Analysis

  • max time kernel
    66s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 02:03

General

  • Target

    23c9d6fd492a5dc56a9801c867dbff73.html

  • Size

    3.5MB

  • MD5

    23c9d6fd492a5dc56a9801c867dbff73

  • SHA1

    05d2fdf5731c7dc58250fed4ec145f8a601be15b

  • SHA256

    6a1f2f7eaa652c94d92c3973d8828b41f4dc868a94f31d1643d9900c63a1a822

  • SHA512

    184f7cfc51659fd19f8b80c699a5e76d8413d4d1e0f4d62ddb826f02112e8c75994284e9f5ac8c490e61ccea7e7591ac24b2285efdd99a8c4e9ab7aaa9672d94

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nyz:jvpjte4tT6sz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\23c9d6fd492a5dc56a9801c867dbff73.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1644
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1644 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2436

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4de6b180e4b959b5f0799a3e19fbe1f2

          SHA1

          ee3797a54b46495efa1ec95352d39e89cf7b2a39

          SHA256

          775ace33adb414dfc0f79a3b36c2732f4bfbace7286bf1cc3ee9eb2ec23b3dc5

          SHA512

          26a741e68bd386a13508e2825fac0299a092a7471a69406efa378a62550675bef2dde604aadb500f377f0d2afd4aa31056f016e2441fd7463625032540d8abf2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          138b22ddc9aa7437af26503164dfefdb

          SHA1

          7c95ec7f1f8b20d3221275f8442ba0350e19eaf3

          SHA256

          bd49ded1ac43c961e8e38f033b08ef401099c4559a3d654d6259a18c3475540c

          SHA512

          f216b4394a74df9c28257128a6d568478f8d31aa2d9d5a6ea4540f17b2906b0e312e2123194f3170c6a15b81290a87259a74854bc5de727f00dbdcb292adad29

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4cd204aa498c31364aa1c030c4365d21

          SHA1

          55f2b22befaeabc42459affff61f4987dedf2c0e

          SHA256

          8f0f7c7b6838168400dad9f86ec1a525f23e57dfc8094a569b8697c7a5ea8daf

          SHA512

          5bff069dee44fe2184e95de26e913c0e2453a8082092e3ba26bd12629af0c6730223ae7c839517ac6afb0b1d09e45038c972333987052ec6a776933d2327637c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          db6ef953d540cce85aca46d97e406048

          SHA1

          8db1a24dd76984ebe255d3bbc8ba1d877ca4af1a

          SHA256

          178d132b2a0cf4f25157696f6b58b73f7770ac20353b7dfd30e45c8b076b701c

          SHA512

          33b5080ead8b539c48af890045d1ded919568cecb7007e24ecc60aaf8f603636060366051b056aa18dc531e8e1f16ba95049a51657262cad9e68b0363beddf9f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          16380244d890af76befe2fa19fcc721a

          SHA1

          1c65ea2baf4802c6f19e3055da599cb9a117e6ae

          SHA256

          d306e218ff4cb962b5208e66eaebf55c82a12eea408ebca45f14cccbdf30be43

          SHA512

          c86a4d32e5bfac25c0c9d5f284b67fb0e987e2fd50397851940b6a62c958757c4247be56ead83e44abfc93ad8d77e8358e2c1b1fdf5e3575076342f0eaba36f6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7928f289272d96791b53261480963c4b

          SHA1

          c8d04836789d5c72aa26f6cf76214e7be55f7259

          SHA256

          861235bd1afd9a8643902ebfcc319fbf0f8544559ca2104c325e9017131a3f1e

          SHA512

          7f36392b5e89250618b059a366e97c17e99654ea13b2a67386d43b9130b7fb8ef663a79a3761fbcbb10ec8dfcd26c5929c90d382b5a9689742c7c796cac6b956

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          71da8d4e97651935aa7b1d71d67ef00d

          SHA1

          867683829d65da5cea479bcaaea33a3812dd8522

          SHA256

          ff5f10b4f98b36003a711ba5dc6225828b570f337bab6632bf7fccf5b350736d

          SHA512

          3a3afef863b90833a1d3a3076ee90c2d537eda1299233877173eb8a41c48b40984423424171f60bb30687a57c349001742d4cac9a44c2652224a131c114d68cc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8448fca5527e95b9a431d22fe8e39c25

          SHA1

          0ae3f1dd1905be5a470b7efac391215dca797358

          SHA256

          9079e524856bfe01df54906644dd6df27adf6638d669f68b3487872630063e1d

          SHA512

          59b13748eef057580bce04e8d4a149ec7729c21a05f3effaf29872faefbdbaad89d92fa07f13a820f3f3f9f945a5c303e053ba87bea4481db053657c18055817

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9440db78331f95ef63ab3d18a3445428

          SHA1

          106b44b5ef950baf1f7df1af57c9470ceeb26ba0

          SHA256

          f89f3154257fac6b4355893b2c6ed46fb6480e7fa35a8df820ad488d9c84efb7

          SHA512

          dd8fd9718adc7e545888112c8a1abe3263a51524f3bcb8d4f238b0e0de59aafc9fdf43f951cda493a52968b201aa7606c85c4effe48c4b944ceb03f762efd2a4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cef97d16e770f43acee6d7802ad84f2b

          SHA1

          5a0bb3890b1d005f4f4135ff04d3f3ce20dcebfd

          SHA256

          8a7fc1f35a399997fff003a7bd156880b32f62bd22ddbb4403653acbca6617b0

          SHA512

          65f2cca6f6e1e888ef237b23898b8717098738647e615cba436f0a868e616d505b7b9d4b6112828f862dfb3c5919ea151915c7f2ff8c3f65e56864b8afd9f827

