Analysis

  • max time kernel
    89s
  • max time network
    169s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 01:44

General

  • Target

    0a836130943de9e99cf621841f3967c1.html

  • Size

    3.5MB

  • MD5

    0a836130943de9e99cf621841f3967c1

  • SHA1

    279612502f7ec2b09f07006061c9291595232fac

  • SHA256

    1e76562078a1a7886ceac3b158e880919f63627328e276e3bb1359b880348c1e

  • SHA512

    c60a4e719473edc4463def162c7d9e651ce35b2b201dbb1c70a575b004a0ebb3773e50e397f6e8ae0be3fdc651eba44ce2ea0887f134cde4c25646017cd777de

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Ny8:jvpjte4tT6s8

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0a836130943de9e99cf621841f3967c1.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2404
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2404 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2856

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03bfa6c2999a4b40a298a70be3dc5eda

    SHA1

    d9b4169a9a5c7e550459619db973adc0d1bb3031

    SHA256

    c26edf600ef9dced0028e6816a351eee0362550d5018e19df3816058e1697f69

    SHA512

    d3a692539d4fc3c8ba1e26469814ec8fc4637799f6d43fb0e80b21bc574701309649a5a29168ea21254d12aa16275a00923569883f598033f9c768fde3a5e4ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf33f8bdce82043413eedc5f06813d5a

    SHA1

    618be51815888e1bec25775f63da149cb449487f

    SHA256

    de246759c103210d2773cdd7f604f59414143b9fa80562f3ad014ab268873ba0

    SHA512

    2f63796343b8e59fd977364f79d97c60126ad444afec8b9dd84d9141c1bbf90768a9a333150a80f5d855e086d09f893da56c069b290f00460984070e85db616e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c255efd8e857e82aacd9017b6ca13b9

    SHA1

    7fd15950fc4c0cc53625e3942b7a3d9d36379e82

    SHA256

    e4ce52db89b2f8782d8a1f222eefec90fea0de75baae43b6a862a26a62476537

    SHA512

    4a7ed3a2396569ee2865d99d2ea80b44dec9df7cede908226d7918051711dc675bb9568111f067d79e54db4ae3ec95828fbdb90d40105c66041dec831b40ffa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d6a6fdf21cb32bb622904ae497cf2b4

    SHA1

    d2c9472c7bf36f2818f16714a68509d451d0e7b2

    SHA256

    1be50ea6ba14b45a4bf78e63508bdf4f1f8c2711e60dadd2e5cf2a02a1ea928f

    SHA512

    d946b8c28994a26adcbe417fc4195026d0b1f2dae13340f3657dbb2bc6d9bbbc2330c6ff45856522689d26d7b5bf94f1acaef0e2ebfe36fcfceb9952864066cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    575f3128dadd66d4a1546e6711d281bb

    SHA1

    7946b0d607bd62f88d90147cab0f6296797c5422

    SHA256

    14a5cbf1479bc02055b1eb4f5405e11e5da149b388478729c07a02ba1a770dd2

    SHA512

    6891f4a4cfe749d503eef6d48f8b00f82dc07a221de7c4c725c2284b5b22f8d94e364b071e4fbcd0edf48b70ed9f6680344014266975674a05734f7e695259d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcd65e1a17cd1d419d2688fdb63fcde5

    SHA1

    b9dbd2842aa1c24bee188855e635e8e84bf2fd43

    SHA256

    27a75858dd95b3dbef49523b1f2a25fc07051e977889480d131bdf953bbed4e5

    SHA512

    ea00effdf52115c3796aed6d256d003b18949c5139064eef6d55af3f62efddef8ba74841ccfb5b6e9f2783938a72fe196aa2435dbaee6455253c0faad42f338c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7aa5954c6c4ed871841933fcd67a1d78

    SHA1

    4db0a7e4edc10c3f0dec7c5b5ebc13524c4aec1c

    SHA256

    c6b361ffceee5d9ec66ccd7a8ecd210da5e419a2c5a60de507d98561b5a04796

    SHA512

    bfb66318f4ead25e9552ed116fd808af107d416c6c02782446ce6455886122706e4bf8b67824ce4861543073b256d25fbfaba445ab8671306f0d1fa1795acdd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47aaa7f59c3d6571c5b350ce4f941b84

