Analysis

  • max time kernel
    147s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 20:44

General

  • Target

    1c16f2674321203fab1da0d965d90d09.html

  • Size

    3.5MB

  • MD5

    1c16f2674321203fab1da0d965d90d09

  • SHA1

    fa0963c59e097f3b91117563623a40c8022e5cc4

  • SHA256

    5564bb599da4ba4231a3c9c330a306677549262e19d195af869dd9e5f5132445

  • SHA512

    6268101a75ce4bb8107e569056bb01db34249d07a9919901d2c7037417f3f720543744fbc92603233da5cd33245d95a3a4af1dbfd22c5911c71353aa7d63b5f6

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfR:ovpjte4tT6NR

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1c16f2674321203fab1da0d965d90d09.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2456
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2456 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b91b8575434b447013531c20cafa8cf8

    SHA1

    e4b416e5bb1467b434d4d97db81a43e116aa93e1

    SHA256

    3d56d15399c5c3e15e01b7d47f8113be3b571db0d76df67c67428633874df619

    SHA512

    2f34133f4463da4ebbe42cd8107d97c82dc9f70e2b79b0ed75e0edc056bb9e748939bf634d882dde8e5eec8a06f6df5e1711a7fd1afa3b91b80c43a45f8c5713

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38cf17f9703a9d2ac109511c2467048d

    SHA1

    f2ca16afafedaf1c1384bd5fc9b2b105bc7c518e

    SHA256

    3dc534e714f9eb643a29efdabf5d7b37b6795708547750b6fb86ecf7e060b936

    SHA512

    b49d769ac9ae0aacf563c4d75ccfda94ac780d92a458b3e9a84457d2e284bbf4e9c5136ea61c759a8f75fe30723af47bd338a4ed429714f2156000e02a290e23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1809014656ce90820fe82ac6bf884b1c

    SHA1

    28cd29f001390f576e92cdfe891114dca715d9ce

    SHA256

    3349a0e14fc6de892e7b8d679918384f3d6c73003d0fb4f5f3bf628c123ed0c0

    SHA512

    f0c8c4b22983ae44d793bb97cfeb13e92cc8f841eec8805750a47a6b4ae8792a5a6f2fcf97bbbfeff9e88310a3aa9c05fd6f2f37e7a9c1d17b2d1f3453106d5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12c650a55d7bc57e1fcb7e547bc97eed

    SHA1

    d0e07580097a8f22a3ba6b0108e177e12bbe9f30

    SHA256

    d237dc300d0cecd4ed7d630e67b02f826bafa44fc7f78e458eeb76ca0ffdc1dd

    SHA512

    26e6c4269563973427dd13a6caac4e8683cb3a8e77a5490205acb562b0fbb862edbf563244f6ea217ba7db41eadca54e57033848cd5284df294ae5f9dcec2bf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f26cc6ba775603157bf3aae09c421781

    SHA1

    48efbe39c2d23d4715b077e46fc3bd590bfb05a2

    SHA256

    b7961cde520999fdd6333967026626a3e47181a98b2826d4b1594282cd09b76a

    SHA512

    9434240e4ae636ef18aeef1ed38e31265c36124c8896bb84b13d8e89437fc4f54ecb182ec5a33a65592111bbd60417e49d23f60c8c797e4ae3d0297c5dc15f19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f911a093c718c91cbe3b78fd198f933e

    SHA1

    7cfc2ff4e94e33ca3eb58e4ee8f45bc11547d6eb

    SHA256

    db3da35ded2f56f45ca40b86da01c2f87b5b74c2402e2b5e1f830eecaebca999

    SHA512

    77774605bf41f3d79538d87f05c50cd6e5dc6032dda4f903d878ae262b1b120efb91a6f8c003b34cfe1f3d0aa1fd98f258fc4a2f204a26bf28fbd2b185d9ddbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a94c6bbf19b4e84335084e1c5ce1dba3

    SHA1

    4b35d9c08666bcc5f39b0477de75536d0125a761

    SHA256

    8847c37306abc8378b12e1ba69c10b18a27887fb04ea962163b6be6a38a29e68

    SHA512

    d9c113b3530a9ce0782ea07d4ee4b7512052598ea011d24d6028cafad278c0bac362e483957a809358007fe7887026eb2b1c32b2e7eed8a3bbdabffccc985b6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    458a32aebeec3e63c91ee01904b21ad5

    SHA1

    c6b46a4b65967d6d6ca96ef14e6598d10befb32a

    SHA256

    1c17a612e744306c76fe878af08f7f9bd13988791948ec2027ba753bde2aa98a

    SHA512

    15ee1109bae02ad2288163bc30b78f179fdb829abcca370f3030c064d2fa13e70b0acda1b81176d31298da13ebdfeb92ba821a245e9289344907b20dbe8c5250

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c0525d743a88e1c9b144304c5d9c043