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f9863dc1074837a65ab77770d1601db0

          SHA1

          d40a72c04bc30560273e94b1231297a0195e89b9

          SHA256

          88a6f9115d5502d9f86f64113c1c560289f782bc6ec1793130ad9e905e20ba2e

          SHA512

          11727d02f38ea2efe1768d772c272b8cab54b19a0588c6ecae007cb696dac78c88abdc9d5eb5ef25f25ea0ab15eb7f0ac4daafc66d622d8c96cd0baa4b66614b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cfde4ef745b01db93049dc46b045168c

          SHA1

          72650468573749c996094369c7b80fde843fd6a3

          SHA256

          069227865fa7d0800b68cdfea7d5d4b5c1093166fdc1d64080391def287aa9b8

          SHA512

          47f704e75bcb913564d14b7713fd11967c7cdb277b87f124034517e9466e3f06bd8828d6ed4b8f96ffa14174daf343500b8403f7c91f565f7be1f265d8858ba9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          81422dad02a71c59f44eb4da366ae778

          SHA1

          1a3cdc154600a467b6c5905326bfb57d81b055cb

          SHA256

          5bc1ae4ce0dec9f91c97221d4271fb9a326826cfdcb710dbc98aa13d870294d1

          SHA512

          d2842451937026212342fa93afe297821ff69aba938103ed1ba1cefefd5de2a87838591b49bed58489eee0ba53fcfa32d7d794e1e53819368cae2d722f7e152a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8724095fba744e6f5675baa131a4b65c

          SHA1

          a2c6d0424d66e801d42672425ae4c2c7bc082fca

          SHA256

          bd69225c8475673f896f6f0c958a94fb9fcf74d3e211c3e040381b8f2fcc5e5b

          SHA512

          50ee75a3498875792f52b58bd653ff871a762c1ea47c9deb7bdb3ecea0b76ea109cf614b6f2b948d57ac2268e6d1a949dc1cee9265d8361312b5a1644be0d1a7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          405e4f785712146eb99780b5278e7040

          SHA1

          25cea74ea9fd172d4fb87417b03333ee4d4ed9d4

          SHA256

          6164d43a4b86783f8871e7baa89c0a322a104f88c133a8f885c664a14ef80689

          SHA512

          6359bba201476e9426819e3a6779efd8f025eb7b719e21661ddcba5e332355299743233196e4d81591b2a26178fb069fcd21ebb3ab6a889f6d1e69c87a673092

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ae8de24bbced35481ca7a323ba5e77e2

          SHA1

          65f4971f2b039d49aaf747c1cbd99f7ef8fb5f7a

          SHA256

          d03e54e27a8e603dea7efa0b1a096a3f281f07078394b6836b8d5da418ee84f2

          SHA512

          5510044f235c92e225d36a58ba657a0bf133383979b9256b451332cbd748f72da73f0504636017e5deb1af43e3684b1bee6b24b3a2783aadfa0b5be324273acf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c696d995f259e4cfc8f8db56413b4a95

          SHA1

          3ee19065b3e06fc2c78faedb20139b149768e78a

          SHA256

          401e1b71ecef7185842e2793dd77a3c9a791ca78b6de455b564530b463a38481

          SHA512

          76445b5a4b1f17b3c5191510ea1308acd02199e76b432f4073c0551b0d90d8eb6b13f11eda8f3e12f81728c784e1b77b75395902cd7c4ca1340f30a80587d215

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cd44dbe0ae57fc3ec29378074a3f65e9

          SHA1

          de09a8095dec7675d64ca10b468eb34ee645ad29

          SHA256

          842e1f9052927a2e64d3237eb11a7b3100156460270b5e74b1aacb9397ff41b0

          SHA512

          f18605f6fb68aab62e1f50a6658e4f877989c01ece75b12316ba1d69cd5d406c681de2492d567f05af94d93cc05215aa70f4f5a2435c3a23dace20534aaa72b6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c34e6806610a2105d282d02294ee0f93

          SHA1

          d34ce3a9d7101d34ada3fc3ebed3d5fac18e60a5

          SHA256

          207a79710c41f2f6a94e9988670678b00925d932beba940354f18953ef4363cc

          SHA512

          d9f21723dcd830a204137fae76f98fffeb2e08f6388e2e9a3c57241d0a9c484ad4b02c63f61a5859dab173a6a597e3e9049b5b0be9082b7d5e37163e43f66b45

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          64a5212d12ca864d43bdfbe47150d662

          SHA1

          5eb7857fd7129a9e569957831f44fbf6d38b29e4

          SHA256

          725467d34028f12443b32a5f4abd72cd8ab8ece2663c70ca9d844b73e7b5d4f7

          SHA512

          614c896bc81f0ceb9824764443c4e8672368a74cb6a660a1c60cca3dc4b498e724c6a8ec6920219eccea46ffa0e9e6d9fe4d604a42a9a3efdb5a6f716f10afae

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LSNXCBKV\jquery.min[1].js

          Filesize

          83KB

          MD5

          2f6b11a7e914718e0290410e85366fe9

          SHA1

          69bb69e25ca7d5ef0935317584e6153f3fd9a88c

          SHA256

          05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

          SHA512

          0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M61DDFBK\jquery-3.1.1.min[1].js

          Filesize

          84KB

          MD5

          e071abda8fe61194711cfc2ab99fe104

          SHA1

          f647a6d37dc4ca055ced3cf64bbc1f490070acba

          SHA256

          85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

          SHA512

          53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

        • C:\Users\Admin\AppData\Local\Temp\Cab4CBB.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar4CFD.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06