Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 12:01

General

  • Target

    17d868030c925009fe927dab7381c829.html

  • Size

    3.5MB

  • MD5

    17d868030c925009fe927dab7381c829

  • SHA1

    96a0216da2466e63e4e7b34f797a447de78165ee

  • SHA256

    e93ea21442e96f9332534f65a12a69411b963b8bf7ea574308d6768098018aa7

  • SHA512

    23728dfd11b43d39753cfd2a28113b058e8097e108a5ff4da9daba40835b045fd50ae656d344194b26c34df779c718a5b60473c318bac806e9823117547085ac

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NNf:jvpjte4tT6Df

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\17d868030c925009fe927dab7381c829.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3020 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2256

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfc58493ec26f820f04747ad31cf6b81

    SHA1

    8c3495551245fe43f7a97506d7cf9933462394a5

    SHA256

    43b4fd97a8941bf51edc606d0f3883efbef8766924455f1d1c0040204a933426

    SHA512

    79bf4a5d74e2768ea70d3e54d86ba453b8512115d8cc6a42f438de5513f4dc359d9c2748c893d36c3b0b3d68ca5bcbe7935046eb46f279a5b42329fd6645dfd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb96b27a459eba8b7ce8b02a2e21d73c

    SHA1

    bbf9b5c1ec51e27f5da0ca202427483a62e8c0a9

    SHA256

    7d4529aa1a0f85bc64b1d059267608791202ee92dfcedeb120b65cd83c4be579

    SHA512

    9d8c8f1bf515ac26b1befe70ce6454e0d5fc38cd93487270ef75f7f70f4bd292cae70e1ca4dc3050b3c4639a338ededde57ccdd29f739df28ed320c04a6a0813

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    daa3f937657b1bc17184d06a9f69ee03

    SHA1

    ad57db0e93a945a2e421e54d3ac1bd12404fc0f2

    SHA256

    626effd1de6c4c7acf2130bab82606b38413797ed9545aec99fb4639ca4fa4bd

    SHA512

    9ee7b94f04963067200803b0e9e1c4b9a325397201b882b86681794a14eb425cd48a8ce2bdf721139a0f87fa708b5689be902ec857b810eaaab26eded4603e74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b5697e4430604025d3850849f21f656

    SHA1

    a25d0df1d3e5e52006895fecad3759a74a8e5816

    SHA256

    5039137cba5062d977f51a969f5fd51e6256e5daf6440af8e54e71abf2bf9175

    SHA512

    c3cda2056427f0854c403353832b9544a821ed75f1ef12d55de9ca474600b2479e02eaa4db2f9a63b224550feec8c38da288d84a6d91b6900290eb20d35ffc43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c66e01915c67583f773b1a647aab9336

    SHA1

    95d27234341e4ee57412e172684fe8aad8e08968

    SHA256

    0b148440b31f002237644d5a15636aa0f12fd5be07c567991359587df94d3318

    SHA512

    0e9717dda25c70a141fb6b5c3068e0aa9b261974434dc6b9b792e92e0456493f5ada4c8d2ed6672e38828245ca9d2dc5ae5c6d4ffbec81565b72970f5399d934

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8512eea6d36dab1a7f8c185a110473c8

    SHA1

    08256c91f17c746996fc5b2ac3ac03233c30890c

    SHA256

    690255e642a04f5bcdf6c148081644905fec79c895066d06dae8ed8b63b8820c

    SHA512

    6a9cd4ba17b3458aa09ec673c2ec801a7a80f2a76d1ba417e44c2f96febb7e54518c5f4be0b1e4e3537ea30e7795478d8e7d84c23c9d6b520bef71adb22db6db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    901b4b68379bd903bbb59a579ca45519

    SHA1

    6329eb204037d29b120db23a394a000a3eae0a50

    SHA256

    81685051845707cebcdb2f5b0b1efed889ecf79d55d8e8091d654783a01407a8

    SHA512

    490d5b6a28f5664d2c86ecb6ed7da3bf93739d8140d5bcabb8e2b1a22f5047ea4a4cc4737b368ac6f5f5698b6d108b1f969e9f764556f814e2dd9da9721d4123

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75e3989eb9d8d7e70dc72ba1b647f328

    SHA1

    0432c4ce487b09b99a988d1bda3a805d61c41aa4

    SHA256

    f67676b4eff13f166555bc2b75e1cf30d1c8f452ad3f724f79cfd6bbf47fc1ab

    SHA512

    be650481efb017f1dc898892bbe4cfcce4aac38f5941b4d22a4565673633bee59b8b16db4f9774bd75f5ef3749b2ff37410d96ba685d3a53fe6ef723388ad421

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72dbf7a542e2ab503bfc0eb4c1608c5b

    SHA1

    a244a3ded9146af6f6cb05f5a725922b27ff587a

    SHA256

    bd7f8088fafd1fbf778f78dc5d667c54bfc25cef323456ecf853747526dbc058

    SHA512

    a3729568443b69a847b7935f3e158a4cb8bc1d87660e2cf1efc8ca777eeaeb8ce91128e7063708e26e10b0ea1d092a6b9ba3ab4c2071f9ecf7f9c8c7d3b16ea2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30d02d387ea6322a57b5a06c493bb316