    SHA1

    1763d6f76b3bd4aaedbb00e5c9ceb9cea73fc036

    SHA256

    fe568e4c51ade205235bab80addd2deb2ec5ace4e30c9afc18b02b34be042dce

    SHA512

    b7117da85a1e917bdcd89982e32e360c85e24fa32e35edf2b887f84465a24610d8b48c78157cc865cafeeca6f980fdaea0213afb54cf1bf9b926b11f925f82d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    273b532e2facc8be130be8f3f2ba3c5d

    SHA1

    470f35b76ee045002ef956f3f958a74ece0c7341

    SHA256

    75cf42d2385b5793ef0cb4fb27e0753e60a00003bfef31e52dd3349d364535f5

    SHA512

    17007a86c8c608d2004523e010bdb639250a90b8ed3bcff24ed9df61c0ce9b5f629c2f36caf082def4ebe315c409a591214f464cc78cbfeb542b03c41534f447

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6bb99901b997eddff59297fb84affee

    SHA1

    245b5df832d1a5330c1121861b4a4c5165de04a4

    SHA256

    100cc50178be14708c829c16092b25f1d7b92b80a867f0275b4e48ba90b7f936

    SHA512

    1d2e5f811921fdbd147f3bb0bebacdbb50e7d3b00cb6a78f32b2d115ab9c8150e0616b5f51fad5e0861712204677764e608960afc56680021ab8c317cf33c52e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86e1a20428e703430aacff32910a4f97

    SHA1

    8934f209fcc205acfb08d949c8426f0b3a525439

    SHA256

    02828cb46ce34212465a8910710353ed511fe9723274fc1379e1a3a1aef0af36

    SHA512

    927d0406a60cbca19e97ef37fff0849fc52bb8162059924504df7a3307e38b149e88d4231286a724cfd32e1762120d4b8d9e6fe1be108691d2094d1d24d41c7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5300ab81ed8a7d74816e8b403dc0dcf3

    SHA1

    a3a67fa069ccd619758671241a7103fe7ab87d19

    SHA256

    e590e03e0d1471b54f4abb2fa39f954c59051419c0d37b17ac2d2b7c32a96979

    SHA512

    9ff4ca60ce6320b7a80d428564cd601bd5e0bf9430038967c2f6435f29f4be3efb50d24866fd75a2e96db9da659496cfc1d418cdb77fb580ea6efed9c17a0946

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    412e96929f28954f5819703b028763ac

    SHA1

    6abda047224eaa4db59202290ca35337535d2d10

    SHA256

    0aef64a06f38d8dac9a7e08914e48f2b3fc67070c0e2e799e6a847211299efd6

    SHA512

    339147ecadb69cb1707fa6cf4561abfba90612c64e4bd5b153f6b3d290e560eb9e4c30d7260d65f344dd869d58949211b8e33c655595841b24718ae7982b530b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    deaec299bce63df83c13f8385a2d73de

    SHA1

    a71269131be1615d410f0281196c6abc68be4654

    SHA256

    c7452c5e65131080c64f375bee16abe33dcebd6e09896c05d1b3cc6f865143e1

    SHA512

    3cd6fdc69bf6634663a6774ea77c9bf6924c423676b8f32200dc68bbf4438172ca1ce808b6c0d8e0f17e9e2d2d43ab2f7748d7f907d6f07878ef09e1afa23ed0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28bb1dd0cc19afda1f1f7bf94ee1cd85

    SHA1

    e631c17353d8c08c77b3cfd347cbcb90a962d880

    SHA256

    4f67edbc77c1f1fd9d5ad39a6f68beff41f8a08b034d18bb3d81c996c827de1f

    SHA512

    612ba99173b644f37e27b03e536f914548f1278fa862791713d24e0ae11213dab43e71bc62f95be23c4b9ccfa97fd7e3a26ab40239a3c8f2cbc230d3ccc002d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bab09ab6b62526d60c24b9a4539b2e77

    SHA1

    b4b8e67c03de4105235ac158097487853c009ded

    SHA256

    3efe7272791f176d07b327bab9b4dfdd26f5df527940390870f2c97d4de843b6

    SHA512

    c668be723eb0cd4d7a9d2c88862cb6f38695b2a7495283a592314a3b553b224108bc8683ba3f89b25890fb36249ed8c09216b12e68b6b24213ebbf3187d7b17c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    206c4b8d5580ed94e351950b63e1ba27

    SHA1

    5aa5b3197287dffa85e2332cec3c5ad19e52bc9a

    SHA256

    e97bfcdb4eab23e808d3956b3d5d8ce60dd7ddb088c0a8a05e24569b0d91456f

    SHA512

    0125ffcfdf6c9296b1e8db7b956fd0bddf90580003d5922d90ca6905cb47f593e3a4c7368107be44017615c73e636990120bc31b5e4087b31bd036fea27b49ac

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E3F2LH07\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HVBRC7A9\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JIH1AB02\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab1788.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1CC9.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06