Analysis

  • max time kernel
    120s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 04:38

General

  • Target

    0ebbc4b91c484d06ba5f3bf6989c1486.html

  • Size

    151B

  • MD5

    0ebbc4b91c484d06ba5f3bf6989c1486

  • SHA1

    96a5c2b8e6c2d846cfc3b64e4e98fb29d3fb86dd

  • SHA256

    c3ad083970d4944f33dca08f9af66c21fba8556892d7c2c1fb7a04c10eb3b8b6

  • SHA512

    c141232cedb4a0e5911c7a4586bc0c0a281ff01ed774ebcc8344d97ac4958fedf8d647edb03c53a77249e6df240e0d768328476da41cbb1e2d6be4e9df0742bf

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0ebbc4b91c484d06ba5f3bf6989c1486.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2460
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2460 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1756

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          26daf1e98db2602efcd722a4ecc46e88

          SHA1

          781c995d41e5aea385dbe43db977438b6c51b6c2

          SHA256

          7512dee772eec23f104ec7cc9eb60bedce97360c3a015d845cb7f15ea251488f

          SHA512

          1cd121096753eeb984b11458657eb04718def71c9ab4931e34a388e5ad462f8aa07d57f2e65d0b9278e34836f2e937e22982b1e8eac2621a37795406c3cc89fd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7964e676987d213f33ab621c0db38cc3

          SHA1

          6134bf6074bf66f903a512431e3ae0aca7bf514c

          SHA256

          c9d724d44936939d8888c1b8fa8cfa189b573252d6e32a36634efe89ad843041

          SHA512

          a9946c57bb2223153de965df813143fb51c845e36b10842a3e898c5fae138e630684a7fe4c4e9f0075d3f312d003616d0b0af675049792eef8c74343c2e45fab

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d94b76cf5c96c5033edf02a22c84ccb9

          SHA1

          2508f564207b6db755a6a8b661e28ef6fbbcdf2e

          SHA256

          9351f8b5307a5ddc53bd6b780e09855225b478d404e5da8f85264f43a741d35d

          SHA512

          54a44636b01a80bb0ee1958c5a9d7f9c69ede236a54c94f501f6623f6ee843022917dc747e23cf5b3c74b44b79f3d71aad4d9b1a35d4f0161217a4ac1a2d0d8b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ef52a8b99c473f4ae4d92a0b254e6f18

          SHA1

          eb316b39c48cc730bf8eb43fb539b3dd6f8a0c72

          SHA256

          7b346dd7145f49afa3463982c09b11f58fad7141f057e18e73621e560eac7fa1

          SHA512

          32dd7e4a13c8d28bbdc771a7f3404ee99c67c128acf9dd2ec6bb3ab644500ab6b8f083e6dd726e236bca07a7800a4a5c0f7ff0eea31479b1f3b62f3fb4ba6af0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ad02894fb808e184dbaff1020e5c503e

          SHA1

          07741c2489108f8b92f5136e086a5a65d643ae2d

          SHA256

          7fae46b17e109379f8303ce003410b0af40378d6ee0df76c748d4f88c93d5e83

          SHA512

          019f7797d90bb34d8a1be25ba633188eeea7e6cff1dd40bb26128305f096108e8a9f701e4393fce8956e5d06e8e6bfc6b04deda81fc0d3746723093946866914

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0feeb9aada88046e84ca991291c7f56b

          SHA1

          20408b9179aeb9320fc53915d28695f0f3cca49e

          SHA256

          3b434b95a2b6832fd43cbf43bc09685052e4cc23de25baa9d1b996121330a2f8

          SHA512

          2f4fcf408941e0f7b538ee64718b4498e463cad3472f24761500fcc6557383c6532b1fbe73e4401bfd9fb848b74834ec3451dc57423a9ebfb091561ac1d887eb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          11b904a9607f55230ca3fc709e9e664b

          SHA1

          3efd76fd19aa2a8c28795784cf9b0219a34bdae7

          SHA256

          8cd19b320b34d21bf144726d3b6f26f30d5c73fe2fd60658316aa37de3533a9e

          SHA512

          edf757193b943b948983f32a842c357711c2eedb3c06065ee243d3c9fbc2dd5c77e39660961c5b8217cc60380ba642d8be1f87e26fba506c472cb8d3ab1b1b85

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8fce554aa2f810394cb0d828034c6dd0

          SHA1

          2b275f0e0a7503cb62d81f03e44419dc3a259e94

          SHA256

          ce0e9f93dd71c7f8b165cb5a1dec71e719e6f56e7a5534ee1af1e46f305ba25e

          SHA512

          b746af90e3b2a41dc2297c936e8f7b2b075fc6c090cd12f201c2bea71f9e83e90cc85ea08ebcb8e58db4e7c9a9a55f9e3b4c94c0bc806e507f71d76850ebfeb8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a3de81dc7bc8c00cb29f6ce9d192ff2f

