Analysis

  • max time kernel
    122s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 21:24

General

  • Target

    1ce2b99a60a585447364b2f36828b82a.html

  • Size

    3.5MB

  • MD5

    1ce2b99a60a585447364b2f36828b82a

  • SHA1

    50ea329f7186e22519460ba1cd881032ec815628

  • SHA256

    43cbda8b846cdc46cf4bd3c5137fc5f47fe4a4f08a88aba2ecc8d99b94e0c1ac

  • SHA512

    e0885b21730ec055ee980c343e98ad224352beed3bd17a6e1872ae03ed7b0be0aad9cbbd7f9145faa7c4ac93387acd111677a2997bb58383fdcfada5db5c10d6

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NGz:jvpjte4tT6Qz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1ce2b99a60a585447364b2f36828b82a.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1996
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1996 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1976

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          029fb1a4dfbef57ca5e8d68c678830d1

          SHA1

          7b02f2126ebb8fb033f74f3116af75c293188ac2

          SHA256

          bbd94fd43394ac6f8dcb32ea2e2a5b9657c6f18cdfcfe621c946e9a3c6d737ea

          SHA512

          9478b5e21756920d4563db78e42e2812f194b8c11065332e07e2dcb5333a59d27c1f818b32a39064c86216ea650f4b68d3f33ba6399d30f2a485e3133c2e67bc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7b45612bb33e74635eb5901835971501

          SHA1

          fe0edf7edcc304740f40f830cc2cbc1c2d65a2e2

          SHA256

          8dcad63c4122598fec14cf753bed5411b658c017db30fef6295569293384bfb8

          SHA512

          99b5233d8f05f9bdbe4b6a5af5869ce58ff72448d710f35c9525653b9500f59f1ef4411ecea2bdbe172513c13d09d49017efcf6a07271ca0a96a65cc9ad1d077

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2727b9e20dcfd95cac08a0c76562b673

          SHA1

          7829f1dc7115980495d23cd23b68bdfc03738b4c

          SHA256

          b9bda7ca69cb2e38dac6c90d543a98ed58874ed9f2b65305d6b8ad7d73764f5c

          SHA512

          aaca32a09c2ce929a3f91a12cf2da109f175393a2eda3233607c90dfc8a36b78cc7d8374a669c029ddff35e87aca7fb16cec514c3deb1ef102fdf5c348336a75

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7fb15fa6611f4b8e7974512c67732aaa

          SHA1

          39fbdcacc64a4105bf6ba82671a7d22e839b804c

          SHA256

          737cb07956d7a328bd28bbdae9680ce60ff2537a8367abc28d4bbd14b3bcf5c6

          SHA512

          61f574320fbcc5329d4698a24dbbe54182fab93e204d4021d370e8ddd49167ade51c330adc79e0ea947aaab9ac26a061d2553925ad35ee3860af531a54bea384

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a34df8c3efa0156c6c9f34eaafcf584b

          SHA1

          7c3a051b560a62f49cf42c8bb5a0ee142fcfb946

          SHA256

          3874d1b78d8d85a7dad54aa2f8acee90fbe4ffa813331a62e6173e65c4fb0312

          SHA512

          b2c2c4650d05793f6e239242ca2da9c1de7b25975ba72cc220a8b6fa90f9515116ea4e61390029ca4e40df064e847c58c2e8e067ff80076e05fb7c13412cbc46

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cc3fc6da58f0037f2eb085bf64da7ae0

          SHA1

          5e83f443ada5c146aa967675cf218e209ce12990

          SHA256

          7d196ba318848c26358b1abd803ee4af5b21b9606e5c55e254c127b853cb9ab1

          SHA512

          7b67670dc7c7e70a9009acd00172e90b047a11a8b7add14c40d58ea9fc4066e284d8a6336939b7ba702523f1e34fe5525c29f19dc922a18c3566010a5b53b748

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ab6e0d978a75d036d22233836e10ff45

          SHA1

          5c2e11812ff65af8773a44d58122c3d68b982a81

          SHA256

          c3930145bb9c4a33942d413131d1d801a2d19d471fb29d68075605461b01108a

          SHA512

          a907b9161ae57a247f39763081915f717e462138ec3c4f000e55e80a087987f51b2acee93b07b1bea8920bbb570c114f55ccaba673199e20d725d96f1de29848

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          86ffd53fbe0e4692aabea5280ec73995

          SHA1

          0e0f4edd34b00dd426f1bbb5b21068503b93da4b

          SHA256

          af0e574cb5047a27248658b65264ce86f692206348c76342d2efe0cc4d19cf4c

          SHA512

          e52a77229ed7004c548e96f70aa47547216199d3d161fe29ba3184b37076285f41a6289a718bd916565402f17b543ad18c4d659a6958df38833a1bf7ec5f99b7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          683f175109fba0994455cfa29bc41b7b