    SHA1

    bdf95af1afcd80be9218c5ef6decad374701c1ba

    SHA256

    6a3e1355db06e18fdbd18f632d5cf9558e7f1b833c2d49405e3096509ac8785c

    SHA512

    d6ba97d10eae3545fa97ede455b2d8d771a4651fd0dec5d1e406fdafcf429ddfa1fc5a1e38c535c4de129522a46a8619716fe7af110e784326ce9da15c4327a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e2f7b151e95ab7491703bb4c4c46dc8

    SHA1

    283bcce584ae85a5aed5d1782ffe826e3a1097bd

    SHA256

    396b26f34e89ac9ae50e7df8caebe9cbfe7280a0cefb012145e981cd0300020e

    SHA512

    0dbc8ec62724fdf5cd2a87c7eded8051e8babfd388f00f35a197ad88474eafbcd887fbd1405fd4aec8a4960178f7165ecb04e2081fd1927b3a6fbd0b1586f8c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1f375a00440f1e0d4f5609ec8068e6f

    SHA1

    dc2e4b70356285fda44100a895a7d20413390ddb

    SHA256

    40fda3c33ca9eadc3192a7581c06233f964adacaa4c2d303ba044e1450b5dc90

    SHA512

    5ab847f864ece67d38cabb59e5d513306f449354c4d35172336a96bb066777f9b66297f473507525437baeabbb574e2664f1d91d87ed958b831c263a75792c8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1049a0aa681b8906404443733f1cdbff

    SHA1

    225b14ba5f9d9eb8688d7cdf430ae5726aaf0e3f

    SHA256

    b7215f397a10d4a085f62433084543a3a919de25f9601fbf0d926cc6b64edb06

    SHA512

    a61d39f3cf2ee449834221bb3034bde51fc2de00dc10ce2c759194014708c60faf6415a86cbdee375bb59574b79bb4ddc1d8f483c442bde0b54b0779d1a1afc6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75752c542cd1d15bf72653fdeaaf16ea

    SHA1

    aadd503f6a831584478ca7f296e0d701ce98edc8

    SHA256

    fd3d3be6e4d9ae6e751700517faa0fcdeeb482dc65cead528b1d4f489de243e8

    SHA512

    63ada4c2e4a62389978338c1778c8539a04aa5c3c746fec84b0927aefaccf42130f6c40872b635b16bee94587ba2280324adfc7e1f31d5f86b8593aaaefcd3c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f36bc3d3117147dc37da9ac28d75b03f

    SHA1

    eccfc87495ed7754612e70e5c1752c6b3b01add5

    SHA256

    0bb3903768c38bc8b1d82d25a67afb15f7f52d23c698d032ba5980306de37ede

    SHA512

    3214cf195943bdb6c57292c1f9cbcd9a8f1681a87b378857326bbcab5c90192dd53823878c5e6cbd4781bcdd8ef964b8a84184abb6209a996bdd059118515b40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    320063f898c96c126ac6a650d60d5ea2

    SHA1

    f3809133ea10be6a4dee3d15ffa0927a67c8d059

    SHA256

    eddfe3831d897488b0cefa3d23165af3d616b28ddecd246b5970de358a653b6b

    SHA512

    fa3e7f0de6ee438b4a0bf6c79c069b47a0a8461b3936631dcb7c115a690c9bd206b433e5a3b4d1369d5f5dad19df668c1088fda45905b62c169e9d2dd63daee6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    941311ee5219ff5fe52904a1c7b52796

    SHA1

    9372ab122841797aa743cd8909b9fa4ede9e88f1

    SHA256

    3ef0da5b1262bc0ccf8611ea713ba093d68368178b8050e683268550f8f661d9

    SHA512

    e660420ced7a3e7e5bc3dc5595407477c9070c49c774e3d6ab3b168cdb97403fc795aec477e1e732de3c76e529e51a88c1ba6439e74734d2d3fa06042d869c23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d526b6490c2884cf852742265b76a9c

    SHA1

    72185114ee61696636ed654cfa8d1458d68723ba

    SHA256

    03e55800f15ba6da18b870185648ec555a5f5235e61d8c8965161bbb51b0841a

    SHA512

    b0c888ccf05017bbec182e0a5a0c8f6217f7d74c79a7b18cedad9fea974a02d75a0e31ccb4af9a080d529791bb9ac61e76c34fa1433e2d1efb988b06ca02fee7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7959d2355b333a2fe4fbad0f50e5d93

