Analysis

  • max time kernel
    142s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 06:08

General

  • Target

    10b3455330f15b54da1abcf3e2ae69ce.html

  • Size

    57KB

  • MD5

    10b3455330f15b54da1abcf3e2ae69ce

  • SHA1

    39b4408eb63d48f2459adfe47953dffa209dcd00

  • SHA256

    91129bac2a325486cf588f012ca1cd1c1a1a8dc35ce4f3c5c3add1b34910aa71

  • SHA512

    4529ca1d19cdebfe9eee06deadd277d732ff859293bef8bdcd683f0593c7589be61198a2974ccce247cb891f37fb01a376e8f513c85cd292e63709ca28526203

  • SSDEEP

    1536:zS77HgcHv7oOLjqV7HRlvNPX3w5abFvbO2KZM7nTfS6185zfFMB7hR3oO1IRBt:u77HgcHTPvqV7HRlvNPX3w5abFvbO2Kl

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\10b3455330f15b54da1abcf3e2ae69ce.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2332
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2332 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2940

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    5684d17c19c43c9f1cc2a8d6f645e060

    SHA1

    42545fb9d911875f3f55f23b03a7cdeea158cff1

    SHA256

    69d08ba46c1be6a15425950f473f64451adbe8c8b395adedcb49ec87a556ecb0

    SHA512

    5b495352902f0137607a92326f51197363af5b53c268cef344ac8d16f4abff3263b7f1ff2cae88a0dbe62fbed9b2c54d6eacfda504d79f11ad930d1adab86f0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\265C0DEB29181DD1891051371C5F863A_1AE11409F57BC5D68541053A9AA94231

    Filesize

    471B

    MD5

    234c314ec43f13b83d23a4d4c8c03850

    SHA1

    45e73b1891aef2eb4a95ff43720f61cb0d4c7afa

    SHA256

    8dc976595b63fa7110dc0fbafb948471bbcc4732a3715ccea850b41070f90f56

    SHA512

    1a8e2a7b360e2c0b3a6e6c8bdba4cd7470f931630059a28ce2316b54ed0d37db035756922648d976504407e7222c1e21e44ec6011c96601e4757dd25c490cd4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    bbd9a72a849c231789dde73ddd8e6975

    SHA1

    45329d87b942b95b4684b602276b2e232c1f5e43

    SHA256

    3167b91e4b02b0a88b838188996e4e38e550ca89d713fdaffdc4d4c53c4272e6

    SHA512

    8ce756e19595de900c9bacc4686d105bd1c821f3252e10346da83c3510c1ef2631d4230146fd482b9bd6f185a64a7c6b852837a1f9db7ce6f5fbc4145313c3cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5573de0ffa166a3c13ad2f182a758275

    SHA1

    11e383d09d2938c6be689f60c475d6d80d60afd6

    SHA256

    1085308170f2bdaf4481459b5e5271e3e50c1c58958d13d0c759ebddd88a9d95

    SHA512

    8d67310e786efa2eac0e9395f69d9b0b2c4aa429930b7a6aed4d28707d30ef18633580a482ee676df914f6f094a6314dfcbeae343bf03228602e0cb5305b81ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e4a2071b2a9f26c4605885c2306de74

    SHA1

    4352519c70547cae2da0c745aeb0f778c931f387

    SHA256

    583853efa9f7bd7cf2cf2a89610e8d310665df4fc81937cf4c05259b75888099

    SHA512

    ef294ebbf04bf3caacbb26f086e3c37fc248c295b7fbd304fb18338c80f6c23f257af7fcf22e60a0610cd4b3ffa068b299e61e08e6cc09cf714aa6abb3f790ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b7aeee36074ba578f405a7319df66d0

    SHA1

    15356cd33e1248f45cbb354ebc20e2d7fe208e74

    SHA256

    7a5b1ae7e240681b7722a8deee9c47eac7e2e23014388b14743ce27b40c54a8b

    SHA512

    3c483644b23dbad06c3c8d7476052a332632bb111a77aa4597fc6e45be603a355850d8dc8218d9f7fdc34ba854adbb80803d78e07403e3346960356ea686ab99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b83da0504dd33ce92d6f1cb8e77c419

    SHA1

    cf593469a31e2794a0a7092307305c98d2c65f26

    SHA256

    dfb7cef369c3b7b0a873106575fb6b091e1a2b7dedbbbe1a0717b0d5b68c25b8

    SHA512

    cecf9606f6365275c6bc57465f69b31dadad5cbfec6f040198337249d98a57ecef0d304881f5decec30bba571ff095d9fdda4b44b3cd5be2384a74f0915da5aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4a317ce86a26410c2f998dc7a8d05f2

    SHA1

    a539f3f063f7d8fe6328cc44dabbe4f596f97bea

    SHA256

    ff5d8276cace6ca4ef045ca3cf8e21ac1ae860e63a9684e1b9cb50d99fbe1309

    SHA512

    3d539f6e3574ed54ddc606e240c33f7a6f0cccaded321a38e114e9466343f26a4e55e2cbfe2e24d0948b36e3b45a82b5878ffcafc64a7f6f4d0360b989242aa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5a954a20362f148efe9432f4ac15015