          SHA1

          b174678b729d7c267785e3fc2ae6141dcd201c00

          SHA256

          b383435bbfc14ba4f0214a65f108048efe3ce6ab77fb4d0950341ae41b16d56a

          SHA512

          fb4283debe80b568acb7b181508e6f91bea4b5c485a64dcb8707a7ee6d86a50b25bb4f4e9c6ae493a57af2efb4486fe2c705b0afd540bd8fd12d94d1684927b2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          51eafc05a5832bd006f2330c14233537

          SHA1

          c44f882cc8544c65f082506655ebd767a3f6e1e3

          SHA256

          c05ab7fcc24e2e8324a2774ecf5e2be2be6acf2db73419cdb12add604213d3cb

          SHA512

          74eebfd9eb1602a6570a9b6efb0be4acc8b13b25f8f9f91fad71efb8336244f86bec5edeb56d1e43fba203ddffd7f6feeadfe24c9f48143accf1750d5a80073f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b2617c20b2f8ea6c6c780f462dade9b9

          SHA1

          6a9bcae897b44dfb985d45df4bc990bd7da74c78

          SHA256

          8e737249403c21a216aff5d353cc4d88978aff5a3891ebdf8b7d96107dec0901

          SHA512

          98e01b3a6fa0632964e577abf7e80cf80e540eee9c099e52734d5addc53eef09c90eba38a968000d48940464b2ff21ceab0246ead57d8cd90635f0252b4cf7e4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d29471c720c9d71ef8d932b426952046

          SHA1

          baae3e5d67f62e3eb13d6175994de293e4baa9e3

          SHA256

          818ce9a56892f3aa1c37c63f511f80945b744f81423ccda982d3c75eab149cf9

          SHA512

          3e57fb856accbf90d16ae655e03189865e3d8908a65063acde30bbf8aef9185cbd0ab5e12e1b4ce35a0c4e4ae11deb89a0a5125b3ab60bc035c134cfe5c9309f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6bc1090306f60db6a2b9154e7f007887

          SHA1

          0483bf85d5d3e7062c05ed7a5317dabaa5c6d5fd

          SHA256

          261b5028279ba5f78133b3054876b71a2d7282fc5d37ca412782a7729d8c3723

          SHA512

          3c1153f96406ee1c9f4f165d60c39c4fc7997f067402acde01539016664590eabfe1f497ae40ab0b669f2574670b99d2f28d0792e61352bd8604ccfafec3190f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a6cd0f0318b0f03808b60976882e6fcb

          SHA1

          b2a39fb072104c168351b0aa3da8a9a21f5d78ad

          SHA256

          9557f67acdfdec6420eb251262fbdbb25423be71fa824962586feb22c124cc0a

          SHA512

          8535ce17a99a4accc77b25ea57d471696a4bb1080d28639a0623329f60e838a7685170d6548caea6cd3450e2373edae7605213d03580bcc2f150776637de37a7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2114e17bb79cc1c5a1f2469364019d4c

          SHA1

          7753ba81215f321a03c2a55299a17636e547e9f7

          SHA256

          8ad7de6c33a2c145ab40a2d52a58b63a1f3dab175e5416003010f76743e82d7f

          SHA512

          b62075d4a98e1badba1aaa5862b3677c087476533ad74ceb6cc25d2e67fd7b0c4f90eddf7b1aadd7bed911e80550944e43a58f72a17748a0ac97773fd2f2d6a4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          65489ba0ecde0f942995634b130b3c73

          SHA1

          1b46c14b8b4d94b038701470f70875d61cec5859

          SHA256

          2de7642cfd3036f08c8115656afc010893a5b3d0a354be7b28392bbfecea145f

          SHA512

          1bb3f2b98452a41e86617fb4c43ead62c4dcdadf5e842dc9372d8dd8f667525fb8e7479e12497deaac539c5fc62511d06c2d5f95911538332b108438a837e6e9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ab33f3b05ccca137ac61e7413188094f

          SHA1

          17c3aaa29ffbbaf3ed60819ba07a0c78deb32d43

          SHA256

          9d61bb98b4a0d7212e0ea1eae71fa7ea52f6eeca81fe16adea6f9d317eb59c18

          SHA512

          4ae641873d43b1b468979bc406fc19f66c1ba7b8d8e1121acce4189f8ca724c41fe088667306dadbfcd0a46e3a16be0a01fbd808e9395be100bc4ad9c9b3662e

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1J1BPYJ\jquery-3.1.1.min[1].js

          Filesize

          84KB

          MD5

          e071abda8fe61194711cfc2ab99fe104

          SHA1

          f647a6d37dc4ca055ced3cf64bbc1f490070acba

          SHA256

          85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

          SHA512

          53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YV6H14B0\jquery.min[1].js

          Filesize

          83KB

          MD5

          2f6b11a7e914718e0290410e85366fe9

          SHA1

          69bb69e25ca7d5ef0935317584e6153f3fd9a88c

          SHA256

          05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

          SHA512

          0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

        • C:\Users\Admin\AppData\Local\Temp\Cab4DF5.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar4DF6.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06