Analysis

  • max time kernel
    136s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 05:36

General

  • Target

    10248f34de5a15130ad524acb56a0267.html

  • Size

    11KB

  • MD5

    10248f34de5a15130ad524acb56a0267

  • SHA1

    bc4e6a4fbaee1a9eb4d392dafa60503c74ea97a0

  • SHA256

    e547f8ce4debbaecfafd76c3f963f7463455cbc9106f0f5a07005ff62866f5ee

  • SHA512

    49c66ab41292f90745ee6747d6aac33f4ffd35c3ffd24b73283ffd70d18aa7d52c85a3a687b46cbcdaa5d23d15985d72827bdbc780cb95458cc0da9a9add5633

  • SSDEEP

    192:2ValIsr0r57Mmx5T8+/w1wvqa1pmuBuLbdU8d:salIcIQmx7/ggpmguLZ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\10248f34de5a15130ad524acb56a0267.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2204
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2204 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2016

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0a62792ddeca820d900e625eccb711d6

          SHA1

          942e44abea3b3623940e9167dee7a9f3a713afb7

          SHA256

          d2da2ab3552c7da6792d86f9a449915c15344b3fc00df3c381639df589dc3c33

          SHA512

          bc1703103ddfa725c5f6926336d3751cebfeabc81dcf5e70a08d5b9631d2325057c90088c941031845e28c81e70ac89c39bd902183036fb32eaa76e8183cdda9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          780688bbd297563516acaaac6273bfb5

          SHA1

          ea8e3da9030b9c22faa0f07d360dcb49ce062f0d

          SHA256

          3b14cd2fadb4d12c13ffa6abbad01551574bb277cd983d7c74b8bb50f9ebb43e

          SHA512

          5bfe173c92b84baa3ef56dff891c72b7701a90e305149c6574432d4bdf7f1eb8191b3fd8c7e635c89105376c9abc3b224fe3cab89e7064bcf2e13239910a2727

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9ccc08528ab44d9ed0f62330f625cf27

          SHA1

          96c800fb85200f8d692a8651744a8c4ae986e1be

          SHA256

          fd31c8e42ea872e291e1ec8f326ba07d1fc7325ecc998294595cb22017c1b920

          SHA512

          b409eccaa47e13e1f727e50a4aa47dd6de201144bd604399fb0ae9aee348e4aa164264f54dcb23b6f02741179c8deec2c489eedbc2d31804c4020b506aca4a63

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          aab330e845b80454ea3c8bee034387db

          SHA1

          1108e35d32765f3c20d71d408e8c0b950e8b2aa3

          SHA256

          01b4716b44a5e2281bf1501ea33d0cdcee2e7dceba29af908465291a28123194

          SHA512

          f5f2aef034136f97c78175c6f89b2b733d0f3db22d4100a01d95d5c6d9686971ab1fc091bed6fa6bae3ff93759e61a721490cd7fbb8180872a3cc2254b429ff5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          703f72d49eee60c96a4d9a2522a0dd75

          SHA1

          b7a66bb40e4c3d2abb6eb5723c9c5571c6e655a3

          SHA256

          3085dabfefaa7a0a953cfe188316c58c35dfb5bd783960c7f0166ab9733f8e01

          SHA512

          d0e2880e60a5fdde61707acc344298f8bdb5f19b6d7bc88d652cddb1960e0920ab251ac4a2130406e1e9eb8317f510869edd1417b1c008943abc02590fab2e22

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b7699e3f7bab4bd2c46db6c46da769cc

          SHA1

          8389ee53856c4e85e7d2a32aefa49d92cf50d8ae

          SHA256

          980a95410b11e0ad689f5f2e6711e6238a04971e10d0cbfc7d78331f60b7ca1f

          SHA512

          733d79e8a9a3af45d7fe02a68aa0c885aed6bc71c4e4077302ff8b2e68568a30edb726b5ea7cc296b0e3e3e2165c940be43da254753b3f3f30536e0f994c5754

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f74c0f7733cfa3ea85e19c08ec7d120a

          SHA1

          daf34f633c205d27d23f80ca7442f62c660cbfee

          SHA256

          612a3e4d5e93cdad07848eab35f093387ab4778554286c477bc12ee2c7cf8996

          SHA512

          05f454000b95768fad05e4bc909f40b3df59c8ef3c2a0d4bcff2029b79da73688794c09fe82b31cf26070e86167221ae0ce3b3023f84370f1220e7ae2518e47a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          04c12122e25dcb7fe039187b85625e2b

          SHA1

          e502fb00a1f43934e5a629b31ac19caed820ef8f

          SHA256

          0615e9da2fa8aa118543fecffc662a0a944ab6375b57c6b4ec091a53e84b6443

          SHA512

          144567f17b40fe8cc19d8b0fead0b0f175073da64531f0a531a2d69b957bd9f5dbfb321bc2fe92a61c0e87c9a6e74e6956aa281efcb93b3efc106162e04eb5de

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a565938f94e0d2340d1ce8f548cc11c2

          SHA1

          bd6c5bc25c2f3ea1acc91ea67eeee58def772705

          SHA256

          dbd90086b145183ec66aaa895e7de52016d9dffa03f5f56d8eec4e32213bdde8

          SHA512

          8955109d9402b721515292eb6e9da423c8fd96cdb5a8fc245edf4040cbc82ec9c839f83790836e7a5057b68e63a145fa29a0b1b3f08182f122eb2485c2a67227

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          59fe20f8ecbafca7ea11ac3241552059

