Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 00:40

General

  • Target

    08d4eea79365a7a14df61dc369f99cca.html

  • Size

    87KB

  • MD5

    08d4eea79365a7a14df61dc369f99cca

  • SHA1

    11a0bd3f0f1d45842e5132d5cfa78ee30320410a

  • SHA256

    1d4d4606289f51388bc1b234286a28f0f0df8b5a27a035c8628be9a7a339a421

  • SHA512

    bba453a7dfa1d7aa387e186a87edcc6cba9cc7dc38e9394b1235f511cb21ff05c2d9880f7ae739837d55d328807d1e0c7a2cde0ad0b3641255cfc070309ed8e2

  • SSDEEP

    768:ekH9ZsBzCUDLgP8d7ODoS3Vnwqz+jKCZ1wK3u4d1i9f:eGsBzCUDLgP8d7ODoS3VngKCkKC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\08d4eea79365a7a14df61dc369f99cca.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1848
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1848 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:3820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

    Filesize

    4KB

    MD5

    1bfe591a4fe3d91b03cdf26eaacd8f89

    SHA1

    719c37c320f518ac168c86723724891950911cea

    SHA256

    9cf94355051bf0f4a45724ca20d1cc02f76371b963ab7d1e38bd8997737b13d8

    SHA512

    02f88da4b610678c31664609bcfa9d61db8d0b0617649981af948f670f41a6207b4ec19fecce7385a24e0c609cbbf3f2b79a8acaf09a03c2c432cc4dce75e9db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

    Filesize

    338B

    MD5

    133cd874dfb9c146d317a7237a68e507

    SHA1

    9fcdf7bcb11f7d303ee96628ff92b02a74a53d66

    SHA256

    12ab2adf7a99d1d69bb574e312aac36d81256adae0d98992606694fbb2339625

    SHA512

    54e155934502754c06ddd6f24db0b2f21be790c5000d7a3376b6f0b3a76e003ca5accbd76cfa1833e881027f0ab7c995bf48a48ead5c8cb8cdf8258a88b11993

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    229B

    MD5

    c01ae6a82105b1149ce18cd5d6754816

    SHA1

    4e53af7ead6bbc054dfecb2330fc04a462cbcee8

    SHA256

    c73842617c6ea680713ad1dec9c07d6553defb9b564f2a2cfe7d502675427bf0

    SHA512

    66afe3d621737d6f9da267d5f489cecb717901f987d88738eb363417b1d554a4910bc69c11aa63020c5ca4e1a2c2f7ee70994ff8c5e904fc467733ea141ebfdb

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    229B

    MD5

    e3bcab120f68eb916c8ed31926758446

    SHA1

    054498886d6a1cce6424f83d4e2c22f848b12e02

    SHA256

    0366e41e3bc6fadb8e88f33f07a8cac53206d5b0fe45e5e1b8fcbbeb72ea119c

    SHA512

    c6b9e9cb8cea5dfa408406ca92ca1556ae22b85ab010be5694a212d057457e87de74e9430f401aa033cba5ba8b3d2715ec8a27f155441c1dba809052e6605c27

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    229B

    MD5

    5f7c2bf74c1aaaa399faebe8e5abc9bf

    SHA1

    2f1460d236267d2a34c8e8cffeb81c698cca94d7

    SHA256

    224a2118d430b47999d9042d8d5c3b73e9b72e25e3843979e9541c39346c6530

    SHA512

    e2b88f926fe97431af93c9908452955952c0113b3c7bfb1c3ac86c8b505ed4b4fcf5a117f344996cd24087178fa798a1621a4f2584f4e13c3c68727447c2e65c

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    229B

    MD5

    4f57cbcb8e04a0a779560e3113387478

    SHA1

    7c9eb26c989fb92a79f469a2fe5c23fcacc943dd

    SHA256

    5c94a0d6095fb42b662c1a5647ac5ac899587160f49ce6ece4d1a37b5395d629

    SHA512

    059c7853e1639c1f9aae07431998dc019c4fa8488a33f71e32ef2553b4b4bdb0c7a4fb2db326ceff3b5278146523f50ed811a768bc84ed88ff7100b2fdf194f7

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    229B

    MD5

    4c908185413919e9d1a555c5eb269381

    SHA1

    c7bd961538cb6caea1df629967c8ceaf1ef2e1e2

    SHA256

    66e4513ea0490e23a1768dfbd0c8235c83decaf4b69b4a89780e3ae8b7fc61b1

    SHA512

    f78d5a0a69b0e7a46855ef734bf3a4ccd7cdcabb218536ca10b7d5f38aa9b1573b99b3f571522cd72686b6446ab5f911a352108c5cc251bb29fc1e50c57c0d9d

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    248B

    MD5

    25242a25d92ebe98585a66fc2595a176

    SHA1

    f40853d396ad7c8d2e71c03103142a63de23ed05

    SHA256

    b45437a3d110166848d5f470f95463f6dff671b027b929d52bef2ba1b11a2cad

    SHA512

    4dae20e012a8abd2f0cdbaa978fcadf55a3818d873fbcf81874949834bb62621f45cc8c6e86c12ac18e42eac56dadf28521cd4327cb0f75a5f114144f44cd22c

