Analysis

  • max time kernel
    119s
  • max time network
    161s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 01:33

General

  • Target

    22f5370cdf2357b2fa8cd0d17394b5ec.html

  • Size

    3.5MB

  • MD5

    22f5370cdf2357b2fa8cd0d17394b5ec

  • SHA1

    7f93eafb62195f8fb6da456159eecd53b86bbf22

  • SHA256

    f39b3fd5b57df6de05476b98a3bb47c0c8adeb6192d2855ae82d7702ed7ab3b9

  • SHA512

    20e6e109ed3a59718cff9d1fd7cca87a221ade43462493593d1ee410e6870143c852bc7d8495552aa01fd6e6aed423bbf168eae1e650ee37dc94fd555ce52f4c

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NNJ:jvpjte4tT6DJ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\22f5370cdf2357b2fa8cd0d17394b5ec.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2460
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2460 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2728

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1c403e29e8b0f95efbb23f74ac2895a

    SHA1

    caae4da1fffef8f6b39382287357f0e03097b5a6

    SHA256

    4745d3f7d09c479150868534d8903f5de70af93121b71f64b5d5f9e5736be218

    SHA512

    dfbccee96411a9810ee9789695396c0a858ae285bdc66890d032a9dbc0c023cf4ece51fb66204d724f0ef731762f6fd0c0bdf6f066e1b650e6778da707d775fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a24477d0d1e226475de8d58e414e00f

    SHA1

    7c543d40bb9834a58b544fc77812fee196117c48

    SHA256

    16d4f6094dd9f7ae20618e0b4928c406af4ffbf00b98ef126b3e8e3f3ff160e1

    SHA512

    b3a196f2e7e86c416448964a8c7312f8f893fb8a13ce5618bc2fc33d39ba011ada751834dc14662661c51d26eaa1c33d43cb9010f5b294999ba06bd1de3ca3fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0fbe6c50f904867de68f151fa2b0bcea

    SHA1

    8d111448cd700d14f47bb15006861374c67da420

    SHA256

    6d79137e00186c30443a35d0d00c9e538bf661acada5684f125ad74760a562e8

    SHA512

    88b206dce129b8c8963781058571f52063e79d478de72670fdc4d1b3f57cc6f33fcf6d533ff4a06ac2d4373f7726ce731261ebf8e2229392283a2140bb445b14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d632c74285e8e2968a276ff066cba76

    SHA1

    36a24748df0c6ffaad1c4e48ca27e5e7a8453c4f

    SHA256

    8642b6adef9f035e78b7533957b3bbd369a6a455c2a0e7ac4c98abe26d7f5f9f

    SHA512

    1d0c32b31b981dc2c2e35322d06186268a81cdfb57ce15d0fe17b2aac19a9ef2f15b5ea8dae926c93ce1dd341423a5f4d20ed900f3270f98504150fb4d5bf2c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48df8f1a1f5ad39369dc655a31d35968

    SHA1

    c17d6ee154e6743881b0217e6961bf54cd90b5f8

    SHA256

    0a8eab39b6963d99dd584bdf56a024c92f72959ed120342cdf4e3973718d2b84

    SHA512

    b2da3c1c474c7b25130f218ecaf5415bc5157d218fcf20088bc7ea765a17c8e4aa987fa30d67daf60c84e26c2630c3b3b977711a84d5975e4cc399f497b3701a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a0e47680a3489f5e0b7481c96da9b17

    SHA1

    9b7249d0e0510dcc413b394d8f1cbb79f1209ffa

    SHA256

    be5decaaf56c681acce281afb2ba929af92faf3838ab97b08a0649195230d510

    SHA512

    a35bb0c52d1dd645d2bf6561be4be39f74b97bc5b6b0a909c3e5e61a7b947401329c9110bd604a31d5c3024735eaab918ed41422e204fd256ca83d5c2aca1c14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3011286b28ca7b2331e247a6340d1490

