Analysis

  • max time kernel
    146s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 11:38

General

  • Target

    1752a9a27033669b4c34541793102427.html

  • Size

    205KB

  • MD5

    1752a9a27033669b4c34541793102427

  • SHA1

    f862727fb1549b0bf8b7c1ad8c318e9a50c93b55

  • SHA256

    aa8aca144c68fb5009ab10ef8822a80cb48c39ee17ec59c76a77e73c97e2c7a2

  • SHA512

    c60ef93f6310835b46e3251dd3e45f511b64927f31e5778291a671f39def434a06294985ed0fd299142ebdf4b33d6578ccf50e2fb46185aed32769e11b6b22ea

  • SSDEEP

    6144:hcA9UpiRtyWK2vawsbecgW+VbGfZr3zQNDDS4vDYJomd:CwUpYyWK2vawtcgW+xWfQNDDtvDYJl

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1752a9a27033669b4c34541793102427.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3064
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3064 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2640

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fd5009956062a9e2b98bd69e05e8306

    SHA1

    a77d7443bb41ef9ce0cc73122619b3a11df3d7ef

    SHA256

    3adc48d3e96707b97b6c20adeb51d5b69fe1ed07429f3f797837b7c0b9a46e5e

    SHA512

    443c1a17a7d90c800f6276f0d3069d4895044e6a0ed91b57b54f976a8dd7d64b5a6d92550c501d133ef379a9d118fa70ac72c3cb5c38b6f953e8758c7cf7d87e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ac6c7fdfa4500b82d197b9937711d4f

    SHA1

    69516b59f5264b2e6295f588d3be37a6faad2017

    SHA256

    622a0a8910fa81a968959759358eabc2c82ca08b44316183ff04f1395daa1756

    SHA512

    9f67a4462c65c0c5cce23d1badf92df1c18512c691afefa9dee0a14d60fe07edec727f25aa5dd0b9e0510e95a9c08c76ad230cc25f3f85dd99180f899cab9c18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45d470417d31042049d715181968cafe

    SHA1

    fa22984f934df17840c3b122fd78df0dbf7442c9

    SHA256

    326e5db730123e730d2d3749cfae7ce8a49eb0b41121936a871675db22485372

    SHA512

    94bde6fb01d181106c9683bd41e9757fdd2d70d2ddaf72e6786779fa3a0d55ba64f28761e718decc3f0c687572f639d7050e666c9a7f46f8940dc9343086ac19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15e9eae302d5d490e3aaa1d902135c85

    SHA1

    0b6635da3b1999813bb7cf92dd99257b8d9b3b50

    SHA256

    ce3ce5f5e25e0a817ce39e2692d58800fffc5b2f22da5f6b36b3b67a55c9face

    SHA512

    0fa84e3836e5a37fef2d063304399da1be757cd189625981f1a5085356ef17bc4472f1ebb7099685683a507abf11f0e2529e32d8890d348c62f51ad3dabf3252

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6efb1866682b62a39b31e0e547027c9

    SHA1

    7029a592ecf5ced5899f5dc25de01483b389af78

    SHA256

    0dc60cd9f3690186bb2d70e5277b896370598b1379983f92d6975cc92b5b3012

    SHA512

    285367875ba5f20f7498032b01ca3f0e57a79ef26ba869b86c56e15348d17e2fd870847df083af9a52ccd416b6a03295362212f3e444d2e791a0de1e332fbbec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84832889e631a90658c2bc0f738f3877

    SHA1

    dc0b875765785914b3429bd1d1fcae45e7d89d34

    SHA256

    add78309d7ee9ddee9158cf186ebb6ee4003aa7c8e579784d09ab501a7a107a5

    SHA512

    e06fe0fa7e61184e5456b24aec08748b0edbc0a2be05dad748bfb22a64932cb9f2f3beafed1f28485a495ca1fbba575507bc04258a93646329c541b5cbb4780c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99af9f31dfadd5ad1322db66fa445731

    SHA1

    869d41bd15c15b1af62cb0b584c9b188e4fc0a56

    SHA256

    b98429cbfeb5b188071b28ec120bcf7711191e78ae6d429f9386d1ad0a7dc816

    SHA512

    94bae9d6b58e57b1f798fa4b698daa1e1e048e33587112804bf5a286202b363345494b578d579f5cc172de39194ea575b7840042bb3beaf3576cacc541415988

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e3d6526c7f9db1269c9c429c6121a71

    SHA1

    8d0efd062493946eb65042aa3b7b42e00d01e02d

    SHA256

    4112ff2105d5b7dc8d1877a77d05b2f96c4f6608c6c84f1c2c40a6f8c6fe7583

    SHA512

    35ffc6008627bbadce403200359991d19806ce8144df532e850886cb4e226aebf7f3114a1859cb14a350e43e7a2a69e64702f56903cf09442eb2ada8d67d494b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e4dc2c6d9646e17a515ea0953897711

