Analysis

  • max time kernel
    139s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 03:03

General

  • Target

    0c68d786854d6508bea245fb4321a599.html

  • Size

    3.5MB

  • MD5

    0c68d786854d6508bea245fb4321a599

  • SHA1

    2279f399949a5c2f3dca2460a833a8850c90307e

  • SHA256

    6b42e490a27026a377f16850e36db1d71163e37517c4980d4216ac46c2899d16

  • SHA512

    7094e4f74b7c20a894622931076e9781eae0f81bfae118c288c4f9ba35acc58e5d7ec74d5c8e2b766f503f40225b61a12feafb615225d4d639414215449ea7a4

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfT:ovpjte4tT6NT

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0c68d786854d6508bea245fb4321a599.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1512
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1512 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1864

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6aeea4b657a0e6c658f9725b19454a83

          SHA1

          17a9c98e8105f5fd85789b2a2a3573672dda1eec

          SHA256

          00ce0f92e74090d0c5979b48981a3813e287fdcf4dd1112a4a48081348baf690

          SHA512

          9de7cbac9739bfa8a0f26987bd8c577ed593c7f698a5f405aa1f7808e91f646d6cbaaba719b224d24766344c8f257c0b9f7a0338dffc231b541b760697f6a56f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bc5cd8e0ff7d5b55af69e013d117b9dd

          SHA1

          56fe719d7939886411a6aedeb1e76f62dc6a85f5

          SHA256

          cf49467738749cc95c62df97765442d4460a45b5da76232d539517631a677434

          SHA512

          207383bcc83df6f84623373feb60bd09267fc74d7f54fb1e529be2b2d8ad97bf29a22554d20451ec864ffc77fee44321b8d6657a113bda86b4424e2ac4e794db

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6f977c7875729cc099523df894fb8626

          SHA1

          e73d609d5966826d7ce3e62c627fd0f212d7f92e

          SHA256

          0cb2b2c0ff3a099ec64e3b3137548b9fffdae2a62ced8e8546ca15526f39e5ef

          SHA512

          4ba677c396833df146d64347698b0d8cd2a894c23b4b95f317d21931d98b88d563b1df8901c927f59c8b3b648b45755f9d6e6f63f79af73755ce220fbbbf25c2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2e3fc526045022e2341e585c370f95c5

          SHA1

          dcd60c566cca7f8c6cef40c55139e9c00ed37bc1

          SHA256

          87335d94ac3e061fbaaeee98f22ac6648f9a717a8a93eee6f12d5b3dcb99ec54

          SHA512

          9467ec75a4795db1065d232939d34009c58f9bf1a7dcff4faae1b4b6f8143d01140d89c170ad6a95983a9cb1ea0bad1c6092cd68a282cf21ba39c991333eb26e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          991048a96e032bea292a334f6ef1d744

          SHA1

          31f01e59f5abf61358e79d45d6c01c04cb0562e7

          SHA256

          0e1e61ccad898499061dd8e158709a104222444b3bd125f0727687d130dc8606

          SHA512

          79da98f2409cced464332f32da7f598da2a88835002d26314a4c9d3241a8822988e2ce13a2f4a16662fd29ec4f7037325442a72780c79324e0b2b66dc1be1631

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ccfd0f5c49ebc6207ba2c16da5e48a1c

          SHA1

          d801b81726791c23d71d1b760b1d2ae989c01621

          SHA256

          f41badee92f20bc5d2201344c88c38b288f013e808a1f9d6b451e69b03d192ee

          SHA512

          e3ca3b584f2c03434ddbd098ac87b3bb7fc313bd4f96a057bc6274bab4b3e2eaf1370aa6c05ab6f248d19d432d878b92a4193285b4f4e422446ba5b2c854818e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          663d0ad47d19c4b1cc58efb88bad8a0d

          SHA1

          ab221b994fc9cd66e4509f42407fd23697b7ec73

          SHA256

          9376faf5a7554ebd2f1fae431a51cdf8db4183d9784fb85158f19f6dfcfca782

          SHA512

          231c438719812e6a120e0f9d4eb4d51b8007b45004ba06eee94a800abff66f6c4ec026eb80d33c00a355648d1e4f9b5bdce711779407416c0c4aa7cff02b4c62

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          591c7b7ff49259cabc0114396901f612

          SHA1

          d32ccd7edd115184aebf06b6aa54bb606f1be8db

          SHA256

          a23066550c8fbd7f48e42c026ad7888087fe208965daddee2ac42cec56d65ca4

          SHA512

          0a5e96228dc746aebbe0f69b1209d3e91422b84c8a290fe48df1fdb561d7104d9a9e1c2b3c60cab5cb4d2aaa664e6502090afea232bebd5919415d00754719f7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9a7e29ae6b5f416f220c57b8cd733ecb

          SHA1

          5dd0213cde925a9f2666ec44b1bccd8b8f5a02f5

          SHA256

          8d87d0ff76c70031c1866a70997e0862ff16d9a40acd896be7e57448852fd23c

          SHA512

          00860e07ee588f64ac4e23a3fed6174dabc66c783083f256c02426b90d86ed82e579f05981bb6ecc32443095099bb45c4ee711f96986305c94971e8ca112952a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8ba697ad47140cabd1e21b1b4b92b690