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    229B

    MD5

    52dd553b0181643138dcf2f264e39313

    SHA1

    6cd54b8c694259aaffbceda38ee00c671fbf3989

    SHA256

    e7cd3d635439f942e0a1a25b0158769fba0f6ab190159718095e8af3fe482638

    SHA512

    f44db6dc892ab5b0391a402f89574850a21383a2a0b7e597d01037019fc22c7992766b869c87e74ae59468170511debfdbab14b2b54b36b06891d2aaff1fa429

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    686B

    MD5

    09da3ae628ec70247df0ecf3e2a4e062

    SHA1

    1a8b778848b367d5e8d882959d7cb6a40a723a49

    SHA256

    c672ea137721b10170ce4e7278ecbedd5d1f157bcdaffb6b674387cf98220fd7

    SHA512

    0d6fb8737e4c0010b521e0c7374a9bab0759e5d5b8b430cf6eeac74f84496fe11121e2eb6861f5c70b59af48754a3dc3c00bf01abf16391419ed2264661a2bc3

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    641B

    MD5

    44cfff088b579153e2cbb40ad3c7387f

    SHA1

    7adfce3d1b5dfc3a93826f450bb19853cf3824c1

    SHA256

    30db22a0c30591f82649d48c609602d2b14bbc31c9761673c65003e491f088ca

    SHA512

    1f22cbd7a8e8f1c0df4abc770dd55a095edaabce9e68ff71b2513b0666792bf1b1ad7e837a17fef38d708b267f4f2d2195b2684ba94a7e6eb8ffe91eea16a519

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    641B

    MD5

    3e61472ea63a2a9f9a3c31265aad22f8

    SHA1

    a4495a307970db1296b120858444abd16b900b47

    SHA256

    1c353c066bf6506f2c7cb48589c018561cc74eda58e3d1a9cf08e9af0ee4402f

    SHA512

    f22776436f19f8459ec2892e33deb3255c31d22d3797b3507afddbefc42f9d33d3d464b180b95f06661b82a2977b6f4907b68f71780230ea9f1691516f46af2a

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    24KB

    MD5

    4e233386d087ca7ee1dd1550f13994b0

    SHA1

    e059ce6ad45cfbc73d0358a6f94eb29ff4b5f4d1

    SHA256

    4b3e0c2babc1208e044e3eb9fcc3716886ecfd6e5abc3d12570aa772d646548f

    SHA512

    559f64cf79fb820588d6db9042d02f6fc4a76a2ed1b83d35e97b71385b4d8c4af12396477949ae8072ad4b6665820f99d1a0882577f077a109b92c7950697b53

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    28KB

    MD5

    a8019ff896ed1ab5c89e9e7f3cabfc3d

    SHA1

    e6df686110794b3247183e1eeb16d7ba9ebaa94a

    SHA256

    b365dd54a82a648e56e469ade4af16be47056514830c129c8ae1dc4cb8a86efc

    SHA512

    e35aa40a7de5ac95fd0c6a758693fdf498622da07114e640058d4572e589b9f28a68ac53cefbe3d20595be5350feb184a6f4d05f9de7fb8eec8e15860a4ea891

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    31KB

    MD5

    6e0bbf8765fc07c856ab22793e441f1c

    SHA1

    d8eb48b6df0098f9d0b33cf27540d191728839f1

    SHA256

    0d97725dff465f6d9db38390d91cd21a026e86247fa35a54e8ce7cf305bcc96b

    SHA512

    4e6aa0a8f6e2c687dd0e7244679578bbac6b47bd24ab29603726758094cc63de71ed7eb71f50f28fdfb6b5111dec8590666141915efe85bc9c46e384e8ef9d69

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    36KB

    MD5

    351479519808cb41ce52d2a49bfa12cd

    SHA1

    fc2bfad002a031e12f1fb6b8a5dea2e4ed890b43

    SHA256

    51c880f99b69b5b2cd6d4483de10db540a1ec8b95a658ec0015945abd4c82a75

    SHA512

    88c4eb02be8049792af5041f5b2b7241cf7ef58f21371556f78c707dfb7c14207f76a7e54d5b484b0df46a6314cff6eff55a5f2e7f3342731f684b9b0506e163

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\5TDDZ0PO\www.youtube[1].xml

    Filesize

    5KB

    MD5

    990ee975fc7987fea2430b54b083cd78

    SHA1

    a755d4cb7b7149d8da4ae6573aac8c7e5f778b2d

    SHA256

    f7d1a5a39fa5647f815f07b8b361e2d1c4750b6be38d823be07b732abc2a149e

    SHA512

    11edb687f8834da63d4810646bc3222d3011de6695c0f30c783a83b8eda3eb1340558b75b0d1064327d3003ce8419aef9b879d0ca49b7ab646787f22c51a443e

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\VersionManager\versionlist.xml

