Analysis

  • max time kernel
    138s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 02:16

General

  • Target

    242ed8596d722d50353a829b761dac31.html

  • Size

    113KB

  • MD5

    242ed8596d722d50353a829b761dac31

  • SHA1

    ddb99c64322965d70aa32dcc1a4140691b834d69

  • SHA256

    76427f9cd37ae394e421daaf5032200bf1168cf91a676215d9fef7d9cccdab64

  • SHA512

    aa2d56b2815f58fe3d2573db54cf3e089fd4bc1c214aa3942b8b9ff539cd4fd7093a02bffb293a4e9f00628ffe4a55e9ac9ed9aa7134bbe746d42825a78e44fa

  • SSDEEP

    1536:tih+RAvjGiapj8r37Rl0NbCHrCeMA2M7Gi+hjvUDDxuQgyVA:tucArGiD7RSNbCHrCe8MSim5yVA

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\242ed8596d722d50353a829b761dac31.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2212
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2212 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2044

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    0f6359bc07705cccea042e865517d6fe

    SHA1

    d6fbd65abd9b8ba90793e1d6a9f33b8606300058

    SHA256

    fc323ef90251e9e00bc18bb7a9943f9429dbe6be6c15942cd757985a445fc2fa

    SHA512

    44783e3fa7ecace860aaf11010043691f55361eb7dd3e5ce18ca98a6e099bdf202b97eb55a3eea69c299d9ebee3acfd2bec3554ba48b4abf0c27d9a3e275ec09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef9a62f957dc78281263ed7fa2f10788

    SHA1

    e6c848bf59943340a498c8819985af16e922ce6e

    SHA256

    eeb33b4091efddc2bd1567a89c0d8e0352f8f735c749c894688942d8d502e582

    SHA512

    e336e0c37830f759f91cd3d8e94985780af9bae22f79c984e00ad5b0c496b96a5dc882c0edf036dd563b5a40e985f5e46835002f8582ca3ea1c9ab54eefe64db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1afdf1ae07eaf9619c9b244edfdc591

    SHA1

    2289f5e6b909a749b4ff29cb892c1950b72d2120

    SHA256

    f853a80db83c25dcbc31efc4eac0adbff68c2ca210dcce2502d4f59d77da8217

    SHA512

    717a583aa9ebfe011e3caebf5114b1d7150c2c8a8f3be2e53e9281cbfaf677370a909582160e7138f10ae190cdf28b560517afd842b80a595204f19820379515

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d67842ed3a0ff0dc15ffa946e155082

    SHA1

    ada3bb82499e75758168af1652a61a63a173797b

    SHA256

    27959e6c1ec873f9a3fdc53411411648de06d03efac5abba6e82ad5de618fa73

    SHA512

    4904301c7bc61fc61dc7690a5cca158a9029a5131a095bcae5686f3180cc557fe3a0b015627a3d7f77d3f485b7d9c581b980cf58c8f50208cde151546fe9f7c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8da1d09853e21321fb113e5e47041826

    SHA1

    b0f50835e2816b6cc5198c3f54c62a18f0b47895

    SHA256

    9c30ca5af39e1f721303c8f97924765e897392e5283c1d34a1f2fc33aebc0841

    SHA512

    dd4f6d14a253e7ca3975599c52f58c1e01ab1b31e712c048086691229a54ea7e294670ff48473583bef51258d1cd0b75f54b2e30c39ff9c5c0ca38bec049dccd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bec70acb0f0600680dbf883cc649cd6

    SHA1

    4d0ed73a1424a9328a0119e9e70cceb85b9e5281

    SHA256

    3072f46c28f4c7d8b6767dc98bdc05a80b3cf9c5fbfbbf8142cfe61a1e6b3f32

    SHA512

    cfc8fc6ff96e4c838e8dc7f225af7f53598b533eb8da6d71d278608d70ac35e3c4d2f5e2c343e599ad57b861c5768b1a19a0287f0d28f9dab804f062e535edf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5076b511550c91dfed34891fbc49bf4b

