Analysis

  • max time kernel
    146s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 22:06

General

  • Target

    1df8ca3229e59ea0d866a1a8640db252.html

  • Size

    3.5MB

  • MD5

    1df8ca3229e59ea0d866a1a8640db252

  • SHA1

    b46d544ea027428b9ca505be0b46933a0d0eb2f1

  • SHA256

    0b214e056d9bf064b4c646109903376fb06e2b7cf00680c62be9b3dc90b61d9a

  • SHA512

    cf10662c630a08fc5822196d35dd2be81735a8eead9a664e21ac99714577f3dfa70133aef1c8620ca093a00a59430479f23d7a3ac892709b604860f9d8103d1e

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NyE:jvpjte4tT6sE

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1204 CREDAT:275457 /prefetch:2
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:2912
  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1df8ca3229e59ea0d866a1a8640db252.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1204

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07c003b5db5462f6d6bccbc93aea3e63

    SHA1

    7741575e80f60e4786d03e12ebe58bb4dba7b2ac

    SHA256

    126aa92a041ec41d03d01d2b1c7710b4040e86ef02f5b0e41f47503dc33e952a

    SHA512

    e1559cb453d4113a7691a01cb1177f896225820bcae50c3efd08cf9512ae0aa8169e6bfceda06df907dd6d4fc78df350e8c4a7e70b432cea59933cc6c5f41356

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0e3a582561233252b6930a9d50aeef8

    SHA1

    1203ca6ce00dc4fc1ed7ebeeb0406f7958ed6b58

    SHA256

    f94461085f03f108804eb9ad00f5d01bc422d05acb66f63b9f6d9af33ee8eb80

    SHA512

    9a2473f1a92d5f3efbec924abc046edb84fae947c0d4ca902d2669fa87a86f23fe712ee98fc8d298d96e79a719593cb18f3a0e1fcbe6bb0bc032bc4715fb04b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4d38d310a032bdc17f7b95943e42024

    SHA1

    c28939b7e9bd4ee7e8f28c6dde31f68e043f6d7a

    SHA256

    2a5de7d76138f9087d4f48433e082723250f417892148b526c58f00a11f079be

    SHA512

    64b7daaa9fdaa3fc7228ba36680e02a6f89f4417a2b0e33efd5316781361d4e893db36e029f961c1bfaeba1772839f0e3722688624b2cb7995d815d62de34b56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    568169aba08b2ef74c6981dca74660b4

    SHA1

    e44f3ed4605a508d4cb29e03524421870e1c895b

    SHA256

    aaffcc409d568a47fc6eadecf8e859424f871cf905d55084c81d3db8bafc954e

    SHA512

    0f7ca9890cd1e0387944bb228f89f419363222cd6b81ea0e6c5af8c7d8d2c771eb5cb8e351f21ba08108c2a406d16b3da1bc8835e3e8f2264fb1a4ec0a148646

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8611ca096df61b4aa0ebaff9b196a7e

    SHA1

    9dbd38b0ed6034ab8eef352329571f4fe7d019a2

    SHA256

    619a115a04aed4948f2f0b7cfed7b5672f6616789edd98f4267c2213d270bfae

    SHA512

    e129b8c4616908595922b5cac73c6bed1d469b3453679ff0f670947465d590e233b47f41d72f64be59a33724115a9d6b0639f82be823af5ed1dfbe9b7974c43f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2ede99bcbadb4d21694ffb25dfee737

    SHA1

    8c44aee5a17b7e8f267f9bc7ef2283da5467125a

    SHA256

    0da63abc710258ea302ce433b08c8e8353177257bbd7bf9fcd0cadaf1959b432

    SHA512

    95109928dde74ce9fa575e51567491195534a19b1e5fb1453189e2a3ba41f7745c13bed0134828c284528742e4b0e51bc2391435f9073b3b47aa1dcffa96bc03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5756ee19ab02a3218a33f73ad4017d46

