21a4965b5869a594f35547d6cb0d987043f5f8b69e9a7c9742a6c7ae8357c8c

    SHA512

    c6f549d3ae945b6a1aacc9a4a5bb805b547c85b986a3e56c7b84aabcf9f1e6f32855a5fc47fe979b1d442c6c7ae5c241be047f4c3bb5bdad5fdcaef38476f54f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f46b0e8c1bb66df47864717a6fda6e85

    SHA1

    55d6961c1da98f08b00758f15e5e5cef8395a156

    SHA256

    7731ae9c79195229d324ba9a48ce2638aa59242e10586096d446f198fa624bbb

    SHA512

    2730632534a1099e577a3a702ab8eaa7593a517305782829064e1803048baeea8e95db591dc0b4649f6e366e3a77fcb35643f1585622c710b57746a76aa8ebf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1e0c19241afb8d44284ba9c8b708f36

    SHA1

    a652f8a0de37a968cdcfd8fa84fe9fff79803e2c

    SHA256

    162afb6bf75379a831f6d88b454f6b16e7c628f5abc5e6383043c22b066405f8

    SHA512

    d8302b3b98363136951c95a5aa9986fcfb67f44cbd69f16f3c012d9329ce6b086cd3f5a31d79d35182160f9986c77ef91ea67b3cd3fdf9fa5554bb75c058ca01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27618ec24744813509fd0720efb2812f

    SHA1

    7f9c4f9a896f0d874d9247b580f669b193aa4e8d

    SHA256

    7c170ed0e39bd0cdd2c92bad8b1c4867f31b3cf079bd3034e8a4edca7edd8e04

    SHA512

    4a4dbc4fe1aa1fe5c93e2abba160d8a8d3ff394d6a1a6a5c52d8331035ba52f05a1864cad69a0babe97ebe2c2e7174a06895ec752d3e90dac4eecf2fa26aafa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c45d18d08170ee6322aeea7d3f84912d

    SHA1

    f4578cde4531c6c09d598bfb880bf3e21aa7eb86

    SHA256

    6975f13b3cdc94507007e45a3dd05d14bb1ecdd5cef456cdb033d73db00eb327

    SHA512

    1d674bd3ec88c69742a92fa553bf93fe59144fe55143055ffbd3e939304ae176237abebc231857a445496b81bc0ca0f89e82181e65fb37cf81368c592d825726

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15e7f518c28efbbc803054737de5d240

    SHA1

    cc26a0e14a152435c5a82835e0dc58cf131258c9

    SHA256

    60fa919da489dd29baebbf2ab4d337526e4b83b1ce63c0ae29b9f03cff0cc164

    SHA512

    2b3a85b5287c2e8a2565ea6a0ad7b01a532d38fd21c8881f08e5e707c84b4a92384de422908c22acaaefbd6ef2926aad826a0f9d058303debc52007b1766b601

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4626ad4dd1b82709ea02f96edef69f56

    SHA1

    ec2fee8e2b5a6a4fae0b8b52902372b0d3d59af9

    SHA256

    d4cb57148477605a679d39cda8a16b077f0fa6e908e254dbce9fcc61688d1581

    SHA512

    ee6cfb2e81fe9016c703f5a23874ebac7351c01ee3d02df19c074a8312c4197ccf9d4245d60a62b1286903ed3c05d3df60d7afab4a34efab36c281d916091531

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a987a3512425dfdad03769a5a460713a

    SHA1

    d7ff2b3f5137e7e4a4516fa567e4e0ec17be2c59

    SHA256

    9d444e378eb03c29b8bc2d048c9cca8f8a004cfc139001ce0e6151aeaa303922

    SHA512

    335a00b137159d3d49cd40fb3d32c5a177f57a49d877ed14a33331fe9c7b1402a8c438883793d569dc007095629e7dbeff91614f0f35e35d0eff67044044ca2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8a493ba286707ea86e1c72f8048447e

    SHA1

    c5f7cd8fbbbc86567a17bf9a895419acf8aaf2f7

    SHA256

    9198d9d2100e9bc989f8b127ec431eee8aa1cbc16fec605a9bc5c2f3781a4302

    SHA512

    7f997252cdd9d98656bb2ed9576b73f3e584cac4ccf7d04549cfb7615ed3f85c6ee09cf5bd92e5b04efb735fac28825226d6417df6aba7c534eb60983cb0d7b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cb8ccfb4e2e8353b589d494eb181669

    SHA1

    09df36e0db5ab647043e295c264ca732ca46ea8d

    SHA256

    ae3da044fe49cada4de6a62fbf19ec82d3296d41906548034ad2b6db8efc22bb

    SHA512

    5117e9505cac17e3db4aba37f07d817f8482b118225eeb7fe3a155917a6f5ce8c1acb739074c12fb9c4c77af1c192dd079dd3ade58f3cc2b09928afafae6296c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ffc24e66ce48870170429eff4e5c52d

    SHA1

    01ad2735fb71d12b7d780d54ef2f25b772d80805

    SHA256

    af1da898685c44d3183b1fe778fe686a36e0e033274fd7146de0492d84baa5c8

    SHA512

    be161957e66877611a24522a6b910b13d3f4de1832599fea170c59b904c40081e4584fc0d33b6ce3c09dc7ca2819213f5383ba37d98f80727e6fe9204b3d984f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce3ad119cecf9b9529ccf4035f464439

    SHA1

    bcc435a9cd06967e407e06d6bf4271628f27e8d9

    SHA256

    7fc106195341b705b039a8c257dedad10ffd9034ff0b432502a19fe0bcbd072c

    SHA512

    9c4233b50535e2c9fbb40ef34d49c61d2f150be345949c1b4f626e470ebbec6942259e2590276401f3dccf543e60dacfaa4f1ef47b36966ef0016cf1607fbdd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45c336f0db79e9777247324aeb731933

    SHA1

    d1d5b08930dfe979476bc02c8f4637d2e1f0359e

    SHA256

    951847508b493fa5f4b91bd795c77f14a0c0813d1b092b62c15bd3156e29ee6c

    SHA512

    12c7b8b8c6970972c577f510de094e12ef5df924dd16c9ea87f35e12ea8f08471e297fe4f2540e4237bdb6977097699021be16a420ee1a6c09ff0da637e49547

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4b0457b8722fcc71d9b82cd2dfa8116

    SHA1

    d436f36877279e0b8defa611a015349a747e083a

    SHA256

    5f164cb35427df176a7863823ff3b8f20b0edd3a9e811df26e2a1b6f26b6d5d0

    SHA512

    a02e6f21cfa9ea37ea1eec107cbe56afe513e353215ef8dcbeb00e99cf8db0d70ea7dfa8aaf080ac92a3a9b186fa3921e3935738ea6d52f4950398ff5b5f6bb1

  • C:\Users\Admin\AppData\Local\Temp\Cab6452.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6899.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06