          SHA1

          822c05b92f3ccc4925362f08182fb59dc8ffc1bd

          SHA256

          79129e6e3baf5421f9fc8b88f31377a3387041b374e9a2bda2ec803ae4b7cd9b

          SHA512

          6871e76607a839f5d9dbe7b15c93f6e2196d193c48bd0a7aaf427f05ebbbddbe34b1a7b7de977a3159786032f20caaf446112c21535e30ffb65540aa2d4a2172

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1d457046931d95bd8bc4d1f399721b9a

          SHA1

          b8f0e29fb159eb62584933ec4d3c42db465817a1

          SHA256

          315f3d221a5e8ccb0fbf5ae50db291e3615496e6ff213fceeb801fe0aa1443fd

          SHA512

          d0fa28db35a52c0289aadd8394eebf01131306c785245e22b46ac79dbdd9764e9835352350c9f4294a901ccf3855fdfee55d19d8733a6a22aa25faa4c7a901de

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e77ad5d31adea10577c6252f6506739e

          SHA1

          f465551bb59352d31a09eb5c9febfaaf5c579d7e

          SHA256

          9c7cc6874057549ec29265db6278cea797111750a3c6a58bea90cac3f28f3285

          SHA512

          c4074ee9c42e336b6c6b18dd0432d51db6ee939036122471217d53a38866048d1bcf2ff273e8c835d0ed98b153c5fb0b2f1dd8fca6fb673df6786b8b2cae2ae5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8515742b4064039811cf3b77cd79876d

          SHA1

          1dff0aa8e328a38de4a9c7becc4082df4d0daa62

          SHA256

          684e72ddb701c6fd325f2931f2c03e36255c4c26a31e60375470bdb8f66f24cf

          SHA512

          647e2ceb2817cbf73fa4b4bf068f090604de1d1d89d2c8969f86829ded695577da7d7bf77fdf8b6588f39cb9ed18d192152dda4e9d10058cd2b21d78bbbdb764

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7b2a1f3218181e79f3f3dc03b703e751

          SHA1

          21a5eacde9943448c5c7a82105309e9d5547d9e3

          SHA256

          8228b80d900867a9fda0b3367b1bf0fa356195b380961013550402e178a4195c

          SHA512

          04efc818aa508a4e969d9ff37def9296a0ebd0049b127676df043773dfb80bac163f41b24190f5ee70ba5dc37f4ec2eb48ee3d53e36ea95094417f9241ad4e0e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          58e30fa1c8763b864c417fa096709a5a

          SHA1

          9546d8f4060f523f0bf41292fa13792cc449a4f8

          SHA256

          3681f93ad81e8e6284cdcf3b184b440195f027a72f0f82a0280022e3c197f176

          SHA512

          9a16236c51f512e556b98fa0c0d9c9bfc42d665da2e64409e3a666b55ca33e623a30ab628b17671bfc8fb712aa2d91181a79c25780d3a96b5c98affd7b53ee58

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ed77f5b391463cf416b5d338e139d2b0

          SHA1

          8ab8249f9fcd7c72972f9ee8cd219c4dfa8d7f11

          SHA256

          94234bf9feb0d7c2cf7620cc25c51af978d08047c97026aabda1cf5c8ac4f53d

          SHA512

          0028d0c2253fb38cf732f2eba62781a9f99ab602c1555f1a35d110e71913314508057430ca050bb436f28189e70895102b5cc05ea3b186235587efefce90de5f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a96733b9346252305b071a2f0e3781ee

          SHA1

          7596164161bea437434bbb56d5a6aab57fb95fae

          SHA256

          dc6b54057da7b389c44814f3fd09614d7254ba5c36ae8ed89c2d644a748f6d0c

          SHA512

          001a2eafe3ca8ceb5c3e07499ea0b96fc0898848245c7b7cc0b3a1c87ae9c3661feb2718fd944996a39d086392dda68d87696b6c6d9609765770cdd4d819ba5e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a73e7e18722a677e2c5c7fb7f599e2c6

          SHA1

          f901c9966826ecbe55371a3f03908a1205e322d6

          SHA256

          cbdfe5e2a62e05ce3cbf37617d441e8ba461fe754d10b8b503d25a8e41daef61

          SHA512

          451edc70890a433c68a5ea27a168d68b373ed20fd95a2debd2914c54c6465a9267aee1ccf476feb0ce80238390e6e4d94db3be56f2a275494d11515b89b5be9a

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LSNXCBKV\beacon.min[1].js

          Filesize

          19KB

          MD5

          dd1d068fdb5fe90b6c05a5b3940e088c

          SHA1

          0d96f9df8772633a9df4c81cf323a4ef8998ba59

          SHA256

          6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

          SHA512

          7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M61DDFBK\jquery.min[1].js

          Filesize

          83KB

          MD5

          2f6b11a7e914718e0290410e85366fe9

          SHA1

          69bb69e25ca7d5ef0935317584e6153f3fd9a88c

          SHA256

          05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

          SHA512

          0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UOO61SKS\jquery-3.1.1.min[1].js

          Filesize

          84KB

          MD5

          e071abda8fe61194711cfc2ab99fe104

          SHA1

          f647a6d37dc4ca055ced3cf64bbc1f490070acba

          SHA256

          85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

          SHA512

          53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

        • C:\Users\Admin\AppData\Local\Temp\Cab4BFE.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar4F4D.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06