Analysis

  • max time kernel
    121s
  • max time network
    176s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 07:40

General

  • Target

    126525abb7db3b6759636ff787bedc48.html

  • Size

    3.5MB

  • MD5

    126525abb7db3b6759636ff787bedc48

  • SHA1

    cc8aa3f58da7ad5b655f9ce831f0971df4b6ec2d

  • SHA256

    58f20c49b2921a4aca3da6f13b351ee6fe9e2d20ed45835ddcfa8c703101e4f0

  • SHA512

    7f55c02fefae9baa6d8f09fefb7fbfbb2b08fc272e79bd5ecd5dd4a4936b720f284d10c4333f62ac316d7b5c87a4f29090db77f1b1da1955afe86f63764884bf

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nfq:ovpjte4tT6Nq

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\126525abb7db3b6759636ff787bedc48.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1612
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1612 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2796

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0980afe3c83d66e3283741067e36a15

    SHA1

    296bce3c38a7892e8a6bcf543f2452749bafaa7e

    SHA256

    faef5b35770827698157e4ed01320c3fb645b08abddb1f3ba0c11c471cb45220

    SHA512

    7b48ce4e6eb14fb5af0471f3005fcfbc69aa0c1d23d073c855c66d7339e4d70a6e608e5bce7c4be589d1298a39a3409b8cd0703f825d4b172a320de7951fcaac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c617a2de84b6916f6e7f05f3a2649bc7

    SHA1

    6f641122701b20707efdd59bc36cd24cbde37fe0

    SHA256

    c01f91bb2e85359535f77060814a4128f7e30e32ad52f9e16d90d61cd6328d4f

    SHA512

    064f28a82c5bcc15e68c3e333592cdf18291dece5c5bf3de0566ad79e4dd91967629c3ec201960441e4eb57f0b41c7efee4cae7e4d789c4000e98eb4cb486e20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53f968c4577d04098f6490780fb28b6a

    SHA1

    4075659d655894b6d44a590fb361c444f98eaf8e

    SHA256

    83749caf41934a56130c06b2a6438e84db6825520f8a884643e1e4cb7828fe13

    SHA512

    66c10f36e51af1d898cb103767ff7424665bae9d704d5fe536839475203730daf94fdc14c4b18ec35f68c321ae57b7acfc2c3cb4b3eca6c9daa0dac35a1b75a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    631cf5044d875b7cacb9c287e9d15738

    SHA1

    41166f08a79106ee2a18d27a4a6def5e0fab0a2f

    SHA256

    4b9c7e827a75003fb8ad3a31f93f71f826ff194c69032cdbf35ee8d8d943e795

    SHA512

    afa5d04c21a46220e38f8e3460af04a785b6d323475ebec319c656a0921ba2926325e63dad6d1f62e64c49b50302ac8b7dc5851e20042dbaef6b1810415ed2b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a43ab599dc46088352f6509c4f2d3f9d

    SHA1

    6e77ec21d9189c9b4a74d0f5d3fe69b82072f29b

    SHA256

    8877b42fe1ccd6d1cc2e77b9d9c49100dc91e49fcb4a884480515ebbde2ef5ea

    SHA512

    d621ac55204f5170f656462f19ae48d6dfd50ef405a169af1a647405cec07dc5a478649cdb11a9bfcb561037b68bee5735e574b7f4f545358a2dd91116c058b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ad57350ef42114516ebb0e7ed7b7e38

    SHA1

    b1daefaa0a877091f2ec66abf4f4d084b8f8e626

    SHA256

    fb9beb8f47cb7a7588a57f431628dab35015b9a3c8644b3b7bdac0aa8915728d

    SHA512

    d528ed47a507dd516fff43c1fefe34d85ec20635a9a0dd7ed88482976f5d870e12c38691b6e0d86ce9ea5a9bdea4c02d87d36ae10fd4e4c5e56545aeb837b36c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb2df6cfb8d7b6131503219dd8c614dc

    SHA1

    834b29f4499d27e9f029c156372bb1e98c8c3b49

    SHA256

    44cbca7564d6fb7f70733f15db4f5e6598c3810ff56344002932816f1e0013cf

    SHA512

    428e814c12df647cf244725cfd5f5693162c8849d5aa512cbe0548746df88d351ba343efb119fb965199a73890d443240813cdc72b1feae3b8ddb264e4d74971

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b08bbde58078eb0e413362891a7263c6

    SHA1

    e45021aa0631b5237eabdf5594584a80e66de544

    SHA256

    28a2d585d0e9d20f4dbe2f895816181bc97aa9bc1958f0072b8e7a80b4304202

    SHA512

    5e62329894e1ce0ead0595cb95ec6d89a49a3c7679bd2001e11452612e688f698313f453180df7de40c5951f2fa7215e718b5b37277a41849a995b852e407b0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dffb5f49212b60a661599fefe36a12d1