          SHA1

          bf07337be6d61fcd00b0bf620b2ce371836768fb

          SHA256

          7afbfb06575392658ebacc3627afab58ab6611c850b4fd07e9bf29e014ff3fc7

          SHA512

          0f65a4671dd5d111190b6bdad1469b608f28a7000a8fb22206e679e2fa2b0c3e7655309edec189f9d84af459c3f48b5b8383e5e00063edd1b23c827a2c0a128c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          587be61363b6890676c4cbf4471a94ed

          SHA1

          58dfd3c7f1bc44d6821d0f56f35ec0d05f16f919

          SHA256

          5e43a99e617b78bde2da8cd6b6a5615caea99b43f535dd9e4113bbd8732214ea

          SHA512

          48d2fa4095fa06eaf841318222d7c463758e7cd124c35d2c7b42b87afa275ddf1225ad5b3417bf960f58904eadc364e32d56047f9401a16f6ff4b79c84233a5a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4dabee5f25a0b4a1cebad60b13521ca2

          SHA1

          659700b0e6af36ac3d166f8939fc69364633a195

          SHA256

          2fe694ba8bb8459beb6402cb4597769ce3c28b67988ae09ca5fedb733ebf0924

          SHA512

          ee313a3d0f6544325f5997f18f22daef2181780ef3ea4e95f37320451bb18ac9d286a2c2b0d51b741f68b89cc86b53c7dcce228397a908fa722b5f68326a1952

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          989f4b9d10eb87d6ece4ded73a20c9ec

          SHA1

          6e8becf878eea9ba451155d85ae4d7b484f7d20f

          SHA256

          22fa0f1018e38f5487eb9982ae5ce9f6093654636116fa86737be92d41163331

          SHA512

          2427e30540714e7e7fd3e330afaa4fb2ce74f85b2ead5f19e794db6b7b7854589cfa32a0f02820ed6d65e01276e2739ef1736b3d6da153c1153ab4f8bbee2eb1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c1a965ccd68b0d917dd0833e48a425ae

          SHA1

          87b17d5be4592db36d055a0b8ec473b2d1985727

          SHA256

          cff68f2a785e1467a828a4ac4275f1cb2e49097fea916224170a1fd0a07edd60

          SHA512

          a2eb019c4a15526efb373820bbabb20c77d1ef31fa36f58ebe02c4bdb26eeb659ac9781c2bb7d28aa0dd8612fa44482c941989a2aef84eebf25c0897292b6580

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5f9b3a43bfa6be32dec3e4b091af1827

          SHA1

          369d944ad7b18ebf7c69f47ecefba2ec87ee2382

          SHA256

          7c41fcdf05e21c9b13e6fe55a572ec30c013ebcc5eaf26cb99c0664ba3dbc8d7

          SHA512

          b23abc93fe4be18979fba9e167cbaeac7ab41159880ae5dce9ce129252d6f483c9839cda15788dfc8541d49fed9c21a105af96415fb9c8c6daf7e1ac5237d111

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e11ae3ab5214e50a25cccb41571d7997

          SHA1

          2c61d31da69f679af9a75620e106d617b19f5b07

          SHA256

          18894a645bcdc5b169749b9e0202507128fe33fc2fb1d2d8b56ee8bacfec9550

          SHA512

          0d6fc767a23f411ae072ac65ee660cdecde7fc81ac263822deb9c1afb6d19d42dcea7e203845eec4a8912875846514b915f57b73f72457499c8af7800f6dc08e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          07c5859d5d27d0704c53de7f42ddf3cf

          SHA1

          212b35ec6a0324c6d5a1bd6bfe1b76507eb91995

          SHA256

          2cabc7472cdb87bc478fb6f5e96e7109fa0c72909d5a037b2b21b9fc9bfe72af

          SHA512

          9c1c06d171a6170f4893ad2a02c70f643a050e03360b064782287b514b093b131139b5543f075b685527ab561159563e8ab9d9af6c6a210ed1879f458fb896d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f157414de69c562a26d706d4c3ff237e

          SHA1

          22484752bbe726148d4d4b8d37bfdce02c1f92d6

          SHA256

          b1befdd5f4c5f94b77e085c260f95316ed2e46855934bc19e8304d5332f83f75

          SHA512

          060d8cb7d703be5ec55175bca0a0096cc697a3dd88ec10923fb6f2a8ca0232f931f125f59a977f1a5e4560e0bcdf25da88c7752fab22a34dd7b9a538fd1c5abd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          93114695b94de05b15ec8750acd7ac1e

          SHA1

          04fa5db800404f49e90e9f5a91abb3a9b4558bdd

          SHA256

          2714a6f3063bd9480f51cf036643d58903f75a58eba3ba9fdbb92d9d76f79c35

          SHA512

          8defbcf10926b3ce48af5693f60ad4ed2812362f0637e9a2902f8572df634d5f294093441648fbaa9c9980a91477bf703c21d6215cbac252903f210d5194b0d1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0e2df4be1c15ba3b533d8f8e3b03097d

          SHA1

          25250df03d54458378309b117ec8b8235e819026

          SHA256

          299efb4723177afda205abcd71776e829cc1eaad0ab9778e1d4294aa80e5adb7

          SHA512

          993e038dd69872a2f29b5122421c56dac419b825247a5a54af665236b6f6b8ad615d5a3d103c6717cfc989b5d69fe0bfc88233960609b8a7a2ad1ae400f442f4

        • C:\Users\Admin\AppData\Local\Temp\Cab86FE.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar874F.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06