Analysis

  • max time kernel
    122s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 21:24

General

  • Target

    1ce2b99a60a585447364b2f36828b82a.html

  • Size

    3.5MB

  • MD5

    1ce2b99a60a585447364b2f36828b82a

  • SHA1

    50ea329f7186e22519460ba1cd881032ec815628

  • SHA256

    43cbda8b846cdc46cf4bd3c5137fc5f47fe4a4f08a88aba2ecc8d99b94e0c1ac

  • SHA512

    e0885b21730ec055ee980c343e98ad224352beed3bd17a6e1872ae03ed7b0be0aad9cbbd7f9145faa7c4ac93387acd111677a2997bb58383fdcfada5db5c10d6

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NGz:jvpjte4tT6Qz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1ce2b99a60a585447364b2f36828b82a.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1996
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1996 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1976

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    029fb1a4dfbef57ca5e8d68c678830d1

    SHA1

    7b02f2126ebb8fb033f74f3116af75c293188ac2

    SHA256

    bbd94fd43394ac6f8dcb32ea2e2a5b9657c6f18cdfcfe621c946e9a3c6d737ea

    SHA512

    9478b5e21756920d4563db78e42e2812f194b8c11065332e07e2dcb5333a59d27c1f818b32a39064c86216ea650f4b68d3f33ba6399d30f2a485e3133c2e67bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b45612bb33e74635eb5901835971501

    SHA1

    fe0edf7edcc304740f40f830cc2cbc1c2d65a2e2

    SHA256

    8dcad63c4122598fec14cf753bed5411b658c017db30fef6295569293384bfb8

    SHA512

    99b5233d8f05f9bdbe4b6a5af5869ce58ff72448d710f35c9525653b9500f59f1ef4411ecea2bdbe172513c13d09d49017efcf6a07271ca0a96a65cc9ad1d077

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2727b9e20dcfd95cac08a0c76562b673

    SHA1

    7829f1dc7115980495d23cd23b68bdfc03738b4c

    SHA256

    b9bda7ca69cb2e38dac6c90d543a98ed58874ed9f2b65305d6b8ad7d73764f5c

    SHA512

    aaca32a09c2ce929a3f91a12cf2da109f175393a2eda3233607c90dfc8a36b78cc7d8374a669c029ddff35e87aca7fb16cec514c3deb1ef102fdf5c348336a75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fb15fa6611f4b8e7974512c67732aaa

    SHA1

    39fbdcacc64a4105bf6ba82671a7d22e839b804c

    SHA256

    737cb07956d7a328bd28bbdae9680ce60ff2537a8367abc28d4bbd14b3bcf5c6

    SHA512

    61f574320fbcc5329d4698a24dbbe54182fab93e204d4021d370e8ddd49167ade51c330adc79e0ea947aaab9ac26a061d2553925ad35ee3860af531a54bea384

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a34df8c3efa0156c6c9f34eaafcf584b

    SHA1

    7c3a051b560a62f49cf42c8bb5a0ee142fcfb946

    SHA256

    3874d1b78d8d85a7dad54aa2f8acee90fbe4ffa813331a62e6173e65c4fb0312

    SHA512

    b2c2c4650d05793f6e239242ca2da9c1de7b25975ba72cc220a8b6fa90f9515116ea4e61390029ca4e40df064e847c58c2e8e067ff80076e05fb7c13412cbc46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc3fc6da58f0037f2eb085bf64da7ae0

    SHA1

    5e83f443ada5c146aa967675cf218e209ce12990

    SHA256

    7d196ba318848c26358b1abd803ee4af5b21b9606e5c55e254c127b853cb9ab1

    SHA512

    7b67670dc7c7e70a9009acd00172e90b047a11a8b7add14c40d58ea9fc4066e284d8a6336939b7ba702523f1e34fe5525c29f19dc922a18c3566010a5b53b748

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab6e0d978a75d036d22233836e10ff45

    SHA1

    5c2e11812ff65af8773a44d58122c3d68b982a81

    SHA256

    c3930145bb9c4a33942d413131d1d801a2d19d471fb29d68075605461b01108a

    SHA512

    a907b9161ae57a247f39763081915f717e462138ec3c4f000e55e80a087987f51b2acee93b07b1bea8920bbb570c114f55ccaba673199e20d725d96f1de29848

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86ffd53fbe0e4692aabea5280ec73995

    SHA1

    0e0f4edd34b00dd426f1bbb5b21068503b93da4b

    SHA256

    af0e574cb5047a27248658b65264ce86f692206348c76342d2efe0cc4d19cf4c

    SHA512

    e52a77229ed7004c548e96f70aa47547216199d3d161fe29ba3184b37076285f41a6289a718bd916565402f17b543ad18c4d659a6958df38833a1bf7ec5f99b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    683f175109fba0994455cfa29bc41b7b