    SHA1

    cb91af520f6b42b856260234cb1a16431da5676b

    SHA256

    7f3c718ccd445e7daf5df2fb17d5b8b6a31238144d0229e5c29688d302ab9a92

    SHA512

    aeec2c066f31a26e7a7a7bc96b3c2e17514aceaad354ba2ba4ecc9044d7f14c03909a52bb60a0a9fe08cef8ed8c4a0075ab3dbd2bbe95b7071073789cc7570b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    229ab69876f107a0c93d18fc507eab3b

    SHA1

    7c6f63f305420777235eabf957fc422f6149a0d1

    SHA256

    70bb8135a55af5dc0011f2c184f4c5f6595c97162f52497887aa19fe4cc63b3b

    SHA512

    cce865aa1ea852aff5e6137a708f8344e5ac9f849959ed1aff27e71f087251becc8b3a6ed156b0df29f7c8fce60f14970f20aacd2669aed7b669cfc4f6bd3d37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1119c700359575524bec26f2a3fbbf2e

    SHA1

    4a402c6e2c75724d1904ecda927c175e2a7e0121

    SHA256

    34b6614cf7f6ab2cd28c9dd8a8d77a6da212882df91e485c22ae06b7718dcb5d

    SHA512

    1ed74d62398525ea67c0a1d90478ed8bc2fb57ec66f31eda2a63f11a4fb2582ede4006072b4d1d7885c74d906f5baa14e227d0164e1daf6d1eb05d99b2e779ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c811ed28cdbc0e258ef4afa3c3c63351

    SHA1

    ae18190afe04f681512a20babdecf844a7f01770

    SHA256

    c4b80c53bb998eb0905b609796de66308b70801d5f3e96b97999a34099792f31

    SHA512

    d65ea37880fa054d689e83bf58b6188b5bc0d6590ca091eeeea2388ac743c44cb29663e6f5fb46796e5338c8b184ecc35906ae7784b9817d87275b20c4712293

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3fdfe03e1d5e439c432789640cc6864

    SHA1

    911f419f5156b40c73188cd0203c402ac44b104f

    SHA256

    6cd62c78c64c3b2c5348e680132a227f12bcf329d42f985903297be920fdd965

    SHA512

    bf9c46cbcf17ac198a6b5c89aa4bd770a76061f74d63b272bfe7fae21729361b842bdfe9ab270718b633021009332968dd5e912ccb07138faf9f4560eee4fe8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c328f98b9e7eda247b9c8f88186bb3a6

    SHA1

    852b42f98de18ae49ba225176fdb8af1d7714322

    SHA256

    f3eb72b002696baf310247e6579e9b3312b2cb8f57ff6eb490d00b4a24523bdf

    SHA512

    1421eb4c0a3dc2742982f267d68de6bf70b16a8dfdbe42e9a52fe3f6c4a53afe0c5588055399bf722566fba11453e9163f52c5ac3f02a0156edd6ba324d3fc5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    671b60048447779bbb8ca781654874cd

    SHA1

    cbabadd63d064dce6f8eac0c905bb104e5df239a

    SHA256

    007c2cd2f0d6f6e2bf0656acfc9f1440b4e87dbfb0cc675a80283f34c268ea42

    SHA512

    9c68e4eede203b017cb7c661ee23ac8b15d1d123e77d0184a780f4363174876a18930f9db122778027f698f8e03d3367108309280c296b0f3e7ad5af44787028

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10b50c0eb5f2e0e3d0783058fdfa2b57

    SHA1

    fa85074dcb26b6b519869da92162afc90dbd73b0

    SHA256

    51a30b3c39b76f7b013fe53aa85b86330051a59142ec7d20d1e4ab8b9dbd121c

    SHA512

    8df13121053a95951d8762727f3ff1f6bff5e236502c858a985f39a5ac7e7cfafc902e8e1be9bc2e5db50ff5a1c8e1bf53f80d54e4657f323495ad547fb2dd21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    569eb40d0eb0dee2c333d94486f39dad