    SHA1

    e7a91bb4dd6eb560f9060d360a3ea16ebefa243d

    SHA256

    92f23a230c6a88cdeb6221422346092e921b00279a6413ea4996cc2928192ee6

    SHA512

    21676ae7be07fe982a4d8913912792fbb22b490d840896ac456f0b55eec606d2ee165dbc01ece534cb2e487104696cf6be6670964749f19edd2785a12b3587b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d4eda026668ffaef2e3b6ba090c98e2

    SHA1

    2a570145d49fe38f435ca463e78c84d4e1ba6e8d

    SHA256

    c2098f73b4a8585a6d71782b9886da3913205fb994c154c90e14dd968b48c98d

    SHA512

    f3cad0ca293ac9b6c9e71971122a590867ebb6b5945226c62f6b43f6257e278c30a11c2e4f1a5dc79b9520d804a1b727f197e7109b4dca06374c19d57ad6850b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff9133c2c000b560b389d4a330bfcc2a

    SHA1

    ad823656b5d1034442b8b7bcfeb51f71d8e9f346

    SHA256

    17050d2b3e3baa47e006c858474301955cf091bbed5357e157e64435540b2ef3

    SHA512

    a4e51d75b0a0bb7df301cc5c8a6db3e1c63f177f8416300f7031d4fbac6312541923de163af7009913fb67566fcb5066b075b9593a144a56aafea4abc8968d9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ae615faa42cc1905c4aa1a34cc9ac1f

    SHA1

    0a2754833370775750b90acb97361befb140f1a4

    SHA256

    2e2143598d06292f49914f44c4334fbfe93c69665883c1c25e48c220cce1fe34

    SHA512

    11285d039339b8e085727198c53e4a9fd0d9b05d6abbb3bc96236d85a9b146f5953eb083bb9cf2ce68746589f46e9d7356bfc83418d23f705b57a1e0c9d6ae5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08ec0bf517cc5b80c5701cafe368bc5e

    SHA1

    0329f0411f8a2e20cebd1d76522aae0107201e19

    SHA256

    4752e8a549621d6cdf62bfd059b4adaa265275f69d79686b0e6c99c1f82f6dd3

    SHA512

    d42acfca9a87185badda97ca14974572acb1753339b44fdef500abac4d552cebd7bd84b2963abe5cc3dabccb90948bc0ff7d0bfc233039c23ec269630f8c0aea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfafcfa1c11268dd885539fa6a9cd213

    SHA1

    2c06f99d11cf802811430b87af28f19523eecb15

    SHA256

    2e3d3ba82434b9ed64d69c5294035c0825527b4b6afd2cc21a6b2b65d67c7f3a

    SHA512

    941fb02a0910cb8c284cd07c2f2a019b839e58fe606eb0c793f4b8fc121cdb177cbc8e3b1617683ee9c85c9ce7553baab0dca853d037f06f8b0c0f4db4e0cf7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ab57c69510b6bb77604342c67a87c7c

    SHA1

    9d0eeda3b6ff7d3e77a9f7079cdb855d54c8d2a8

    SHA256

    ebae2f80da736220847c9c02b7799bd2f5bb0ba40ab647ee882438bffdbb99b0

    SHA512

    06c7ea15f82a20fd5b9be7c0568615e38b996c68e10037025cebacce4694453587366aaee7d2b9acb9ffd12ed7c72cc9be70e1fa0bebebbcdebb9901586ca5f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29bc0d9988bf8dfa543366374d9c7217

    SHA1

    7d66ae7ef106681bd382b5c7b92a5961439548de

    SHA256

    3ce545022f19043840bcf90f96ad23f8c1fe1ab57292a4443d46f4bd118e04a1

    SHA512

    7c2ab4e9a2677d524b51b5ad996ea83b68867804c6d950f39c4014cbaf41d6d97215cc0f8e9d43a56842ec8bac01cacc46b6b3f20324e926a01e90e2b6d89898

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    401c30ae127618a938a61051ddc95755

