Analysis

  • max time kernel
    118s
  • max time network
    179s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 08:02

General

  • Target

    12e354bad9320d0b3f5dc7bcee5935c0.html

  • Size

    3.5MB

  • MD5

    12e354bad9320d0b3f5dc7bcee5935c0

  • SHA1

    9ccd8b6607cf4c9ef71469857225f1d7917c2a85

  • SHA256

    f2e356a517e1d6abb2a72031dbbc3b332fdf14dfeba722f7dc416f95bad49ac8

  • SHA512

    1ef332aea761dc080c22448f6c97080f10bcf8c4c26559195d354b1f861a9e90b7cda10fd251273eb0de0b2554189cf471d6c103e31cb4efcbc9ba32b7621d2d

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NS4:jvpjte4tT644

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\12e354bad9320d0b3f5dc7bcee5935c0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2132
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2132 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31a1096968f2e79c962c766cd37192ad

    SHA1

    a32f0dafb19a770ff4564951cec7359a093401dc

    SHA256

    87749fea5416dbad4a4b8ffa262ac011f8e61adc8b407f659f81cacb95f513b3

    SHA512

    a6e017f25f0190f4968585ff66435f071d4396887cef391faa857169af8f51a5a7783af41615049a5dd7fb5680bd8620ef6e3c4b40b8f9eed6d49821abdfe876

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9790e1a520089016c41dabaff956ff39

    SHA1

    eb5d0030f46e09bfddd9fc0ed0ee21a33169645e

    SHA256

    2bf8959344ce2649aac5738bd46609e233866e558032d6fcee826d61dd86b6d4

    SHA512

    e1051504ff9a7406db7730e1bdf740a4b9c5e38df6d441a30083065b3f6e1f31213d4b7c3a22adab424d92ef4a4240949afbb3fa7edca7364a53761ae99c45c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fb770f9b8d9a8ffd7e9451b7e66871e

    SHA1

    7f4ab8fc0f1d333f8295958fe281a7ccb15b69ca

    SHA256

    21971b2aac0dba993f331bc1ad0f06a8710f2329272f55b9d60d5c46a5b2dde3

    SHA512

    853b2e74cd3c3bb5d14fd0520ec84f5706d9e9062540e831e9c2114a321cae2375412445075f3439aad7fcb0a23f0676e0e40587800dda78d1356e8a9d21d429

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d07ab0d9f988df85f7c23c8e614d03d2

    SHA1

    49d6dd6a2e3ebb7f3286fbb15fb91d7266641349

    SHA256

    53d868b6ba5a06d0574584af4b5366854856c2304eefb6399cb1e85bdd80f126

    SHA512

    f0888d51cfe1dd0243cb869d1914521e4754c7b7023e542941805c706d252d1119c93f4348d2de953bb514635c43b4fe1c63350c4916d4adca8db44b26171c62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b0c6aec1b83c003a2ae6ac361ad4dfb

    SHA1

    24df7bdbb94e27156b73bc26a51aea31402027e0

    SHA256

    26bf53bf6cda916af07bbabafa6d0e9f2036d032287d04598cccbce41cc80f9a

    SHA512

    aaff065bcd5fcff7cab3afa34ff58b86fdfdd82a09fe17a58500d6120a8aea19cad2988b8aef0d94a830fc8eb47edee0324748df0555c607288c0f72f85c6577

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39a5f3074da7b2a513f38adc8ee9cf5b

    SHA1

    2c552511e1734f8890c44ab4eb750fded440e166

    SHA256

    ed0a2996ba09b8af41d26d7ffb78f5303feda58b7e2de3e55056b5f41ce4633b

    SHA512

    a9393f43f140fd6d0e8d6bf490b4ee7614a1ac9e3528e75e4fab395a272411e10087ad27b08566cf11b8216632b3cae93f63503afe0a774065c89da752970274

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44866fb4d7866b475b34bb8241300daa

    SHA1

    4def0a6e7b79da33a02b0860b2cda5093d3a6b4b

    SHA256

    21fb4ab0a62eb82a42ea1b47d810acb974aef7f55f5865d2eafe44dfce895296

    SHA512

    5cdb34e1a8564bc3bbbbb6cec605262591a9d8bee3528ae7ded3d83bd06c33b5bda93b7e80349ae5937dcfdaf7ed7eda792bbc50d663cf9dfae088443ba18aeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a37b3331cfdae35adb42d5f0a5207a2d

    SHA1

    20925bccc03e3f7683c1b91922f73d2ea5dbde55

    SHA256

    476b0c66b30bd542d965078f267e93ff42c31840fd41ebfe1048f5db21d63722

    SHA512

    e17e2cc98632014c3d1aa18f1ada46abf993374b1a2b16748be242541070e32cda7bc53fc109119b694daf78c15c12da4ddc5975ecfba9aa5d6721db0816f776

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0f17bcee8af0261dbb86783da3b5432