    SHA1

    a593630335289d46cfc73d9060b18985be048080

    SHA256

    31a60cd2f3d80a1befd439f26684e47ac1ac40ab9f157e7756b0b745ea989301

    SHA512

    bc55f48b23555d8a0885c4cc409e4db903294b5def8de675b3cc827be32412f535b8e9769499f1f61f5e777c68b2b22c319f7de3c3a5a4c26654bfed71d5a2f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97c0ccd357f74c718ad3b4cc08115386

    SHA1

    6be806f55d3a5daa3464039da03cba469a337feb

    SHA256

    f90ded887243bec8f3bca1f9ece0949291b1f26e84c010a90191e28c16f5a2bd

    SHA512

    10e12c14573a9f659bdf582359c864197190b97ff9a5ea0c604904972f7d44a9ddfe93f5a8feaa67f1de03f99a6dd7150a678e743c4c2853bba94873b8b6640b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15011335f268f4ea69b706ab93b8e6f0

    SHA1

    316f932f2dda3781af133668c98d8bcc4918e240

    SHA256

    df5db8187042629a0d3b7ab9c18b48d9aaf2b100b7ff621ebe96225e87f744cb

    SHA512

    850932546ceff733676ceedc8df79b4e13b29613603bf086a59849653505065d8753656271204efa86cd5d9e3c7bb60692ef8b66525b8fb8a96040008cf35388

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    850a92fcf12c32763e56ddeb7cd855af

    SHA1

    9a5c14eba8f90106f4b2ecca08e7565bed196961

    SHA256

    5c921f9a8d336bf72f18209ae5edc2ca279138bb9cd64546c09740f0bb1c080d

    SHA512

    11f521980b721623fff4d4103e949f4da2b7865bc3bca5232e4469c7522b9551bb59f99a9927c2bca0428cad9437c7545bfa8d28a8fa56e50ef01ac449c93502

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fb081374bdc040c7646baaeca057f6f

    SHA1

    cac6ac430a051508f57d0748519448acf5755d31

    SHA256

    b34c98b10e7584ab5d5c216b92a94934da9a37b3b31330fda24931e8bfdc42d7

    SHA512

    6abc4b9f9f78a6450ce2027939decc602905bc4eeed87a5fe54443937c184ee4bcaa7b5ffa98810c9fb2fb2b9aed78adca676aa87f40f6dd3bc2d099bfdcec59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d62b4c7d9694a3544d7aba51744b275b

    SHA1

    5365e1a2491e5fbbabe2289e37465b9633a54b09

    SHA256

    6ff6cfc9f88d9a291d39da200e8f0c0aecbd743e7147c2494e299f0b806dcdee

    SHA512

    1e00bcc78d800790794cf820b7eec150449e52847f7043c70817e678709a3f070f873035c14afc93748698a8b59f75f133d86ea1d382e7bd6010aa1961c98a75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    105eacb172d3d290b9a7b6ea8176a48f

    SHA1

    f3ae91d0122af75dcc84c202f34d2a63de7228f8

    SHA256

    f1d6ef136e564dae0c31fba42774338281c58ae43c0542f90d2c3791c9121e9a

    SHA512

    80147ce18321e868917b4c73fba4e6de2f30dd223af314cd3b8c9949ca61eb4623e205f6cb92b6d303781a85917302ec981f3f8ad11e67eca9959587ffce672e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d7d69c63998eaefe46f875466f929c5

    SHA1

    4b3683284791c89c39bf831f7e4bba96cc7acd0a

    SHA256

    e2741439a6746e279f3223e2677de145802dbd0cf0e5d224d5f738c6f22189ff

    SHA512

    32699929dad38ea362699bfe4c9a984b0440389109c0b518389afe67ee99889316ba398c0f3d550cc18159cc063dcfb35d84906008cc373d35955280a4c2dcea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16551c188b4f2a47a8d96c47b2ca5e00

    SHA1

    9d45b23284b3e3212392894cee8d787c6819567e

    SHA256

    8199e6d70c9df29bef18753fc957ba8a4cf3d92ca1675d72461f893698b2c715

    SHA512

    6a03cbd1a2fbe0bf0f20705c4eed4a4123103797c7d4575eea2d92465acc40e8609f76647014404224979b07471eb6fc27a133458821463beef9b99965db6980

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7108e067de4bbb382f33edea91e18203