    SHA1

    6a6ed036dc91a00fdf1bdc173b929d9dfa16d0d5

    SHA256

    35428256034b00a41bd0cc9dd6d98f148a37a849dad342b472cd1ce9d4a97958

    SHA512

    1d5c2bd14c22b869670e268fca0a12311a83b38da50df6d6db7b3099d1161f285643528cb2c0849b411fcae2edd169c1cfdaabef0ba4b11f8f14c9dbbd5111ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86001997a3388cf0cb9ca53ed946971d

    SHA1

    391c90ba20658d3419ebf36120f49b566b7d1ea1

    SHA256

    01625117d580198ec05ddab98770027865367be0ccd97a8c726fe112ed56918e

    SHA512

    41206ca7289ae856c4217171caf26f8fbc3a3eefef81eda808275fce20f11d8bb5329a27e7c2bf71fade6e4af2744844a03fb99cffb47a37ccf8203882ebfdf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2c30e14206c3e85e74f406da22c71c2

    SHA1

    72af77f81392cc9ad96c50be5b6fb228e7ee6325

    SHA256

    e349e1c8d4894d11ef6d1d9a50733f027f98b174b23e5e2ad068000b71e73de0

    SHA512

    7d1639f886bcdbfd3d41209a86c8ba71a46d7811836de82ea763da6f4f214745713ed044bb94d39b1aaf420c73d6d8ac4cb6870b58575dbf6413941d1edad1ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed2706ba0604c8f5b6ca9bbfb5c7ffce

    SHA1

    6d48f108053e1ab8f003e7abc34c768e964c9315

    SHA256

    b89d89963bdcd8e63ef10cb7cc756b49e2b730d5abb546fbe4b8bd1eb072e2b6

    SHA512

    8c7b92f6ab75097c1f0f43e1ea0a58f1b5b942429a28f7f3062a3c31b278e88d7609996ffd15cf14260d3da7a50311bb63cc73b313d4303b6c7f71f053d90882

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5929b87f3af36c4cd46e7df4f46fdbd

    SHA1

    b1da1e10e7a9262d7ded28a2ffc617ce302bc876

    SHA256

    1d7e00ff71200c8f379f683c74f94a6609739a8eb12cfa15a66b22f4db7f6e16

    SHA512

    f58bd859388a65871b8c411b629fa37d28f5e898eba1582719bcd4fd907d3de7ff4bb702423be45876a4741d2bf64caa252b7ad7ae37b0fe29e6620eb66dae6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bc14068a6e84972a767297dc778a035

    SHA1

    d7ea553c7e3d7bdadf7fa778612752f8780f4a56

    SHA256

    0f568154c85bf1d1ec6fe2939358e25827c24a6b540c91893cb77de2f5c5c317

    SHA512

    6052e65841f6919172cb27b6b205731d6e4cdd03c2481a8ef824558435fe8d955adb4c04378c908c2a7440eba4707697481c3cf6206bc2b8e644ae1d83ba9cb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9d8024d7e9dfe566977d023f4ee9533

    SHA1

    9f8099bd4aacba087147d1be85ac391294e55635

    SHA256

    931109548e14fcf201b855446afe460494b1cf259aca95f714306bbdcc8eab03

    SHA512

    aed5a724bb94b54479b7fcf3234d5aba6aed1458a9cea4a88d613f0672aac5380455cd532878d23527d51a9777cb0793be2a0727917bf945dd1c481adc7e1046

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0f72ab3e1e27dda072f31e78c35d08e

    SHA1

    7e0e944e7eac85244a5585a5eab0c1da4e8ac644

    SHA256

    03b2a27d5beece083fbab3645221d0b2c2ec0fe5e5962d69e21d3b6963fd9e1d

    SHA512

    0462759f7640d0077fda4bc3d2654643ac6df1e78d0235a94a1f6d4d18dba061c3c52ed55736aed158dd221c7df1f6798e1e1d6b0aa1eeb6e76de812e3c853c7

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W79VKSP8\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab787C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar79F6.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06