Analysis

  • max time kernel
    144s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 11:28

General

  • Target

    17231c5fb9fe6adef17a75f312ae6adb.html

  • Size

    3.5MB

  • MD5

    17231c5fb9fe6adef17a75f312ae6adb

  • SHA1

    24ce2cfd07122fc9740ae8830e4a2b4fb9cbca09

  • SHA256

    e22d2f79717544455c8d07bd8950efabcf621731a50a61efe81874de09638e28

  • SHA512

    6e2bd2acc11eb13e808fef91abbb3c155e5066992fa5c31dd6dfc8fac5843bc518575e1aaa087c8cbe13fe57b1ac16f61249302451537bd8b5e781dca614d287

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfA:ovpjte4tT6NA

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\17231c5fb9fe6adef17a75f312ae6adb.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2388
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2388 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2324

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b43707a8ba248986d70f63e6df55918

    SHA1

    d5c2473df38cede9f82092fedcd0c13032b81caf

    SHA256

    bfb2d25cb3571bcff0ae775393c0047ba9518b598003abb183ecf36bad4f576d

    SHA512

    ba35cbd11a5039414ff773962c08eeab91adfb4a6fc9abf9f8b4857f4f7f4b7a46f816451c88df9470abbc990e4c31f542c9e9a43b4955916f289a373f3ef790

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79a447784ed26706619805e76cd99ac5

    SHA1

    7397306ea2cf15e342a9591bd411c60e55fb392b

    SHA256

    58d48c089f4f675b5c0b50d11d4832680c6f68126fb82b51b718309c56adbbaf

    SHA512

    985ea6edd20eb0bf475e96a91a9787828dbde56aba2dc7a82947fd94b2d75b38cf50c4a73452c99fdcb77457d97f79d5bba4f97b7ce0b23912aa35775a5afb4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a97b3b4dc252e8cd48b76f2dd19c13e1

    SHA1

    d0bfcc7d9d87d3bfd14aebf7598494b39a4e5750

    SHA256

    7bf8d1b6b4f6ef568301139a4fa197881e56f7fd7d63dfba158ece01eca84b36

    SHA512

    9d9cfb4e68d66bfff9bea131b8b96c05e40a247b30086a6b27e118dbbd49fa00b2f8d6deedcff99a085fd92811bd4049726f1ae9b71569bf768378a43e8b1f31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    916cee8c8a88148ff72dd0cac9f30a52

    SHA1

    aa33170336e3d390aec870f8463c6134675f6504

    SHA256

    73427986a524b8d3680567ca7de5629cb9881616a9095930540c4833845e4064

    SHA512

    06e9c5a35a95f847adc913d07884c681cd22ce0be9246fa08f83f0ee6231b14c58b14ee2246a58e55f0cbfdf908cc59a639b75db41f5d058c8df6f8f8d4505ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6139ae0624b835713f13c5c8f9dff94b

    SHA1

    99196ffe3650d28cb1b498aef76792f5a3f7bf1e

    SHA256

    ec20bf70521879ae15d8acc6e7cd59f30452cb4638bbcd4fd236241499411e64

    SHA512

    668d326a6436ee283c683cfbb90286d98fe0b05b81749613aecca99400bf358dde75e4547c217a8e7eb812aa56d207b4a80f5da8cb6076f26d521a332bcf54dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51c9a032eed59d9ba01c448c21ef50e1

    SHA1

    447258e59ca707ab6d9c91c6fd7d8410784faead

    SHA256

    d3a6f596b29120eebdb5e5c65159257851df7e067a25d8b0b26c1e04f140d64d

    SHA512

    0151931597360bd9fd0d488d0b9a9ad38b5eb8b57e93cbd87418de40f8d5d39b0ad09117744f704c76fc236ee50b777bf0c2f0ac235b4e0b43e62a40d43ff722

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04b3b175eb6b4160b89052fc6d8060ac

    SHA1

    71d23c3f9b070d264e7d179f27fc4540e032f5a8

    SHA256

    8b76e3ece8cf683d6d3fa7b3467601453d3b48838c95aa9a8990977f89587fcd

    SHA512

    cb8a65298b4e491804dd1263d32048ccc9c53f8c7c53e120f4727f21d29a3f8317e0e5cfc69f1c031adc41ab30aae0d1bac69712eb409f594b2d7f2c5361cb49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48ac6b01317a162d9b1c71e6c0aefbe1

    SHA1

    f5f275881dfe40340de381ca6f29a20e8ab44112

    SHA256

    6a973b32f0ac6043f099b590370eee874b327b9388f80469ef43d1e470e6fd6b

    SHA512

    a689fad53ab1288deb728acad8c87fbf9b37d89cb62d07c561eb28c9f15e3379502a247d523e626061c4efd431890ac328dc5fb408739d6d7e41ac31f01758b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e9c4232845625ad3b79c460ab239bce

    SHA1

    c32145536e1e9dbafd8976b3b396c063111b031f

    SHA256

    03536fda11a7b648eae4985308f82e5140f69eda2325cbb36a012a4db89b338a

    SHA512

    1fc1b30b5c6402492c083f2a716ec8d8bb1f6c8e20cc33da33da4b95f84b921ead66f2693f9dda8a86361f22217d9af6443f23f0488210c2af5142a78eff8fa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdeb886d486f35a1709611170199c531

    SHA1

    b72f9463ab27a310c79c32fa467054662a1bb6a7

    SHA256

    6d8362b24ac3824b3a9793b49ea167f07f9583185381becf1d9678c1ace2ec38

    SHA512

    ca11a07de7438985d0f471d386ba31d32cc5ef91add7dce8f659b54bc3c17fbd7a23d4e2b4700011eec4e4cfa79afafac04871a6fc36051e74ad0dccae1bd4f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5dfe118dffdff8050289561081d2429