    Filesize

    15KB

    MD5

    1a545d0052b581fbb2ab4c52133846bc

    SHA1

    62f3266a9b9925cd6d98658b92adec673cbe3dd3

    SHA256

    557472aeaebf4c1c800b9df14c190f66d62cbabb011300dbedde2dcddd27a6c1

    SHA512

    bd326d111589d87cd6d019378ec725ac9ac7ad4c36f22453941f7d52f90b747ede4783a83dfff6cae1b3bb46690ad49cffa77f2afda019b22863ac485b406e8d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0A013ETK\SQgbchfOupGpmqTGWTosnYfncWnz9Dj8T9-qGXYPu1Q[1].js

    Filesize

    52KB

    MD5

    8b3d7ca7224a3157fcb3793b6b0ea2ba

    SHA1

    fd6413b554d68705ddc47dd19f495efa8196a137

    SHA256

    49081b7217ceba91a99aa4c6593a2c9d87e77169f3f438fc4fdfaa19760fbb54

    SHA512

    532e854517613d961885b58863ce188da1779224ce6dfcccd1cf0062f76792c73c0cc9e6529b06c5b86c3f5c6e660e00880cb35e556f9e3e79bda95001a443de

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0A013ETK\base[1].js

    Filesize

    2.4MB

    MD5

    5bdc213718b5e58cdc9646967810459e

    SHA1

    80a2b274802a65a8828300f961e8ea30166767e7

    SHA256

    fd8d118fe8ac283b6e6ece58b4bcbbc06cd734f11761faa7c46ff08069f711f5

    SHA512

    c164c540f71c99784277e542399dacba89fafb9de63ecbfbafac636dbfd75a46093d5a71d8f0b63d2fba65fae20e84c0fdc2786e221bb57f553a7c656ec8c5f9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0A013ETK\www-embed-player[1].js

    Filesize

    322KB

    MD5

    303d9f3d8084d98c3cfc81721790f192

    SHA1

    7bd3f1a1f6b4752b7d646dd45051e446be259a41

    SHA256

    d854531f9c3833536d6971b4fd7617dafe1a2c6fd0bbed9469122e73ff3b13a1

    SHA512

    5dacdc9b308da058cbc33e80a4e4900adb17bd63c9b55316da06cb3f0867257180d89cdf7d0069440cfdf5a696f66d2b6161add2e090daed59114bf1d6c36aff

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\ad_status[1].js

    Filesize

    29B

    MD5

    1fa71744db23d0f8df9cce6719defcb7

    SHA1

    e4be9b7136697942a036f97cf26ebaf703ad2067

    SHA256

    eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9

    SHA512

    17fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\remote[1].js

    Filesize

    116KB

    MD5

    969bcddef1c9783ef5bd6604b67e0091

    SHA1

    d4eb1bfb52ab8d5a4f0a0dab58dda61aaf419bf6

    SHA256

    e878848ad649d0b771d44453abd0ae8e4aa7a2b93298641ed0c26fff581dcb4f

    SHA512

    2ed070c4e7cbb357be73c626a8ba4c7939d7c655ffe5ef5a3f352f2d01e4b1ade20c3a091ceb9c9697b40ed1f432c656545deba3f5756bbc26a5cf7caabfb8b9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DQ2SYU15\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QPBAQNGM\embed[1].js

    Filesize

    51KB

    MD5

    02e3aa6de0c0cecb0267cd83d6f64d51

    SHA1

    ab29481e145d32c7ff2a2e850a90e93ea9e2a60d

    SHA256

    234595572b74d58cd52917208142b3131ad7992126358ee0d917a40cd1240e83

    SHA512

    2e01c259120af23f10fab29d646879a9db5d1b8c4d8ed37b1c6cb0a49c19fbd7683e77f1749ac476fb44fe6f992c2403a3590a8d79ebf0dbaa3164f50c702660

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\QPBAQNGM\www-player[1].css

    Filesize

    357KB

    MD5

    f273335110f2108edde77264cebddef1

    SHA1

    7b7881cfffe8fd1197e74da6ae4fdc62b3cce672

    SHA256

    af17d4cff542b33c97ee3a95f82a21d8993c87fd3472dff534fa855828a3b615

    SHA512

    c45111893164fcfed5be0c6c1fc847495868964e498411f7dd1658c7e7af6aba6931fd73825c9ff73d0afd0e7c48af0c7b3a7fbdc08b02a81deaa51657b00c39

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RVXHSNZG\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff

    Filesize

    19KB

    MD5

    de8b7431b74642e830af4d4f4b513ec9

    SHA1

    f549f1fe8a0b86ef3fbdcb8d508440aff84c385c

    SHA256

    3bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a

    SHA512

    57d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RVXHSNZG\KFOmCnqEu92Fr1Mu4mxM[1].woff

    Filesize

    19KB

    MD5

    bafb105baeb22d965c70fe52ba6b49d9

    SHA1

    934014cc9bbe5883542be756b3146c05844b254f

    SHA256

    1570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed

    SHA512

    85a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64