    SHA1

    969dd04ab1454823cbf62ddde991616d386cb24a

    SHA256

    4227688c52dc15f8f272435695798d663fd811da303d88751633802e9aca628c

    SHA512

    b2e7a8679fd1d76948d6df3b3c935259370b259e32c7ade6d9863952228245c7fd9308f43c4d4a52f9f53d1734f946e46512d21ece04daa84ebec5f1ef0a0109

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59403c7a5438cf5936eedb692a2963a3

    SHA1

    afdb173380d6b4f8d67ed19c62e1f4a1fdfacb24

    SHA256

    f0893504518841e784ee6ab3e0f06c21ea0410043861e9c49c97aa0c6ad232b4

    SHA512

    3fb07b4937d7beac3fba0764a11ff6837adc0cb13e316a91fbeb240f961dcc80837b7a76749e1d5f4f3ef1ded7dc8a6a37c285b7786479da848ae5a065fb3bb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    796226286b923b51c7da97046cfcf1fb

    SHA1

    eccb7cd334331b867393b7d09089b96dfe2d7872

    SHA256

    88b69dbfb97da1452942bec3509a20682bc1f6698fd0b9a36a080f8b878382c9

    SHA512

    78e21f2d33390095582790beffb43759de1930adb85ce85b4f08373b50c3a9584c68804ad0a9274b05e0df1af054932cf5e7316f05af6a46dd760ae761f33a5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd80f1fe9a321932867ef38af3ca64da

    SHA1

    05589ce38fcb8c588bd7fde2f3017033ab877f0f

    SHA256

    73217679b481badb89c3694294c0bd94a35d0865de70116f4a4238209acbc967

    SHA512

    c85d68f11c7cdc4ae4d5ea1258b6fb718a61c97ebbdd1c9402b9669e934e4e499632f7ff38a6e020a4ae945285638fdf3a255a89fe20fdf15f5c703e6042c720

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    489af10430b186104e4b21181fd55693

    SHA1

    6d77193808aa5ca91c9793464b27150c0cb79d5e

    SHA256

    341ac98e6122935f59d6bdfd7d8f7041036d46d5541b9fa5525025797ef3206a

    SHA512

    6089c7e069adf39b68fa63b58d004ffb31c3d814613d8205f33a05d20e8d64965419dc9e3308918d8fcb5410f99152948c33c8ac7e85de4ee76e0c034a4ffa04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aec6a38b29a60c3accde8101e58d6ce8

    SHA1

    1ddf22d1d4980443d57aea7007318686d31f0b75

    SHA256

    0cb84ca0ed7e323e73ea0806e0d2f3387f1140f77677e85d85dfdb3837b19b69

    SHA512

    95685e64b65c627b9fe619f1dc5a880caf2dbc8022d6377a45de82da2f1900db000b2bb73995ade3c15cf53e879dc1bcdaff93840a4adc8a55f818912bffb4f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d83c6196ad76f26e077444310b24d2b9

    SHA1

    37b3221ba564d38e15cc3941d670e473cf2e8880

    SHA256

    0cfe7fd7339817c5a4b0337e51b353dc627867286bde53097fb160b1af0006c7

    SHA512

    815b110d978c3a4a181ac2aeba958473b52bcb9a907b74adf3ff73cc7f8a9965dd53f28a9167f525da3a14f821c296fe5251e81de306194d8af6696966828db2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdebb2273983d90eaf1fc77886fd6337

    SHA1

    ef37dc624f2e768ec0fcf2d6bbbfc0516b268382

    SHA256

    f3c3a09fa2427bdeb84ac263cfd8536e0512a1c520ae16d07f9c3e8c5ad78309

    SHA512

    b846f77e600903571f886a5af94e08d30eab9657cc424bc8d1bbd9d43f1be845a794344a1bee1f40aab70fd8a7637f94fd66e2d0f16fb2624018da3aa890131c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    ba5642dcfa9d48619b53ec1f292714f9

    SHA1

    4de4d005dd15d08a010dce085c7cd08f217efba4

    SHA256

    83a699034e58ce1e40b3bb958ccaa5d2ad820e68673f57250f8cfa3911481476

    SHA512

    515ad86580934f473adf1a9aa9de01e3b50dc3b33a39ef29b58b5eced003debbb3560e3c330a0009023d389acbd9cc1a29c91ffd352df4b54854a40d6276459d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar1837.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06