    SHA1

    8a6c5ae85905423b8dd37388305394a5c076769c

    SHA256

    34516d4afb228186478a68f3d7c99526dead4c56e65df18ba635e3c781bd1e8c

    SHA512

    e586f1f3a4e702adb2e116dcd396d4c9ac27e29b8335bd52f2ea7ec97c99932a1860e6d1da5c0e87a602885529aca7cfad9858cccba4f86335a40864a2f71c2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1fd4a379cfe8e38b015fe2a19ce825a

    SHA1

    0fc307fdea58f15fb6f9129acdba65a16559faa4

    SHA256

    50edc5a66527f564c536f113cec08573b6ba4bde16be4bffbcd095c48cc3cffb

    SHA512

    8bc16e714ae01e05a9abe1e2573d65ff00cc675e83bfc5e0417ad51da8bb64e3427b6bb88a13d79e674b6f6d196b67d16484d980125aa614b65abe5f4347e949

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86d6e3fafad476538744fb2601eaa173

    SHA1

    3c4d1bb4cd76e299808cfb1034100021df66ab44

    SHA256

    d314495b1374b2f6c55c474b97f3c9baeb9b25eeae008f9f99459befd398fee8

    SHA512

    c86b44a986b7fe1216cdafe172e0cf0c3cf2f8b0f2c13bfb715b76faf7ab9302aec58bc751b89aefc5f55b1e04e2094fd34ed762167a8608fdcac616b8a08a61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e0e790b2683a79e460b67b2cfbbeaa6

    SHA1

    e4b96e9b6067f508ccefa07ec6eb83337c9d7d80

    SHA256

    3d27f8b8d30778a7753e902a20fc578e8d1ff8a2a3f044c86aa7ee07ac7de29b

    SHA512

    0579b0cf8bc8b8466042449c82d90cae891ca58a7b2d9b8431605418dc5ec2f0f8357dea4f6275cb53c8f4d778f0b6d445e5203558eebe5893528317bf577bbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8e49a2afea32a6184500f795a56f9ea

    SHA1

    83b1a7f3cdae2b8122252cbfff63d42b99cff343

    SHA256

    0cbeeaa2b0f8407686e44d3824806845aa93fcb321d098a20cef6e160287e4aa

    SHA512

    c33fae756cee4646e86e59189c8731cb91eca71343b4fff33caa0a204eac1d3b846ca430eea595aead704c8c8e7546a32b406c8716d2d479ad282ae14e8d55c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c3a6adaaa5a14143b39747d0541fa3d

    SHA1

    f0094da31c9592ca13caebb9a86247714026fd5c

    SHA256

    a9ff39bec78c2bf4f5916bcf988b311bd98d423a006123a679bd029d9f0da0ac

    SHA512

    bfbd312cdc8284a110f37614a985703d1d1401baf5dd5f61a59c989868649bd8cb4df3cdff708f35e2c8ce51416319794057a60257b38218ff5d79f8090d46ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c580617c139e38b375f4227fe32b644

    SHA1

    46da2d9f3e6eb9a705455919a285b0cedc5bf093

    SHA256

    d2ebccdf99772acc21a9e35bbc0a2f43a5fe617819f694debf6494fd5728a629

    SHA512

    ea7db7035a3aab9bc01c48e718e661a60ed39633e5e419ce4ea3966f9a0a25ff2ddd84b556b051b258759897d59b00e8c8a4703417284c7d0062cb0c7e4396b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d324d6dad72e87eecfc6bfb7b15910ba

    SHA1

    9eab2645fa4b32f2afed348d3d63d0f46af17394

    SHA256

    ad3ef6c1f4ea831140417fd2dfabfc10e345fba76a8d404ace918c7928eb28e9

    SHA512

    d51ef3b36220124032cfe621ac1d38bd0c43ea918422e98f17a1a9b4faf2130d4a376eabc119ae2c8e1cc3bc0987d3e7d7cad8180cfc8a8e066056b47acf0dfa

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LSNXCBKV\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M61DDFBK\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UOO61SKS\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\CabB99F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarC642.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06