    SHA1

    b174678b729d7c267785e3fc2ae6141dcd201c00

    SHA256

    b383435bbfc14ba4f0214a65f108048efe3ce6ab77fb4d0950341ae41b16d56a

    SHA512

    fb4283debe80b568acb7b181508e6f91bea4b5c485a64dcb8707a7ee6d86a50b25bb4f4e9c6ae493a57af2efb4486fe2c705b0afd540bd8fd12d94d1684927b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51eafc05a5832bd006f2330c14233537

    SHA1

    c44f882cc8544c65f082506655ebd767a3f6e1e3

    SHA256

    c05ab7fcc24e2e8324a2774ecf5e2be2be6acf2db73419cdb12add604213d3cb

    SHA512

    74eebfd9eb1602a6570a9b6efb0be4acc8b13b25f8f9f91fad71efb8336244f86bec5edeb56d1e43fba203ddffd7f6feeadfe24c9f48143accf1750d5a80073f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2617c20b2f8ea6c6c780f462dade9b9

    SHA1

    6a9bcae897b44dfb985d45df4bc990bd7da74c78

    SHA256

    8e737249403c21a216aff5d353cc4d88978aff5a3891ebdf8b7d96107dec0901

    SHA512

    98e01b3a6fa0632964e577abf7e80cf80e540eee9c099e52734d5addc53eef09c90eba38a968000d48940464b2ff21ceab0246ead57d8cd90635f0252b4cf7e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d29471c720c9d71ef8d932b426952046

    SHA1

    baae3e5d67f62e3eb13d6175994de293e4baa9e3

    SHA256

    818ce9a56892f3aa1c37c63f511f80945b744f81423ccda982d3c75eab149cf9

    SHA512

    3e57fb856accbf90d16ae655e03189865e3d8908a65063acde30bbf8aef9185cbd0ab5e12e1b4ce35a0c4e4ae11deb89a0a5125b3ab60bc035c134cfe5c9309f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bc1090306f60db6a2b9154e7f007887

    SHA1

    0483bf85d5d3e7062c05ed7a5317dabaa5c6d5fd

    SHA256

    261b5028279ba5f78133b3054876b71a2d7282fc5d37ca412782a7729d8c3723

    SHA512

    3c1153f96406ee1c9f4f165d60c39c4fc7997f067402acde01539016664590eabfe1f497ae40ab0b669f2574670b99d2f28d0792e61352bd8604ccfafec3190f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6cd0f0318b0f03808b60976882e6fcb

    SHA1

    b2a39fb072104c168351b0aa3da8a9a21f5d78ad

    SHA256

    9557f67acdfdec6420eb251262fbdbb25423be71fa824962586feb22c124cc0a

    SHA512

    8535ce17a99a4accc77b25ea57d471696a4bb1080d28639a0623329f60e838a7685170d6548caea6cd3450e2373edae7605213d03580bcc2f150776637de37a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2114e17bb79cc1c5a1f2469364019d4c

    SHA1

    7753ba81215f321a03c2a55299a17636e547e9f7

    SHA256

    8ad7de6c33a2c145ab40a2d52a58b63a1f3dab175e5416003010f76743e82d7f

    SHA512

    b62075d4a98e1badba1aaa5862b3677c087476533ad74ceb6cc25d2e67fd7b0c4f90eddf7b1aadd7bed911e80550944e43a58f72a17748a0ac97773fd2f2d6a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65489ba0ecde0f942995634b130b3c73

    SHA1

    1b46c14b8b4d94b038701470f70875d61cec5859

    SHA256

    2de7642cfd3036f08c8115656afc010893a5b3d0a354be7b28392bbfecea145f

    SHA512

    1bb3f2b98452a41e86617fb4c43ead62c4dcdadf5e842dc9372d8dd8f667525fb8e7479e12497deaac539c5fc62511d06c2d5f95911538332b108438a837e6e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab33f3b05ccca137ac61e7413188094f

    SHA1

    17c3aaa29ffbbaf3ed60819ba07a0c78deb32d43

    SHA256

    9d61bb98b4a0d7212e0ea1eae71fa7ea52f6eeca81fe16adea6f9d317eb59c18

    SHA512

    4ae641873d43b1b468979bc406fc19f66c1ba7b8d8e1121acce4189f8ca724c41fe088667306dadbfcd0a46e3a16be0a01fbd808e9395be100bc4ad9c9b3662e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1J1BPYJ\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YV6H14B0\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab4DF5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4DF6.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06