Analysis

  • max time kernel
    118s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 06:48

General

  • Target

    116dac30a4d127803133b7584d86f2c0.html

  • Size

    18KB

  • MD5

    116dac30a4d127803133b7584d86f2c0

  • SHA1

    61337acc94430311e5d6c2a42fcad395e1a02d70

  • SHA256

    e4c98ac61423b2c4d3415b9a9f15f29c04b89c3917ed4789d7cc64a89d87c421

  • SHA512

    3def8d65118a20d17750026fa6c8b25b593d9af47e448c12e24adaa9cc8387983263fae00a9c6d5dae6840e7e053ab7dc00cb4a37d52529a2785f0a9bdea357c

  • SSDEEP

    192:5UOe0B+4e0flzRTu0xg0qXuJzhxrl1yCe0532x6xKa3e0EcKBXjlO2LCaH92jI2:5UH4+p0lTqXuJzvKX61u34TjI2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\116dac30a4d127803133b7584d86f2c0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1732
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1732 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2240

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5361a5b9e9663fd6936793f965dda144

    SHA1

    96c30f6a8b797b0d4136336c77128b9b977e301c

    SHA256

    89ce2760bc94b649e6ffe8050db910d156e3e934ff9873d926b27a9fa82c57a9

    SHA512

    19bba184024599d1985af296f2f8d2c9e50985293a2d6c08f83af6890c8b9c7065113853296af1a3df7a2a13d61b2e29e55a3ae499b9ad5241edcc95bef54924

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1898e553167e8998cd50708dd99c53f

    SHA1

    1cf1eadf13d22b34f9819505f24e0d2363dace4d

    SHA256

    8a2fdd2708993ec14c59b067a3cae0a5d70c2dc3e9b59ffb6016c5b9518780ab

    SHA512

    f2578163f6e8bba1a0513ddb4794729e8c1546f7873f4e31bf95bf5489508c0881b15566f2d76a849413423a01a825007406d333170b96aae546714dfaeeedd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97d38b0c96721b2ce19418cbdd1da52f

    SHA1

    b8adb4e5824a9e45c98c14f92c91b8807925f97e

    SHA256

    b76299bc504bd76f8957e996d88db1e13d2088f639ec1670723ee3534c7d0d18

    SHA512

    ce0f925a42edd9f56c1e53b41285d7838390a2f192b2e291edb661cccfff7107d56410e63b2ed525d3ba0f4b648a7076a96e8ff24e2c83a8e09883c8140abe14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b3c8f2dd1bb39d4e5b0c8ce3f2492c7

    SHA1

    77ff2a53a28aafcc67106cc02ee51fbc06dd7be9

    SHA256

    e2590febf2ab951ed1875692936f590f8859f2698e25abddfe57d60b2c7dc11d

    SHA512

    2c4e96efda1838bfa06ab8a75f140fa8558e4fedb6168fc78db2189313ffdd59f4b671709311100b1ea32f4956b0a060f7348ac788f633cf8d6f5220a8cac9ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02791fe9813d951df0f86fd6587ba3bd

    SHA1

    1bcfaa3fd2d8e6fc94dfd51b26d2753f2e68e4d9

    SHA256

    dcc72bf4194b655976ccca0d358d2260dd7055a69b0891815fe5974bf16161b3

    SHA512

    73cf5775f08bdd869b9607e87e0bd3f84c80e5ef18a64a473b7132ab8ea1d60077fdc75d9d253f21a72c951fe40aa1aa6af197c67ba94c0bd584377941c2b27c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1602439316fe5124a7c55c6e6175d2e

    SHA1

    6639d4564ffa3ed2e0f7f99d0c54f59d2a719f1a

    SHA256

    077c87d3d6f72fccc5b015640666671d02e440c5ca6a87c65dbd9b7ca80dfc76

    SHA512

    07ce1cfecd65cd925fd5c392fe6cab5d1ad8007913df6bedef1ecfc36730b5b0bd337b9f425bbf38262fcf1244cac759673ddbde0b1ed52a7a68fc485d293fd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    add44c38953c80a5a4e9ad3a886910b2

    SHA1

    7944f0a5be251ad77ab71f6b186bb497dccf0a37

    SHA256

    eeaab7f45247d136551160c0e7d16a3b645598fde6024254dbe5d20f34d87112

    SHA512

    930fbe071dd58a255b0cf09dac2f7c20ba76e4c530f14573c3f80bc79fb10d087862b2851a3654338407de1bd2b5f3f7df8dc2c17f1d3be03005e4a4d718a8dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d6349eb6928401a23881a7601aca828

    SHA1

    ed8d068c3fb733cf7b835e1ec797aac59a381f40

    SHA256

    60252f7fa91c7d178e0fa2dabdae351bdbfde2238b71db21bf08f98d8b7cd3bb

    SHA512

    4c57dc946fc60fbc6253ced59435129a0619ee0d51b90504b5d03d140506e48951ce593d18dbf2f570382c92fa90d5ac499c2bf5ee6b234cadd91a54a873796c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27e6584269936ac73e51a39aaf6c0753

    SHA1

    3c702b75b41d21bd2577bd618226dcef673d113e

    SHA256

    ac8a3377d74cad82b4733ac6de96776750f81293be6bcbe3f0ff282aaaf7d81c

    SHA512

    e75610f9e8049e80ca5ee948b5e5205dcc275f200cd28bc55e5ea8775566c73a1ef422fb4e9e419da4aa027cacbb4a2ca1faae2ee95565230726c64da11a2a6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    042cec53c6cbcf3ec175422bd86a4265

