Analysis

  • max time kernel
    140s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 02:51

General

  • Target

    25338fc083b3bff0ae8d9531a4c3f0af.html

  • Size

    53KB

  • MD5

    25338fc083b3bff0ae8d9531a4c3f0af

  • SHA1

    369253efea3dc52152351a906288822bf8bd830c

  • SHA256

    e0136a738f679b89ea2c59ae60d2ddeefbd298e1235375bc4ea2dabf05017708

  • SHA512

    c537ebbdf1bf6327ba75a0d3f58a3a1f6128349ab0ce5b05ccf8ed1f0862ada7bc4f33f0423a034aa34c0eaae5365ff669a397a42de711f1b98e482c5b39cfbc

  • SSDEEP

    1536:CkgUiIakTqGivi+PyURrunlYm63Nj+q5VyvR0w2AzTICbb5oL/t9M/dNwIUEDmDe:CkgUiIakTqGivi+PyURrunlYm63Nj+qi

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\25338fc083b3bff0ae8d9531a4c3f0af.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1516
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1516 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2308

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd85b061d82cc885500f3c9154f2600f

    SHA1

    ab0bedc8c1ad763027b2bd27b008875fa3088975

    SHA256

    f5df8adc40d958aeded19f10cfe7325a4f127910c1f47bf516299a133cc70fad

    SHA512

    6a8b552da2bc1247e4084a8491c70c22f13949c93bea925255d8108fa65722d1ab19fc64c1c4effc0bdc62951bc7ff4012af8d968fc6eb7b73340750c2e40fd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a611cfada002797fa37abee1939c2cbe

    SHA1

    8cefb62fce79e68558490d31788ffec9474310b1

    SHA256

    2ca82369f1f23327e8552e7c690946e83cb00a99fd5f2abbee53f2040e70644f

    SHA512

    74bee2da89cbab74930dda0b64c1ed8dd9ed8cfc416c642b66f927632af78a8f6153ad3f0c07e1d396838ea8dffc3ca5b280576805e8fd97a9753544d64fbe5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b1a950036d8cfa3a2ea2eee8e22109c

    SHA1

    60d2f5e7fd2556228608bd4022dfced7ce620acd

    SHA256

    cd4bfff4fb39ab832861646f9be20ccf006fdeead68c0d96de12f4fd1ef2fba0

    SHA512

    ed1a6af57194ce45bc6bd68c758f5bdfc2c3860ae4b66058067050d9ed81cdbc9019ef28c365eca347127f62122af9ac0672daba2c66af37a7d83866609b1c09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6af9752c12496229cf78a83431d09509

    SHA1

    7db8097ccd6062730500002fbd691e8dbfb7a259

    SHA256

    411b157aed82ca864ebb9596b00d436e51e0ced0b46ca08892ca6c1f38f0dd58

    SHA512

    05cc6c05bdf006fa0d17419ebea8373d829802784529a18094ac72f053f75f6f044ee9019916382d8ea40947d59eca30ac6aab1aeed7ae134396af9ffcc555e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07bc098d53f09a332a04cf345bf56cea

    SHA1

    3d9506d246a63f88212fe031a0043c2c4439ece3

    SHA256

    41ee525cefd7c19b5d3080a3e29978e3085f4876766d7d92ccb97f551d6b66cd

    SHA512

    31e77343069e75f9132f2749c75455feac09e083751efa3550288516df2d791ce499c87b46f09955bffdaadb16e1d6f6e491ce17c118d7c05845d4f7075d9486

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7402fb829e2df9d32bb96cff84d3f35e

    SHA1

    3cbffc12f210cc00bf97419528bddaf8d3a2483f

    SHA256

    74cb92cb345997ede606e440596864db2b160cdd71235b98cbd46a63ca3c7701

    SHA512

    69c1c131a58c5c82802e4401f818d8d03061fc0f90372587e781dc36d8aaf5b6315d77c062383b8183b6fe098f4fd62cfe30668897e031aaeb5a6e80c55e0a52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fbbf95180fab1aaa710b43a36ce5298

    SHA1

    bac381c7e93d5b28392d600ecd66c8c19e1f04e4

    SHA256

    c2a40cd39ccf2e5f6db0af719c71a11fd651e637bcee7ad1b100746dab1ba13f

    SHA512

    be0af9752c73c06722adc696fe958358e99bc7ce78e2d493466ac9206e230a7f9adbd3f65efa4d4a1db478be8214bf76aced475e6600097101b2b6298c6d0122

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aebf2fe0705b01adcc16c235059cbda6

    SHA1

    c6990c0b91a1806d0a7b28f0c903402bdb9a37a8

    SHA256

    642791222ab693d7b53dff3b2953888f9c7b211948e13c4a199df37c0de47918

    SHA512

    5dcb1cdbe975aeb12aa99d5b084560447b9d911ae8e22bde5bddf295ec6919a99bc8000cec46fcb4db5600e96524a1658161905c7497637da59c02215e2f683b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37f4eb18e92be48b0d1906a6b3312f25

    SHA1

    9e6f07ae8dc53e9184fdcb5796dabde63be8b848

    SHA256

    4bb62f20014631fb87c849c394f5505c356e4c47986cc82aacc7089d950b3ee2

    SHA512

    4c881aec1bd024cc1363fbaaafa428cbcfe01817a7f0c6e7a96950224679f59be22900f8a6b95ed02107b0c92557cac88a85f031bc4680dc15c3be7c94a9b9cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57ec513c82d919949a9b26c9b9eb2c21