    SHA1

    cdef6e41988bb96cd97e7b98eef9a8346864c0d9

    SHA256

    05e2e67b44d6630c5b8af8b54f013c1beafc69f7f80e160c49e915deeb7749cf

    SHA512

    930f053a8a92697808ccab498cc81a83fe738371332886731de1391da23458cee6a23143c25a087be88d116a87cf2e7934f3979880869c5cb8e7d820121aba3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    736bba6a90a2a847099b28a4c419349d

    SHA1

    f81c10eaac3d292209656219387f6037ccbcd5b1

    SHA256

    e4afb543c259ca08fc3d732ea5ea10f5d620011ada0d23bab3b2cfc86540a9f2

    SHA512

    3d5d7a3ce26db151e3539f8b940e6d5fd4ad79c81682ed2e8b953e6fe26d74b3f9368dbd930a74a393c61e8b1f171f46b1c8af784468c0bb3c438961ed511189

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90824ba493a07929a280262c43cc4278

    SHA1

    c36f220a663ad597d5dca9a93ffd3336869e528a

    SHA256

    bfcced272246882f843b1ba7240d2e85e5fed88588365c9749936e778dfc23b8

    SHA512

    a4524338742223b0bd068893ddccbd69aa183c00c6996046146ee84bdccb7503285b428887d090bcb8da90b59c82d58763c72bb4d385f20c4d6983ac3a93b82b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b810cc2f65e09564a195ad0ff64f097

    SHA1

    527306d289d47d9683f040c3ce2f6cbe188182df

    SHA256

    0a8e6145fdfa8f1230b6939b73ca50fac28c717e008fae381dcf514449519ee9

    SHA512

    b197ea8f1631eea0dffbfec649b78080f455e31f084ad18c968d7c2811b1a588be105ed6e6b506c38daa8f4b94f62e3f5d7d7704d67ac367711baa643e5ee207

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd9f5825b139d9dc34904dc089a22fb2

    SHA1

    7f38ac9021cdd43f7bf1d1a1158dde93d0044fad

    SHA256

    571e583fb951350c0b65a06a73d9b6a68c813dd70680e4ef4ad221f0a053d33a

    SHA512

    ac7066d9a44440648cbd59935544a6db8ff9de46ff22675ac743a1ebc1cb08d7752c775cab5f47507824ca4774102387ba3e3a94d8a3f517e21b495df1bcc9e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ae59101cc3df72a7238bb14de9969b5

    SHA1

    a1a40d0040d9678a0fd97f2d9001a77fe72e8947

    SHA256

    a8e6dc33191e58e400c0ef149bae685901d2990c33e264c0c655e427d4b249a1

    SHA512

    ecd6ea0db50efe6ba5479c37c38c1b2185d0a0ae1058011484fdd777942fc660a6a97a63b3a0b4e5735341cc61a44d0a811af7cc2bb8ce703cf674fc41c3d6db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e351c7afc22fa2243506bfcfcc9d1f3d

    SHA1

    24a979f6b29aeb3b6815399ad201781d8db61a8d

    SHA256

    5eec4f9ef54266bd8045e5d444b42b26c5924fa6a54ae7e254e90c4932732e5c

    SHA512

    fcb03f8939f5278e814b9356b89a5c5e3354d618486c10e57f8406887d0e26035e30290225f6eb040e29658e2eb0817eccd7a074030d78109a0c84803cc75493

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    c6b630040ebb4c297ae9bf53f1e9c04c

    SHA1

    3cf71d883fe5ed2e23630ab0bac6481f9b049486

    SHA256

    dad9817b87997534716ef630061c7041de2bd748e091ebd112914b6509141ca6

    SHA512

    2da84170ec6998cbb7c4a8c3c3097eec2f774ce6ba4c065a5e7cb72f8837fb7cadb0ddc1f0fcfe1622635a206b3046b7b3325bf72847d15151978990293d6c89

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D0I6KXNQ\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    f6140cf2e81a9d5b9bc96970fe1946f6

    SHA1

    e18cb20a08d0c13d44b72e36e9560aec2187abce

    SHA256

    68cc8a99c8ed5cc0eb3aa2146fd34bee0051bfd98faa3c03b83c78b4a12a8bd5

    SHA512

    1f61bf7228ae9fc1b36249223f4ca0675da05beaa6c00b28b7fff500e0527ee237d139eaf6793ece67f8730dfff0207bf945a848795aab7c57301433449a8acb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LAJVCBJI\cb=gapi[1].js

    Filesize

    133KB

    MD5

    288c5ba5b7001fe841c32f690f62cc93

    SHA1

    29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

    SHA256

    c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

    SHA512

    e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab40A8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar437B.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06