    SHA1

    6540d731fa7bfee31b3749a15aa4e70558452e40

    SHA256

    b60b2b98bd30ba4fa656eb15425c10320dcc6f3c8af7349bde0756d689192f90

    SHA512

    74339405afb60f2c3620fbafc643de3e2bcc728de10c69ab62238e2d350e6cf56a3ebb07e16b490835a82c56adb503232dea259d7eeea3a8a66bb7169df7744d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17ad8f45c6d5e2a7d5ced6d6047b0259

    SHA1

    7d4b6ee452a262baf053c45b6534b9048e2e3d8f

    SHA256

    d57f2d35d384793ca2e5c0cdf631d39f6fe511b6abbd08d7a48a8b3d9d3faff4

    SHA512

    7db14b58a8acca578892e94c65d3bc441f35be5935e127a8fb0ad24f42ec04d9e672dc46c41534c907c6cf950f011b7caed2c5125e4b854532e8cfcfe9e91c7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14769b5b0834cf4d8f206beecd2455d6

    SHA1

    cf552b0e80059d4f9b7dc970ae734d79aa14f081

    SHA256

    2c0410bf3dbd153241ade39311f7a64fb9a371196ca4f4819671df2325246542

    SHA512

    0f954c083df07b9d564fd9df66f46196753f1baf63e197eba1e687563f127cbbab8bb0decf484b48d541b97594dc8c7654457f2cfa6bf9ade8e42d68beb6df59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da329300c987676d5fdb301dca1013a2

    SHA1

    097f8ac8bf7ff39d6e71114a8270758985a6c8e2

    SHA256

    68bee1aea2b82603d6bf8d37f5978d28cc3252e5d0a042a1d43b5d2459769769

    SHA512

    64644ed3ce878234c40e7c530b802a2b7c2024aac0f7081d2dc213d935fc11b7e232913b3915e49df943245b81f01a254099706f7ef48a5bb1c8f8912509e4e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8581a75ede4e99445b335567a4e4946

    SHA1

    c4095640c6553831e2dae89ca51de15b342197e9

    SHA256

    85e6a06b02f83bf7a7ec711441ad944af8f2ed9395d6dceedef374ff8e52a829

    SHA512

    3f38781d7db859d87b2f13e6dd36a1378d4ccac5e5431fb1133bdf4e760192514ac8c26c7c097770f646f85aadb8411d936ea9da336ec2231f4c31e904f1481e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbe452af01d1b1d6893ece435d351260

    SHA1

    4bb9ee080cd6af878e1c8e09d4ce981a255182ef

    SHA256

    67f87621ef3be8aded54210406d81f401f374f4188bc8667964cdb41f4df690a

    SHA512

    c70d130aa884c1863b94d0988a5117c26bc7624f6d4510fcf19460c79add0fb8fe685e1b7a0e83026a47b791f1333fc09800770ede21c56ee6f3f4445e3041f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40b476012c5dc56b4232c2dbdbeccd88

    SHA1

    ff676f9eeb89f0954f117992c130d0acd7d899a6

    SHA256

    ffffa6d2fcfc86e3a02d30e0453c2e2a60d7f7d70383b60c16fa08f769608529

    SHA512

    3807f9f1ef06e9f5b51e029d969b9092ebbada408727fa33f3b43042504c5b3b50ac6aa98a7bc068e0ab432558bcbdfc1195dd4cf9fdc956cb4522588c6e1312

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbae0dba18f4a2d659cb7d8466a84ab2

    SHA1

    07c953c4b1dd34107395807b5b571b0d0962ccc3

    SHA256

    82d68fc1b8eb735f6ca7f73d82622b4d7a4f19f28f880cda8c5279f16edc8f8b

    SHA512

    e670aca274dda6709358b21f63347af8994f7c27effa5e9659fe3e906a63292aa13ca73c76978fc00388ba556f0eaba2f9c8f256a2338ad8d9fca30a37731b9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a767668c3f32f0cb469cece8ee207bca

    SHA1

    834db9e1108d7c888172390f0deab7269269988a

    SHA256

    f6d34c0ce2e950c828e2cb4c7fe300f0f272d6eccf80222e3247c447e1ba52a0

    SHA512

    2517b5ad0f0b2a26ac68b4faaf2e80002f14c75f5ffcb7842595a5fbedc52a4d97a85ae3260f5bbcd730faa89455d0ccebc3e844ff12e68b4fd65db9c7eb8a23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    790b634f849fd6b842e7f104720a26e8

    SHA1

    c5a7f765729fb5f4a41327e4735a533bef643937

    SHA256

    4f2cba7e6859dcd96a3a119bd9f37eed3cfb4f06cd3206bc52ea408c0f141a06

    SHA512

    23f3bc36203b428eb51ccb3d8511e74ff43b0b3359e79bfe6fb7438d21d4726aaa3599f64b9378d9da3e4951a1752931ad6bb3b81f1f9657a05aec47c062834c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51c371ac123da3b4a81a8d76ed2692a1

    SHA1

    2e6d1906dcb5fdf7b59aa7d03677cbd799f5947b

    SHA256

    8ea45dcaf1bfca029f5950bf481a45fe1fe5a024c5155c4302238ca73c5a3134

    SHA512

    c8c8ec327df04e91706a74782dc51fdd18f5752204bf992bcc49a66d9521faf7d089bcb3541b5911610dcf3b948124773c368fd36f7fd3d9a6c02b8d789ce292

  • C:\Users\Admin\AppData\Local\Temp\Cab60B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar60D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06