Analysis

  • max time kernel
    120s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 20:25

General

  • Target

    030cbcb8deea5329c296e250411a3cc9.html

  • Size

    93KB

  • MD5

    030cbcb8deea5329c296e250411a3cc9

  • SHA1

    5a758aacce831291019738394d2fdc021c6061eb

  • SHA256

    dc743ce4923c6ecc6afb746c58a34a88ca2b20736e8a9acd6f670dc4edae9653

  • SHA512

    c741c30e88aed7dd22a785a604b5da8805a00e43121ada48b2283ab14cd2ba988fc0489cf518433351bac8b4f5e7b07e3a78e8fa503d614f514bd2d5612c5492

  • SSDEEP

    1536:7sEKpfNJjhloYycMH2zI0RRYgPlhxmRhC7WMZdKJjJhGvFSwVaqJiQvpKyAKiije:T9hH2zISRYgPlrmRhCWO6qJiQvpKv91N

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\030cbcb8deea5329c296e250411a3cc9.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2852
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2852 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2716

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c7d22b41131d1ac0f720a0214f363200

          SHA1

          3048442485fd7c980ea86b627a9a1378d5847a25

          SHA256

          2396f51f6bab899980928710f5eb642f8358c9b9cdc94902b8e4da139caf5988

          SHA512

          2a07116dde0d56eab14029a4b4a7418e040a27dfb55cd22a2844e291809aa9cde67f229ade9938344fdd85b71f07c8d3204eb7d48f18c3699eed47f4297aa268

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c827c7d79f6b1278361f2dd7cc305ee1

          SHA1

          4b5177d82eea416b0b2dbbc0874a8b4f0e403254

          SHA256

          1cbd76f64938e31ac19805b7338e8b1b1ba11c482629d88b5327454987a5079e

          SHA512

          fdb5f24f883ad6a38d14556a932cc863a46800f2232ae3c8adca8e88f03560146c50467c638c5f412ef72df1d0866fca1f5d446e35dbf26c10678a41956d485d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5ff657e0a6ae1baa74ec9692f59ab1d2

          SHA1

          32907b03189b876bcac33b4dc2b56b1f66186dc8

          SHA256

          a3f2c54bf06abe3aca0d425c61935a41b16e0455f9f1eba51f4f98559a82849e

          SHA512

          bc3a06ebbe6f1e88cc86f1e3bef531336955f058f2e269530c984ab363a5dc2422bf2ad39f272726cdc6fe485756090a2ec3e2274226195520febefb8e8d7591

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c2ea3eaaedb727d3cfffe4810f1bb0f2

          SHA1

          e680e7df53fc0e50cdcab9d724a679422a78ffaf

          SHA256

          6690745d5519bce58fe11cee83be5f3dacf89b9fc8d8767cd252c2c4bc705d80

          SHA512

          e19141368ea83b455d6a7622297ea0a1c06b0e924c8fa2cb7eee874bd63dbf5d91b46b3b6e084975c8bcb1bfb3f38afbdf08d918b77df3b45fbca0200826ba28

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          81c1da43448a7b288625a8dc75e66d70

          SHA1

          87738bf5fe167860d1c3c8b21e5705c9315b9e31

          SHA256

          c99089143177ab82bdc353b2754a78b52cf64a420c476ba4f3ac270c3acafeab

          SHA512

          841f33df6fb7ce5522e61a923732c51b48a7dc352f66ef362df98521bf524b80c31058065cd7c49f5139a2e6544f1aaafc3f3652f0a8c4a3f07e3747556e535d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          76916a7d37e10451a20418eeb568a2af

          SHA1

          ba9fda4f5711ad3add74cbbe5780db10e9504044

          SHA256

          2c5523f4b7582e2158b52f0bc8c22c9b3e9930343d1427c92fd83318ea689c44

          SHA512

          86eeee20b50d6d523d0dfa5408ac40279fe751935b5ea062bee05936f448ebf5189c73ec775c2c7724a5b6d0c426877a39ef93f525cc764ecea24deba6b2c213

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          47510902b01c88a154fab98265b558e3

          SHA1

          18cece9cf7f73694a0f67de1937ab9338229efaa

          SHA256

          ad4ed843f59e8582e030df2adb78222a465212aa51f2a5d0f61cd3d276ccc9b7

          SHA512

          ce9b16543f1bf56b363019f3fb657099379fc71bc117eeb61ce56c3e0b3f03471197566f4be670fecf61705ad273938853ce79f2f1f34715e08bcda148b6c344

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ae1482a3c104daa3d887b9e5bfcc54ff

          SHA1

          efcc0002c7d90425ad45aa3876d4073d7a8293ae

          SHA256

          ac0d860b850ea768cf064ba18e0a652905c51a079adb10e0b2af87268c4fc6b5

          SHA512

          39c039a470d972274c46f7987f9e25cbb6f5f94e6addd965888c956341cea544dfc3375aec8f5f4f6eb03dee24c8e122c41b5b1687e9a22216d78c1a3e8eac0d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          12eb12987f82c11445a3b90ea1705dc6

          SHA1

          b4ce77b2d78b5e7a98073d460e0f12059d232564

          SHA256

          d7bbaf4e1879ea305ffdda754ee6026962b81a15aa0be60bc0e14b6e92903bbf

          SHA512

          4ec8d292f53794689c8a1569f733d82cb9735b5e26df43e668badb14eb2cfa5e3f626f55cc8313b46e42f9e28c8debcefc7a9cd4c40d686ad2d019b6d992b4ed

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          06e2e78b1c838fa724adc5ee798fc66e

