Analysis

  • max time kernel
    118s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 03:38

General

  • Target

    26a3e1d7e343d29763bbd6db5253797d.html

  • Size

    53KB

  • MD5

    26a3e1d7e343d29763bbd6db5253797d

  • SHA1

    92c1ddd54d75b45d65c60b86fa8f6a7a20a613b5

  • SHA256

    e0b533805c5f801867a6b1dc922b23d47b5855c9af547259997a883b0387e451

  • SHA512

    e3fdcebafd2c4e6ed5a4b68567f2c03fd35f5f1f3cd796c873be98388289e310c46e9a22965af522608638ef79144c0af0191c0a0bd19333790d29b26d2aa7d2

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUerunlYG263Nj+q5VyvR0w2AzTICbb4oP6/t9M/dNwIUTDd:CkgUiIakTqGivi+PyUerunlYl63Nj+qN

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\26a3e1d7e343d29763bbd6db5253797d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2304
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2304 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2724

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c4f5ac4ed8cb68998cacefcf8e0df08

    SHA1

    cd6502c929ae50d69a678403d570ad44f60f325b

    SHA256

    05259b347db6b3edbcde79dd676bd307261078f1741bd31dfad2e9a050e54057

    SHA512

    b65d8bf2c9bcd44fca6396703d8cd7d0a0f4fa78bc27d98b588ac8d60cee7a8fa39bca9481e9e4e606175bbcbe988a442ba9324a8ca628286ce83bd5473d15b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22565328fe7e302f61e542761435ffdc

    SHA1

    326b5e5234044e230ec600cd64ecd296e737d2c3

    SHA256

    541b3b84737fda56b4c86ba06ac95840f58e9b3c779bb0918de2607210ee525f

    SHA512

    a0558a2b7ee3c8a859f9d6d0a8f6610999d79131fb0a6b9e0bf051c993608bdd04fd34e0f05bc127c2d7c8cf55c437b901dae0645991bcf3dc8be381d05f91ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0480472e176a9131e91a0eef19249311

    SHA1

    902af80514cc51191979aa11407819658ec1f165

    SHA256

    c11322ccd067254e48b21c2b58e1242481f98c28cafb6a2ccd4d699895cef0d0

    SHA512

    49a75fd92971cb6047587d61dcf3918f4da0c97a276beb7a263e103f1eee2d8924f0652b1bb2035c5a285f058125106ebf94b10f0296b9cc005839bbc080a5e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2816e2eb100f1c026f0a2d665527ea1d

    SHA1

    272ff9ad8570fa234c1e99b338af8d8a0118345c

    SHA256

    1eed673323e7e9a7302e0c67b4d8abc1337981e92028ade48b0b36948eb8b74a

    SHA512

    a014d518bd7a29e96b9e039a411a72533adc2f7c64e815efc9d84e74a010be0475b5738ec325665d43a441767183ac45f8549b126b918c7a3df5497c9f6fc38f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    965e5994a9479ed51b44db14272d9839

    SHA1

    f19f2c7684f90335b2376e1963fa7666fefd1721

    SHA256

    d96ad1dcd35ba4d26c43f18ebe9f3c6bc986a781427dba3296543b4fb3c7abad

    SHA512

    b662d8b1b37802c10b286e7357a5cb02b8c87e695449205b992da921ff1cf26cc8b8aafad1f1461334580f81c9d0ec90d98f6a8011bb9f4adbe11b448e342524

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6cf41d14e2b042211349c1c1e3676cad

    SHA1

    5f8c7fb530f3ae9dcdfbacdf8561b1d4a4d6a4bc

    SHA256

    d6aaa1a3db5a2cdf62a2f40aa63be045d2f31b2f97c2895afb14a6a9ead6ffe6

    SHA512

    1b60f808a35ee5be2655b12870b528844d932d0079cfc49cd446ad30f4d625794756fb311464062c1acf932f4f81b7f66f890c4c0993e28b66a24c907b254c4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce1348e3ccc8802b669ac5e2da9a0cb9

    SHA1

    de94322329b85cbd35845843df1035c189c22aed

    SHA256

    6bc5e81c566ab10c0a4c68b275e08d211c0fafaef383917e848f13e99453141d

    SHA512

    bcb0a1eff2f9e2dae24527e025c25ded04e0faac051db424e128f7011b1c04314e2f46d975e777bd2b1592078f2bd14fac914a385865ba823d74083634038cdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dca31e3343c5f6c9ac719ea18edfdda5

    SHA1

    d776c1c1c39ac2e7b0999ea84ccb33fcb8c969b6

    SHA256

    1b2d0431f0041e578b0436710dc72084bb7dfdcc8fc72f50ee52fd6fe7ef1e23

    SHA512

    d0f87e6ea8f2b9460aaf343ce8805333b2b0af0bc6357c3968e629cdabc53fe73f8e888105c3b2b1b06bdc2080fcb07f404b35b473060f161a9a6e47c63b48d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fc880326443bb0a49fe518fba215162