    SHA1

    e234224827e719e609c7cee788aac71996cd7e0e

    SHA256

    f8ba1f14de22bb02560646b712f874d1f02d55bc254a789998b27717c92f6579

    SHA512

    556f56c99dcadcdd882d0ee6035874b6796ace3dad143ed87fa6bc2537405609cea86ace3af5377d4f9d8d95a4e9514fea496ae72ac7321dcd0580741e4dcd6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18c4c189f1a1d7b6ff137a34014f755a

    SHA1

    badd5e5ddc39c34b592106836fa4f50b54bbb711

    SHA256

    8deb816cedbe4d45db694f0188c72aaeb4aa563da80c31530da9d4daa4e46150

    SHA512

    ae381c163b7b47f9880c528bfb350dbb3b2da908cf4d0999def99bbf90a3b62d29fab52fc935573069891fc4f330a1cd6054cbbffa5303ea7cc8782d004a3e2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5848e73b728a72f59dd9b4b8dea98ee1

    SHA1

    e563ea1e5f70e66084203eab0a11c3c0cd63c6fa

    SHA256

    1fd83dc16ce6b80f393e2411e24f94dc51dc93ceac23750c7524b63a1edc2092

    SHA512

    a0d248089378276fb29b88ee9bb4ea99391131ecdf3c129de06d18fac21c71d3bd3f2f2d2427f5824adaf31ca39869e7bc24a550b3e3b3ad0cf1ac84fbd0117e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    423a3ef6f11faeb5d6cbc24096152b31

    SHA1

    03c9fb757125f13b9b6ce2611b4490291b15a97c

    SHA256

    c348c38be7cec05edc9fb67a035a27e9870c6b7487210c04cac902e89766643f

    SHA512

    42317c7c486dd58e98e075166117d7318f3c785f6932019abaa6be462d347c9d759eebd514bdc143b2ad1d9c70786a022b7a54b3b6ff4d83913b204e9f8b0e9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af087069a4f1732599d5a923e2a3c616

    SHA1

    b9acfea4c919e67b56b232d8ccbe997d972c1de8

    SHA256

    e80aa3c766c1ddf71672e6ee0718f1844c1f5596d3090acd580bac7f17819668

    SHA512

    9016d8526a04ac11512f82bd537cc3cf8620c835d19182f3843a9810735e2cf13d30eb904a3d970a6ff8066e52d542c48f6495a60f04ed9889592f8237d647bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c30bd4bee15d4b4865e301d6ea1500d

    SHA1

    c34937c26158a1818a0b1d1f03867959e17716ac

    SHA256

    d0896f9680b49cf64f558bba1e7a001ae21d44671ea7ca8e5fedea1f4da39cfa

    SHA512

    90f218493b2db3729cfa518764779312b44be86674f547b9034bdf8fd90ba663571575da88f897c86cbc4162116448e770fbafbe8a90fee65eb2e9e9c1cf2624

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79f8713268dfe28f2a0007579f26009f

    SHA1

    d85c7c7d189cbb15cbc85f05d86278d6e7b3efb6

    SHA256

    6ff389fee2674df217c5a73e4ea110be2a38747d3e0fb94e85633b6c0f77b07e

    SHA512

    6e95b90f9968b30484423725ead8001731e2377dcb9fc2b909204a8500acd38ec36a6b356378a56b551593375cedcecf378e71625f4ce0bf3cc69572bf5dda64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf7600ffe3aaf8de689297ebfee7ce41

    SHA1

    df5edef61f6d7dd274376a044b87c11ab4b111d8

    SHA256

    e3a08b40802f5c0cfcfa4fa47cad1f2958f27cabb20c85997842e84bc0de04ab

    SHA512

    cd87e2f3339e8438d70eea9a4d052729dc13bcc28fab2e4ed95806763db534b90ab3a1824620f5ce7d88fcc3002f2ed3ecc50adf156ddfb62119dc09e6d40506

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3adfe28b1de9b413ac4c5029a51ae826

    SHA1

    d01cd74fc327ae22166628cdaca25b1f74013aca

    SHA256

    2dfc3e9587fdc33c000da0a79980930dd2206fa85be952eb838eec2372955a2e

    SHA512

    9d3fb349b39d21f4892c372c7e8444d6b63cb0bfd6511831af91a4882fb52caf332d7b026f3adfbbd8bd07b34e866efae65d1396740c818c88496aa972dabc60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    787e5a97c811a12052443d584b358000

    SHA1

    c24234808d08fb3636238f77d5362e73db864ca0

    SHA256

    dd20fd0bc26f49060c62909cd231dc26b0a2ff585a2fd761e1644a04f22015c7

    SHA512

    4aaa2eb9002dda89a2428560f1d85ebe28d4a9a14d9bbfe03e8775107bfbeceb2c6937d05425c4992e69421c9376a2447353950f2c72caebc9e40fec9c48b5d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8169fef58ca69a719c5462a079930d47

    SHA1

    734c1fbf2813788a585264ecb604b9f7de300b58

    SHA256

    d27896402343ded3e282dc5c97f03b9b46bf08e3233920a88636984fd1bb35fa

    SHA512

    431b56655e14436a037a55cc6ae6f93f2e9f09b857e16b96f06dfbf24599fcdd0f68e22c0f32faed39f174f41bfc5c329d78a7f6c94a164d29ca6c4350c68bcd

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U9VC31Q9\glossar-js[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab4A5B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4A8D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06