          SHA1

          829fe345dee87a2bfe19ca89ecacc5429fc903a7

          SHA256

          2d8fb4d11102ad404031e6680d6525806fe76374fc29670ba406c91443f84708

          SHA512

          387efc470574cb3f708a0f6bc1328134fe2d6ddc1520c01cd7f7586f571e454cda7774fffc8241ef766d70bec63e98bb4eae643f9492083072b49c2269863e3d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          538e3e60aa6f4d704da0add01b40e10e

          SHA1

          312f4a29d5286d504e70cf48f2e75789f7b12232

          SHA256

          f0ca6c6c57253697b67f6a28992b366fc2203943caaf547d77cb294326215a44

          SHA512

          6465f89650f157a0fb036287e9cc85d22957d2204d9d57a9931ec58fd209e7052ade331d740e417dfbdcc28c183cc7e956d4f144c4c227580d0a2105cef9ace7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a9593ee3d7d420ecb9d3b327507b7f55

          SHA1

          1dee4f8d63392c7df604e96485889820f29fbc03

          SHA256

          6d9a2964701b83406d3724fbe612bace5e9d658a1ea83fe69d01de9ba5b37504

          SHA512

          0c36dee21dea0941efbae1afe6a946a9ea5cd58902e38ad73a1173d5282279d7433edc1ba245e6658b16698751192fac44687c90411017564d791d6982bd17d7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e28e7cfd07d6121aa768c23324d55ebf

          SHA1

          f571249e0eaf2da61c83d989387aec55b271b1cb

          SHA256

          bb1b43accf66063bef143e61039543766a4e4acf7b422eb34b74dad0d6cec8a6

          SHA512

          f2d97e2c100e10c28d6a94b8f517f73f049c5e27db814cc3409703839c058cc3347bb2798517c144e3f7d8a1fa782302d699948e6dd42952052abae41e617aea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3d85a3826a485d6983f65c7a8bdabf98

          SHA1

          c70df92ec01200a6fb74de76f85a52505c06ce3a

          SHA256

          754e8a73e0f3ed466463efbdc0001c3a9d4814ac8f18bf0919dc4ea3633a1f26

          SHA512

          b4fce025964d9e2857b1b8eb6935d9de7f4c1420c9489135f6e072f4c1dbc5352eb94f6c42f1802b1b6f2892add5ccd893591bcfbb6b2cd77448c2738ef7b727

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5de139480b89946268e4a35e098f362f

          SHA1

          95a8bf25bdd7ee0b6d0ffb1d5715eb70733c21df

          SHA256

          75dc2dbb584b07626bf970efef96c9673d98819a84d9285784e1ab18d95d13b2

          SHA512

          43056d8e0fd6a1faa794ae5f769a8d0699b78d0c4325ca59b3d225573454dfefbf14e5c76f47b5787832c5dae8070b4dc4861f84074309b7706936db13493e1d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1bcd8be0443bfc49aab013a2b23bccad

          SHA1

          4e619b94a6566d6d28f7a6586f7d9bbc579e2368

          SHA256

          cbca82356480dd5de90d96387b8fce3c9b62f8466fe2beebff6b0eac783e8667

          SHA512

          7bfc8475ee8c553336e6d652261b1a6c6cfab01893a353e46c6ae104078e41dac7049a4d5e0abdb9b66839f7ecd581fdde06ca017e014a8ac3f7b79a4bf45797

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6fc03645c2d0ab1237ed38c3882d5a3d

          SHA1

          8629b21cd35da9a5bbf2459448f12ffe956ba485

          SHA256

          b23c04f9f4a1a95b311128e38e4f2601f339a2dbb1bcd3b62f36c8b34c643ddf

          SHA512

          a464637a1e8d6354ff30aa4af69d17d46b68d842cd545fef96670db1466a977ffa2b8544555d45f4265538097463792a5869a5b6bbfd37748b1fd3edc93416c7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a0910def6fb42cf36e89f2cc53d2076b

          SHA1

          065a4c7be7844acc82c9ec58b026a157d33af7cf

          SHA256

          b57412eb21390bb496176164fcce6b5e311bc90755b1094ab118bc1772755404

          SHA512

          f0edcd4371e37ec6e496f5c354dc78c0f74e2ed4fc59fa1bed871aa14c54a7434e27df7e829d5a29b3f765b26b5a4273b2d6441ec81fce4b42176a4af76c5843

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9e6d9f2726278f98d65770c9c21f83fc

          SHA1

          f3692e1ba179b6b4e75dc2a2de49afa2c6c4b770

          SHA256

          1ee6d91ff0cf6f57efb917337228dcc68d9ba0c3177cb839f1562ec896463285

          SHA512

          504329cab4df5195eee1813038b6f598c7a42ce0150e1cc5324fc9a15e771844ca916713afa135dc3466c272bbfe9c853a4e1553ffdd699dd8a7be3ace03c1a7

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\53STNJLW\platform_gapi.iframes.style.common[1].js

          Filesize

          56KB

          MD5

          f6140cf2e81a9d5b9bc96970fe1946f6

          SHA1

          e18cb20a08d0c13d44b72e36e9560aec2187abce

          SHA256

          68cc8a99c8ed5cc0eb3aa2146fd34bee0051bfd98faa3c03b83c78b4a12a8bd5

          SHA512

          1f61bf7228ae9fc1b36249223f4ca0675da05beaa6c00b28b7fff500e0527ee237d139eaf6793ece67f8730dfff0207bf945a848795aab7c57301433449a8acb

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\cb=gapi[1].js

          Filesize

          133KB

          MD5

          288c5ba5b7001fe841c32f690f62cc93

          SHA1

          29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

          SHA256

          c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

          SHA512

          e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

        • C:\Users\Admin\AppData\Local\Temp\Cab7255.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar7361.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06