    SHA1

    47470413bf2875dda734eb74800fdbf42d71692e

    SHA256

    6bf17bbdc008635f901ae41e86e240433ad98ba694829b3db56799c6efd543b3

    SHA512

    bd7c6c3475652dc196c39600032a69e45915da7e3d3a13bb5303e9d7890a6b468e29827c7d36bbb93aae0ef28ed1f8d844abad00061811e8d25cfa515e390ac5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcc9d70dbdd02c1f45087149ed3b80d6

    SHA1

    8f7704196c1aad224b0c6ba3790b9ba7f266b63a

    SHA256

    98387d8e02104c9333b0f611a9358088741d7eb809e6dce58cc38ca2198bae17

    SHA512

    775ea9bc6115ded685f480b4a4bb3d42092364a725008155c203379f88950b95990a3b3aba0ca897592baad0052dd77f226c80ddaa7bf6fd3532072e164ef96b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    754d9d345c6cd78f7065b42f6069da53

    SHA1

    eb52b2c680397c17931ba2df27dea06b929a260a

    SHA256

    8dce27ec9753ee7ff3dbec63a57810c226c43a5ac66c726098fb64c1bc93fc48

    SHA512

    61a48a058aa7586376c0b350d97760ff6c5e3d2866ce7ab1d58eaa2ad48762799e15a5c7b12f76a14c124250b2da22566f617d5fa63e8b992a811b52e52bebfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d3144ce5207424732b33031b8925832

    SHA1

    6aa8ee06ff7cb2a986cac44d94f75f35211ef9ab

    SHA256

    ae325c0aa2f11f44e557e2a01296d5af59a9e21d3078f3c2581cc3c4dadeccda

    SHA512

    c1013c6230d694d9cf30093acad514d9d4e91fe71ba251b2b5f4c2e097055435e507c83e355efd3b24e14d95f9b2bb17dcac5d46d85c2bc67c5cdddcaa00386e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e63927185f42536f9a65f131e5540c3

    SHA1

    ff44657b4f07028dffaada4496028cf7c17db2c0

    SHA256

    4d98932a73bf83a0fdc6add511a6b8d963ebe47c18d665c7dbe3f2aee01b6c38

    SHA512

    7a6db40ade19396b7e66cfa7a35434d08bb51f946b4f0f86d1aa3ba11c1bdd5b3183e43c846969a9dc1dc5101bacf93ec2d75bc93ea4f71d26b34d21f2fdb3e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f94f098b1a9145e1a12fd1025673c40

    SHA1

    384b04c8d4bd7127362ced3a80d8ce8241e80745

    SHA256

    db87806efc98bc868e2e427fa3ee03a45bcf6acfde775ee1279366e506c8f41b

    SHA512

    959e1f66269e693469aef89f1e64e8ed9d36a64ef6863dc8a69e0a45b22930925794a16554266eaaa2419aff989dc6af9426c889fbdad400f799f9ce7b7a97c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ad133cd6f1ed21f2b1f4a13c9a16479

    SHA1

    b0351c50752847697b895b970f0a51cf95a913a6

    SHA256

    20e1530d843d2f222fe33f1ad76244772f8f42835f5f2248717cf520daab8ef8

    SHA512

    e00f37ec397d98afce48b5ab5b9809347c5db6544e11a1e557efa1bcbc08016fa16332206ab454e1150bd11642033cf72481f31bdea42838300d534477182973

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d36facbba6e1747e88b94f440a0fe3fb

    SHA1

    c0a721d5d0c69960c5792d1504a5f4da9e1da866

    SHA256

    62189ead176fcf98a37b5636ca1328e06c29bb247b6326c0a05a95f53ae66222

    SHA512

    21e4f6cd80c6d661f7ecae8af47122cfd32d7a81116c42d4d705624f0ea7ca653303a6d41ae7d0f031c566ff9d31f41f36f80bf1c1abc8f2d3e7370cdaab2e35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6829fd4951c23e9f2f938bade3eee3df

    SHA1

    da254b380854b1a7224979075ca11ccd60edd95c

    SHA256

    0dfc5b842027a15f52c7b4d0201e6fbfe36ba726893686f0c01574e04bf7ebc7

    SHA512

    9511aae08cfdafd5e51eda1ec79d81d530bf1ff28ae5105edf76b693894f5f0dc7159e748f4bec605b9f1d257d73bba5eba0d6a9b21b46c5f6f0ff0d9bf9ee03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0284175d17af6989db48e3c4478fe4c

    SHA1

    94a3d0bc45ea82a6ebbaf58fd8908f5ca5d024b2

    SHA256

    89e2e341711a9b922131e1123f13446adfff1c7d36b5526fa3b3b91972936b80

    SHA512

    b39b82663e0ea294fd985fa026862367e0b178915aea2774b623ea04bd6398d6d6eb68304cde66c4c1e9af1d1c7d720390a2efc76f754b0fbc838dfdd0fdb257

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LSNXCBKV\script[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab5219.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar52F6.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06