          SHA1

          a52ffae2ebd6ee815c43ff9489ea9badb04fd67b

          SHA256

          512b61199b6203eb12c9785ac0cf41c4acdda73c27c4e44138c89ddcb45fe107

          SHA512

          1bb015dccc00aa0079af2d43537e7e8b42fe012c44e8a13ac889cf7cb3ea7e600b51aa01529ddfaf2fc732c3bfe699e033e0b02c4a935891cf90e39677cac867

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          94f1b21dd4f9b8357e3bd6bc235c6b26

          SHA1

          1fe39947013aacaeb1a887c20ff6b7d5aa45387b

          SHA256

          85f6df95b705f1502f27afe87e1abdcdc30490c4a7d2a14de679391851ece40c

          SHA512

          6e3cec6a56b5aa9a28e0574ae767f4c7f55eb3238103937de6881f99ed1e0def45eb7389dbc96eace2de3bbea35ff036693b348b4983a19a21989b355c5fe854

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a740f68a3ae7faf63d50ed75599ceee6

          SHA1

          4db428a634a575848f0f24cecaccb1b0302e4055

          SHA256

          d797baa28bc85f5f25d2cfda908edf5e81661b850f677d2ab998f98879d8e3d8

          SHA512

          a042559e55b97ef398440575012765c573aa9205ac153d2c4554cc330e6c0bc0b4b397b273401002d3d6838ab52fea75ba42df2830f7345ef1ec405b2663d532

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3f68fdee7722dfde2d4f9a17c057b6e8

          SHA1

          d88f10caf583bb5d022d05544510981572c29658

          SHA256

          80a197208a7467b75175dbb61281bce69cc175e2161f7bdd2d6668cb316b02aa

          SHA512

          ad569dfdfd56f6c91d6d86a83d0e51616587371edbf413806882e790b3099ef04dd15e7677b2cc5b2bebfd27d92961667fa076d6eb6fea53bf4e6cc9d9724c33

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          baef9c918c75b877c8d444b55392ffdf

          SHA1

          47aab9446c52a18ce1f4bffe0068c166706fbdc4

          SHA256

          402737844912b2a232a0b4399c9d76940f7def7f763a4ba2ece7226dcfb2596d

          SHA512

          751e48690a09eb8fab5ad29314f5471424e04335336a23b12cb3b3e16145721cbc7dc5db926cd4343737845ca96e5ac6d78f36800156f954c109802e84212150

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fbd2127aa12692f4d451993bdef11278

          SHA1

          7f179d5b472e26fe58e885cc099c0d011b7abaaf

          SHA256

          8a822e470e98c9e86de79c449bc63fb206566857d9f0bdb44a0bf105719a493b

          SHA512

          23ad0012ea3ff66e749e0bbf97f51ea5c03978b8a1c85d86c5f7a1cbf55af46123b71f72a0433ffe9b5daf738b90cf30b0725b9a84e9a2aaa6d53a8ba58030d3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a98f21e8400cd5dc3e560eee63c6b93c

          SHA1

          c5c3af3d397eb2ab22e604e30303468e2fa8366b

          SHA256

          b507db81b5d95c5ce48c0cc84312d36f1e62c8da5214200290a9f1a11b0c0c13

          SHA512

          e1b6f4e8d2374fac0127bb5ecd952f62cacc442c3542f1e32c4050f8c50ccb88462e6351b7320b4c185e5143303ae676e549120c0c0f73c31952c1eded19710a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a725f8c1a13313ced25c149b564cabb2

          SHA1

          95b408113b25dc75023bd838edd27346446c095f

          SHA256

          874772da5c7040d53ef4773746d942b370962f4fe33c19e027a9d934bf6e9dd7

          SHA512

          d60f58e419ea8f6fd430d8c93b05dd7d50013e5ab6aaccb8ff739b45e104939a5e7afb889b8fa6c0a237ea3a4f8a693753c4b2f6aa157ffedc11172a919037aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          94f2ebcbb848db6d521ea0bdc93f5b62

          SHA1

          cf0ab84e9a5519874319a7bb1095074a1af90629

          SHA256

          84582767bde20da2d437e79d92708d554eae87bd75ec09880c26670827b313ee

          SHA512

          e2645c5b4fab461bcb45befb2cc32472eef70d5f8128ab7b880d94f1f170f7c7d686a436e1cd60c6299523d89e04ad613d8e9a3458f27ee5b5541f604966cde6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a58084249c6b3d379e6f90f944d46192

          SHA1

          c2d71fb49713a435d96e345729e9864e4dd79fdf

          SHA256

          7c1347ca9eea908328f9c24012565b46b62a5708d1f797db575b4812ba62cfcf

          SHA512

          3e6631111e6ca4ae8e40c11090317f33a4cf5d8d6581acc866990effe67166642d1b29bf742b159804cc41f47c16e7bd13e7d95fe4b1c7de94e04f1db9746413

        • C:\Users\Admin\AppData\Local\Temp\CabBA2D.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarBEE2.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06