    SHA1

    43885bba22e115fb5595012dc985147af68208e1

    SHA256

    1743ea75fd07f7c4ebb8e1d555750a47345cad232ed8aa6efc475457abbab83b

    SHA512

    68202d4c117727cbb3d6b906ac553ff980fa53a3500fb4728b99688e038d88e3cb4eba883883c119cf3218534ae9519d711ea447dbdd05bb55ee2a3031e125d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0a242b17d3c89ff57585586a97579d9

    SHA1

    84be99293256421df8623a2ad47aaa67d9a3d912

    SHA256

    496be023bbc9a9018f390a470af81b1334c0b5b75bd0a205d688207ad650d131

    SHA512

    ee7fb12b4003e5f25bab5f3fba26b933afb9fee820b74cb98b2fc8ee256cfc036f13e32d2d50c24f3b006a6c87545dde2a7140b05384d01afe68a4cba14a44db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ee6afaf5b55c4caf128105875d7fc72

    SHA1

    4a69c910e239e41f1cd29a979f5b2bbca2c65dc1

    SHA256

    1413c0dcfc9c3ce612364c4b7ec2f20cc3b6180bcf80554eb7fe081e927e96af

    SHA512

    a8b7a9448f85547099ec3130625b6a6a7ac28bb913d00be24ff8cb24feb7052674e3c04d5a235cf95b55bf2c16319b43058f5707f7a4bf7c135d07bfd5147344

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59ee33e0b8d47455dbb2cfedaf4f2dc0

    SHA1

    600177159be79de86d7ec47e5505aac7d2ad695a

    SHA256

    6964a15fb01095e4dd2d37ea3866963b72e046513dd8e14e51c11b7974394769

    SHA512

    127836ed0a818170d57aedbef32831f5d24c4c3b34c3fd8df647c3852ba8cda677037b91eb83dc962bae629aa2ad622b687df86f3b9d200be78c73bf5f054d93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b9e1375e30c1ab953fd7ee0dfa1e269

    SHA1

    6f8d183d36cfbd371225be80f236f733c3d7ff04

    SHA256

    7d9747794b9a972e4e71435a16507e09cd5c88ef118623667d0aedd0dde7a265

    SHA512

    1818129b568d193edee14984c8e89d544bca57a65cd5e8c33c2e0ed72e87c16a05bcb065df70082c10addb637be7a82731c42b5f28f5978d3b24f458b6d30567

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a6b2c894fcae08106380f3cbe97b285

    SHA1

    6315907d8c91bcee09ab02d564e25de9ecc23d07

    SHA256

    12898916fcf7d58bff743397a07fe41295ec33f9a2592f185a694e1e9251459e

    SHA512

    29abaf5b799c9c1a0e4a3dcdf881124b53c99ac6dcf380a18059dc06cab000ba465a8b86f4b779326cc2ba5e7b67de720a5ef099aa21ea5006f4e690cf6dc13d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4249b831195a638c1967d53cd42b2fe

    SHA1

    f56fc747e701b1b4239f87f86140b866992df071

    SHA256

    a4b8dd29653cd46018461def2bad404519195d66469425759c59ef035d56fa88

    SHA512

    d26c2231259bd6ecef99b5aeb9452a089ad9512b2365b3cc6817a6f251de50da7a26a70b73070dda9a4d7dc70da7487caa2d72fd7614c703a85b54e5cd2471ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e3fbefd406cdb30323c6236afd7b3fc

    SHA1

    be4e1cf30908d713b46ea475217b6e1e3f34ed79

    SHA256

    f45c0aa73324e74421b4788d7f337209160796fa00abd1e062e6a59258678ccb

    SHA512

    101bf68ed5c9cd40a5b5bf241a82ddd42517e61dea8f52323c2be2ceb0ac65c35f532faf6588eeebe6ab77cf7ffaa4c997e830d694064074f9d34bb8a94177d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d31839699f12c27837c5b89db00720ae

    SHA1

    f20fad9ebde75d65d334d3d65b71c0fdfa8adce2

    SHA256

    b1efee704e2d9067aa185ca2d82ca5174295b590360b05c2d99f3223bd263e7b

    SHA512

    3893068624ce314575429a1442b5e4dd93020541c7f959b56dd19f4b66c652e5817874d42d5356ec09b56a491d9334bf30c766ac5407871cae05aafb307038fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28dbe9a75ab2c1ed85a755c008285ddf

    SHA1

    434371b2acfda653ef730e8a35682bc7e7af76da

    SHA256

    5ce61e85752c3332da8adf2867fd0e7f694015b091f949f1def61504f8003537

    SHA512

    d2e691e86860e5c34174b63d242207cf868b8088bec028690f47dedc2e61e79e075fc5700b05829ab936d4c2b10b532f64371ac958eb53d27f9a212a537b3747

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R90HQQX\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E25VF8N4\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YT4IJQ91\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\CabCAEF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarCB8E.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06