    SHA1

    6c235833f7ba732242c1b1948496f4ac11d9ecf3

    SHA256

    967b0a85a261725f493c74cff9285f624929ae7e18f07c0b2528ba8c287d068e

    SHA512

    7e53ac7cbdfb7f70ce7569286d3e38c91caf4473c772bd174b0958b70055c8ba706d840b178578a7f3988ed40aab92e2bf6549bd783ec13979d688198cf7a700

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5d326fbf602f30f9f694e4fa8ae33f7

    SHA1

    60c079daa68ffd8ba61b6b32edbb75976b57c2ce

    SHA256

    f5d83fdc5fcdf0a4b7c41b6584384a692a576d67b53df3cc33ae6ea8a6fc01d4

    SHA512

    19be856faee07cf6edf387c6f68df0092b2d9da61ce5932d8520b87345a182b0aab7039896ddb13edf76664b97497567b896de349b4553602ba6dc1b416b98e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26163b7fb5582a35228a8bce253d7a42

    SHA1

    f009cc19642e341eccf2e05dd9e3334a55045d51

    SHA256

    830fd16b40f4f8aeeac577f841cfb1b342ab4d8f55e7fba1347dab2344752c47

    SHA512

    8fda240ab0c85f2caf5d4a28718ebdff36a501bd22fb0edab86f2dc43deeb7405de8fa9b414546bdf545ffda6975f3091cc1bdc1a09f1aab825a496b760fbacb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97671a8849a368dd21ab00940ec04857

    SHA1

    3111c042d66a9f26790ba1457ce304680f482caf

    SHA256

    652ff023c788855c341a7a8b43afbbdceeae3db992d1dfc5b45ce0c23fc0fe63

    SHA512

    e542a59acb463cf619e7017eb2a94981bab79fc193c4482e50572a0c27ce3b04de1881409310953291a133e68442b9a563e0269c8575e59f558dea3098e6b0ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79a4ebc947c0c15ca17598b313fd6c1a

    SHA1

    60d93237ade5039a1c8391970d18b7b45fe2a777

    SHA256

    c2379d823524cf8cac46d1e259e51fbb8b70de91bbfb77690514c871e9d1ca7b

    SHA512

    c57b5dc86c3d2817c7460f1b18e4873cdd5a8f6273a8b902984e7763d927bdc140b6ca35e14294a6aa5c60927ef2cc3df34bfe863d575a6a7afd58b119306360

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdbb9fa015d1e73aad98ce28627df483

    SHA1

    43519e7a18a043bb4b626dade9f76f68f3c325be

    SHA256

    70a66000539aa59bbcd138ccd56d4b5d72bad8f4d6b6c07a2bb9ecce2a233ee8

    SHA512

    e6d364ec9be99945fe4992f74391c1ea45c00f4290f72704abc94eaae8c017e8f2aee980448bf6e9f49d254dd37d00edaefb4e0758cf93856ba7f20d276d4bfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5ac7610dd1e756ee7589c85a76d93b7

    SHA1

    ff172b206868393390ca41cd936d42e8ffbfe413

    SHA256

    9bb2c8c7647955e663dec6b679b9b186cfd9a0f5bc4346f118330a2f51ba4f17

    SHA512

    1c7009f078d7187b6e4ff6671acbd4db6d9a5dc76de1edf1137f33c4694925ae543fe20268aa242f3a8feee8c08a088af9e58b5bb6437f4c594499e8a991d071

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d1474e270b4df0b2185959ae7e025d3

    SHA1

    1c17f60ae79d1b17ba1d6b8617dc5e05a035b052

    SHA256

    fb629ce07372fbc67f6936687ee7c0cd0abbf441f01eae0bdf078aed678677d1

    SHA512

    cacf2f50e69e19377f358f2d7d606ded229eb84cbafdef2644b0c5858382fa9ee3ec04fe88200057082c7c4b27e1250c2eade8c700084d429fd7e5631c7669e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    deb429658b3a8b0376b2cb7129b55265

    SHA1

    960a93bdafcaa7b0dc032bd15496a3fd3fc243a3

    SHA256

    3744eeb5d6e7981f775a6f3e8c834362da380d8987a9a59af59aa57c56b0bfad

    SHA512

    56fe96c9f4566083ba44f37ec5a299e603e7f708f05a6f05a394d08c1592472acc1ff02b1eb6e2a78096ab29c73bb15f425ed61c7f0bba77c84104bcb7e0643b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RU3RPYUN\jquery-3.1.1.min[1].js

    Filesize

    8KB

    MD5

    e24d9c4b915db94392f33cfccc3df7fb

    SHA1

    a04779faeb5bd7249ca3fc821a5472be7027fab9

    SHA256

    bde85e54fd95aef4ae00c23f389e38262be682456046323e52fc0b465cedc3f8

    SHA512

    9d84e3de36f291ff2d5db19fd368da756baeea379f0dc0c7aaf58c0324b4a684bab9574d424e7e783743b7cf3621e48c77a914f3252a0a2133c4407b5a2547d4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U9VC31Q9\jquery.min[1].js

    Filesize

    8KB

    MD5

    53d50d4cda6e57ae91552d7406b26546

    SHA1

    b48e45b3fcf20287f6b39332354ae004332accdf

    SHA256

    58852e81b8a28607e7e819ee40b8f9c8776306b05af1a514d01a85c28d098215

    SHA512

    6852ccf5f752e22e056a480283ab97fb8b586289a70f60b1b77abc71c6492f17c42ce78b747748c1e2bdcc9a368e65558538f2cb74a1647f328ae55897a7c145

  • C:\Users\Admin\AppData\Local\Temp\Cab6D27.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6D49.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06