    SHA1

    68660c3a4da45137dc61ed9f1835987da1ee83a2

    SHA256

    17b796c25dcadc6d24543967120baa061e9b0906bc0702cb76a03d6508a2a31d

    SHA512

    d39baec65e6bd7ce721e5d085c850e0768adcdd67685755d23cb6a101cf38aa702a551f4f273dd3301bd9cee4fcb243d4487a7b23228b8a14889d54e9a8ca578

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f4e0d301d8033b71b7e6fd821a0072f

    SHA1

    a8582cebf014d40a937e0cccf8ffcb68122e4db3

    SHA256

    c1d179583b3e323eae5724480f61b37ef565b00df2d580e5602766638fa5a543

    SHA512

    da5bcda63f6a48260dd1a25d9c5d50d37b91bfd4702785af0b8967c5632181dd5f391cfac421180ce4a1028e5ac5cb5a2ef1bb4db948f9eb2c36acdafbb84409

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a209ad239805fe2b4ee413398c79a7b

    SHA1

    21df0dbbd01ef5366ffab46defc2bd67a592640d

    SHA256

    e26b78115a11f8edafd8a8b7c938071eac2ce134b77a575a2959a0d1803f0d0f

    SHA512

    67cf1760a1291130a09e343e24cb4a193e568640aa7266b3b0ee20fc401aa40c5ce63768e9f30ea3ab6f9e34df3eac3dbd6fe6daa14d5cedaadec2881cc1fc4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    205c6c3cbd5fe79ae72e2b895974a621

    SHA1

    6515768eb8af2eb02ac5ecb8fb76891dafc8804d

    SHA256

    be395e1b24091f9dbde2507c6391dec9d848feb35f524d5c51ae7160c6c8dddc

    SHA512

    a6662a4d2262dddf3ab4dca72b5649d479645e51ccbf418f6d8dfa9a1a6eada923e5b72641e321ca8d9946bf7be882d4ced93e3d97ab849e272e32458d25e189

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7391a6454c1e0b9cc6609709f207025e

    SHA1

    1ae781d7768a3af76377bf6e28d8809eadf3a684

    SHA256

    61ea9dae41cc0eb0ae09e90c80c9e1102bfb679aab5220b4f5638af53851ad0d

    SHA512

    528fb631891d4f9cdd65d12f141c9a1c776f31d045e9b5d3d5b12a023aa19cca651e50d82e69d0f942611a32015abdb3d1308913c64ae6b359e3a41a85c16834

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c267bd13d6510948a77e7ffef69f50c1

    SHA1

    51671826e6ab5b8c771f36c9212c36857de55b70

    SHA256

    7d8157abbdd869b153a2c3d058f6a33e115b05745f17af0ef8e9b6d4e364929a

    SHA512

    6fa3618f3ba99f6cd5bd15e7629d1c12a77a481b7d766280edaa867b09002c96ce9d7964cae673aa4662674f5e0adbba8e1d07477c21b10d70db31804b0a347b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a926baabfdbfdcac70e8169f9b67fd67

    SHA1

    d33e06b934e987c290929dba1d90d641acfa24b0

    SHA256

    7786db8941a574d47e86bb558c003a8bd41ff6da34e1c4c3adf088c96e2dbf22

    SHA512

    6b1c4a1b423513972958114934806fbd131579f56fef31374ba2f1a98179c5d17113b180845bbf291bed0bfbc3ae40ce70c6ce5c767ec1e5ee8992a4475eee6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78d292979819989017503d8d7ff137b5

    SHA1

    2856b799529facff198f6bad7bd061e92ee9de4e

    SHA256

    83b30a550dd91e6048afd6814de56157f5b2d9782fcd008ded9557a4d4b98c82

    SHA512

    7805bbba34bffb5cd889340a71ee4d9bbe6dad874530fa38b906f73e59eec4e97359b4f39d800609f4a56b2d73d6d62a809d9e376c4929c38120808842fcc5ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38032214bea935859cbd2952df19570f

    SHA1

    598c0f3e90438f721b5fd6c9a5d2dd2dafd620d0

    SHA256

    7a8d3a2e76afa9b78cdc53d7f1472ffa4a9d8a4430fcf5dbafe122c9713f2fdc

    SHA512

    371c66134b945511b68fa18e29607402d810e53a8c6c9dfd222916d5368b7b800045856c9507a428223729f16f8416e7ea42fe57cc5a460101d016cd63d03346

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8a625a381ae124f4d5870b6ca26ab45

    SHA1

    642824cc22ed56a9804092fb6016ebc8fe816e1e

    SHA256

    6f5d185d6f86bac4d1db062b1e5dd9a126941c85e9e71d9c82a2208a6f45c652

    SHA512

    a3a0f8f4d5984d7737655fa68654471f7092e79e4204605d3b689bb95759ec2ccee2f77f067c3d7eb67436f580385b8b93efe7fbe3275ad72f62e6b276ff5cd4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LSNXCBKV\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M61DDFBK\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\CabC3FF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarC3FE.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06