    SHA1

    3ecdda975b4a6c0f99af3fc3451c5605e3fe4d05

    SHA256

    ffe856790558b4bb22aba831526a3a77a616f7356aba80c68ac69ab306318404

    SHA512

    98af74a27239a82af76f28ab2ea09b6e3d6ee38cb1937cb0e379ae7903688968de878af00ddafb9db4a4c89dbbccd60b202ea38f63811b80e2fb571d09fedaae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e2af0764d868d2c86a2edd2bda8dc92

    SHA1

    632cd2e02c86fcc45c9fbb643a1a06a6c6c543c1

    SHA256

    8304c38a8714e934ad9cb3cda2f6562f9ab3b347a98aa99ad7dcfc6a54b447f9

    SHA512

    6a53788946d6085e1a9b743a3b725310799447d63fa571d78d5118602a310f2cba6c46f0fcd1bc7615919ba66e5bd164f80238d0ddc19823b7c7a7784748afed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ee69932d82f6a598876e62bc72b4919

    SHA1

    09cb678a15231c207f7b74429a5cf281031c6839

    SHA256

    03bffb312e3065f7918d2b2bab3da48cc8e9492821aab6b290376654978a432c

    SHA512

    439194cc087e071e6b8376dc205f17549fe429fb33951bd7a7a47935f848a4ec886f05fe0cbac53b285dc5c0a529dd50b81793019a5dc1ea5c6a6ff725945d20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2019a13a3e5975dd47362c8630cfcd3f

    SHA1

    cd2b185fb3de6d7a260e054344d04cd06e17c691

    SHA256

    2481198a17006b9ac354c0971065fd6f56f4014e352306f7d611d8c67102fa29

    SHA512

    6e6ea4622f9e46f2a2453e5bff7f813d2faab91ef956f90f5242ec42c88950148735c526015a7d70d10944d9b19054b0959b1b6a624970db52697e634ac8cedd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6539f45a6db8dc18bb310bdc875ba9f3

    SHA1

    da7fc33df9de5f5f2d07ebd43511ef963955f013

    SHA256

    b00d053051b6b1c913b0fd756a97b7ff911fd3910bd2df47bb7de6c57cc150a9

    SHA512

    154a3252a28890afbee3a47e2b0990446c126ddc5aa6309d6758827999e261788cca4b36caf9562720497375c1b41fabf87a9a7a219528c086b0ce38ec5f43a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfee29746c30d9fcef5cdba7d2c24b4b

    SHA1

    2ae1393c07a5c2d9252eacaf7b82ddbec8196a1b

    SHA256

    39f1ffa0ef3f9a3445686b13bd674898119a7be8748fd5a14f9d5ef0e77ae1fd

    SHA512

    a5e0e785f9bb03dee5c05bf13f6a14a7b8555131bb91ad294ed9b775671e4afe05c3caba92b72b73ed99b81fbbc12e992485dd828bcc724407b6455b9fc2c406

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b99c0d13c89d764dd4cd7f6cd93dc877

    SHA1

    f6ff426756596dd6a93c968c8d7c7577a756ab57

    SHA256

    90286fa3116e2abcc4b020f0013f8ed18f83a101e8d92a1306fe504eb2e4dc15

    SHA512

    16141cdd80ab411973d7e095d65b71eeb1a1a0db2defcf358b1778f7f70e87eab039463ad777b656fe66e5086d6434a7a0f2d0d03b15c59ff5f4d1c7220ab7fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1cadf88785d9a1063e61dd8d619ff1c

    SHA1

    f95b082fb5a00034b0dea0dbcbb9da56da06d700

    SHA256

    b1312c09d6148221eeb6b41ebf9348977bbaef14de3d393329ac7302a038a8a1

    SHA512

    e791cd6d7af37882a1b450b9b69a3647b193e017b91f18daa84a564400e88c08175c0561c4275698878817ee45570df15b7c23495436d58f36d9b072b6b1f863

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64e624a905e258520d2cdb25d83aff64

    SHA1

    ef44d81581989ca6156ec2ebf1659cdc452a4ae3

    SHA256

    c7c0e889b6bfb207d7258376cc0f13b1a2fe72b474813e164b62a2c8625c8c6c

    SHA512

    59989c92cde719aec77450013d1d99de9ed95971bef58d9aee36c3dbb2828ef376ae0cccd987c90646f00bacebc5f21f54c374be9fdea38a9c87e34f7240628b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcfd87ced429e4ef4d6706da5b70886c

    SHA1

    ef0327014a672d2f9d4b8f74fc7d85d307c04f31

    SHA256

    b17c62f2fe7fa5f8550a5527d61151e121d2f8564b21739d28abd4ab2db89ed9

    SHA512

    db71488e1911c036473314dbdd5eaeee12c005e96cb3d8fcdbafbab30b59c3f474caf9de49a8e9dbfec76b048aed2c5cde4d6d6eb84bc449280ff32791e4c6aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9311b61d67507f97d433f46f17d4415a

    SHA1

    c8540622d3780e7615c86135f0fe35f13e0da39b

    SHA256

    83dc00d35d5afadd693699c3c494ab39abe33c9d3ce3dd4b9b3eefe966556e9b

    SHA512

    088dd765c0f6f9128a844d3d2ab7888882f4a69fa2493a2f2af8fa24cdd8c3a8245e232c98df9454e02c9ab8651833d1307bf3abdb8ca73fa7e041aadb217ea7

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6IJYZ6B5\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFLWQ602\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFTKP12M\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Temp\Cab16BE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar16EF.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06