    SHA1

    bbc5db679a402ce49857f204b46310f7bbd2daa8

    SHA256

    a111f9f1b25b2cad867145827969d2038e7890600afaa42d9f4d1233a015ce14

    SHA512

    087d7866a0f80e05ed57c7444648f5f58672d4be3b3b99edb4be7a99bdc066b60f690225d00bb8e1b3a9d91c19c041f9a26b5143b53d264e7fdd63ad67a9c055

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59951a66754f1d2c2a04cba38ecb70ea

    SHA1

    cc32e0c12256532e79fa26e1180cf6fd2b107921

    SHA256

    7481b2e72f2bab6febfea25dd9cd476f55620d2a51841d73b05b5f4cdc144af1

    SHA512

    5c982d8cf9568733888e5184d3fda2e5ca836d3f9d4cce1782137d23e1c86df6d4a7713a91205ecfd5826f89048385f9c29b27348aba099c8541107d6d01a92d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7409a3b71417113e408ec51acd00672

    SHA1

    8269bd57145da55b1b35c8ea5f32a8412146928b

    SHA256

    f8bf547d662261b01679f70ffa466a2799e542e8b1ee150ac31a50047e722f2e

    SHA512

    3449a953796f2a5c96e66317bfc8e3b5541e99c5017172461bf35b8341bd64631ff198b499e2da000725d92e496d0caa0cd7348bbeff6af967fe51d64491a9c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4593b5dfd1b10f02c8d5ff8a42afaf26

    SHA1

    32742f8fd9d760017685e745d333f407383fe1ac

    SHA256

    753710936fc29f8d433e40e6035b401c9b2de4aff6c7fa02e8381964067aec60

    SHA512

    acbefefe73287a4a6fdb44205334518599fbf380ee46694ffcd87b08547001293b35784a192023043eea387c313f64688bf07062189fe52ac8ffb069d4b4b26b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f1710eb6b751ca2a089e407582c7f2d

    SHA1

    71be4c514f4f600fe1d8dccb8f6641256434b2db

    SHA256

    e58badc2faf66fc7d302e241ecc786490db3b9a14f4e1c976589747167308588

    SHA512

    51c70e2166d5884e166cdd3e23c12760fb661dc9fb45abda7fdb266b13b667fad654155e797be1c2e9776c3e792e831113300823b5c4a2f431969291543d535f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1b0200cda3e954021f55bde9fd540e1

    SHA1

    9bba70ffca9cddaacb2889a4d2ab68c732109164

    SHA256

    dd9cdba95a6ee69fd7c0a47a68dd4a6811058973683f5e3f26da9d3d433172e7

    SHA512

    d343eed3e5731f9ad585a15c4200ce40615ba5e486656fdad5bfd2ccc274c15418b9356406cb3f344afd0a047f01faac44fa0e8ae6f2c098a1f0a9572d06b0a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35e324993bcab4a7818cc9f7945d7d05

    SHA1

    95fdac718fc6c3f7d681f15896768e2cc9175943

    SHA256

    526fc298c827e7e10babee52e07b4fcbc04eaf9ee4c07487cec8c334befc7dec

    SHA512

    1ad3954814375ccb4f2921088ac182b2581c764c76cdbd708dbf67f8c59e54c395fc7c23c63a1341990c9b7ade89d1696c6d95ecf0235d6bd9450f32d868c3db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fb994debbb2dff378882a139b4103e4

    SHA1

    6e25ceab9a821b45b551e9f4c2712cddba18ab96

    SHA256

    ad4a7fdc16507f01102349e7218a1f6b023186ee6dfe4ee5e77fac9171b5e8bc

    SHA512

    c226312d4117bbc020030257a85d5515657522537015093df08098cd72fe9a5056b85922b4cd6ffd89b516a395c37a8617a750a8084f3651aae4ea6278464aea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    119c308bce99ad7356ec211c6dc5c710

    SHA1

    3756b35948d2c16a9519a8ade6af3d3f27268a76

    SHA256

    1490e8491fdaf73d6db2ae9f687c40cc09b547ecd683f854fc7217cf5655ee80

    SHA512

    c37038546915389f561423688d9a78d013614eab98087972df09fda2612ada9bcf7b890dd4b601c5b07e9bd5da83d8cee1b3fcb18f090e3b6db67338e4cd43d6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4K0WM73A\cb=gapi[1].js

    Filesize

    133KB

    MD5

    288c5ba5b7001fe841c32f690f62cc93

    SHA1

    29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

    SHA256

    c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

    SHA512

    e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E324WJ9A\platform[1].js

    Filesize

    56KB

    MD5

    0d25af623d803b10050b53a7b218c652

    SHA1

    2dd71fa961b5df37134bc6eb987ee7b7e5861488

    SHA256

    0bcb6531cb0967359e17b655d4142b55d1eac2aed3fe5340f8ce930a7000e5d3

    SHA512

    919b48cabd548ae63a6b89dd3ac4df919b630b0cf75266d21b35ea3a6b54eb1ea5ed7371e80bb6611e105f2d994abf9f76f6dd8b6915dd2b8fda09edd263c139

  • C:\Users\Admin\AppData\Local\Temp\Cab4AF5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4AF9.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06