    SHA1

    038ff099cd03fff294ab608eacd5445a4f7acaa5

    SHA256

    7a0d0b5884e78c5ccdf99f344f885e05648e5796286165f8867ba705a18265dc

    SHA512

    cb180a86ad9302d1e0a28478e62676ed67f4d3d47783e8456bd2576904f907f87641f582e9a12ba72b662798a302be6ea2121473c37dd1b226710d203ab4a86c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc5340b031b2373f81018e5722b6d082

    SHA1

    265051095d2af49d70318b7367d52606461d8fab

    SHA256

    9a18ba8bc38efa88afdf8a9d17cb7b42c4439fc2c39bdb9c9561943e64060a49

    SHA512

    676c51695cdcf74c13fec35c0be5d012793bf4c5d7ffc23c36c6878c778883f806013705219f62cd5ac2003dd075ff31e709c83a51a6c55958e2bbf818e98f1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e504859edf7a9e78ed4547256a1c7f0d

    SHA1

    4d83f379939a905f6e1f0d6d18ab89edad7f09b5

    SHA256

    6080091c368422b3d20b8083193b0f3e318f4ddf993b9cc744e752063e7663a7

    SHA512

    1c8c7f14ad2577df41d5181b2543a6aa2c837905180bdd3a98f7a26d63761c02a4f8ea7d5e426d1d06adc569a582ad623fe62a07c4acae3caea14f352aaeb56f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48a5967ddb544c23bab3e55d707b7b6f

    SHA1

    33c0da0e89be96d466d83fb97d94021f34cae303

    SHA256

    8f0ea33a14206acc4be676aff5c262336e5f113a0d94c1d83befe953070ef99a

    SHA512

    eaec9685ab964f05c2cd7699de27f1068c1ffb5fd4ccde589f585a7872888faacf195f65bed271856b25402ab48ee96e66d2949d44ff50505aaa8d71679c2b45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    103212104fe83ef98af8512f8531bbbd

    SHA1

    574da9a8317ff9ff323c3c77d152be14ff93a851

    SHA256

    56b21e2df7cd4e9787fd016916646091b5e63ff89f14ac3751252ef61e968a91

    SHA512

    e74e670b48be2662a4defacc13ea05a54cf8a9b4851c59ea0dad29d2364d9d08c4d2f1a69fc48d584d58868abdcfd3ceccc9f83fb0c228d5f0667e7bac6f3bc4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LSNXCBKV\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M61DDFBK\jquery.min[1].js

    Filesize

    44KB

    MD5

    0d94d6e5761f24f01f69c8e803ccbd69

    SHA1

    ed9dd23c77add2bd82721bf64bf4045c68b9202f

    SHA256

    932465c1799a44c7df19b00e0e3ce4edccf8acaf35459f0569942b6b95682592

    SHA512

    0d15f028cfd1831f9e56a2c8a1c2df486e11a57cb87f72e66748c8359623ef1c346adfc3c25216fac57ad71e15958f221fb3e5f688ff33ea0d84485b7ac03e22

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UOO61SKS\jquery-3.1.1.min[1].js

    Filesize

    22KB

    MD5

    c304976b8456252eefc7323d10c139a2

    SHA1

    ff78e6edd4197ea1bebf28c37769d62f463b7b32

    SHA256

    cd11f2d46f46d352d16a8b3b0c64346508222798a641082233374405ef0824cf

    SHA512

    84008b12a699b55200f92cc212ab814f7caedd6f1ba3137ff16ea5a51e563a16569e7d71f6191d195704a714001cde60d94fd46de6fd3b01d031f3d23493ad0e

  • C:\Users\Admin\AppData\Local\Temp\Cab6C0E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar78DD.tmp

    Filesize

    162KB

    MD5

    07291561842299c68bcaad4dfca96a0e

    SHA1

    011c920504b44c27025518a2c5836e47c249a8cb

    SHA256

    eb1d4faedf014f6b0ee5d9b306efb7c47687161befbdd6c6970dc10c6fc126e5

    SHA512

    d9d8871e0d49d17181fc14e413795a732ee205ec357bc648599d50b345fd9c478107d28c368a16eee2a2c0f72b9763404def74301ed60f2734fa5409a4d3ec77