Analysis

  • max time kernel
    32s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 02:50

General

  • Target

    252ee93ebff24b02685012d53eb39303.html

  • Size

    3.5MB

  • MD5

    252ee93ebff24b02685012d53eb39303

  • SHA1

    99ae9872f0fcd0f6c3359d110bac3b1dca0611f1

  • SHA256

    5328574f628a2513b0f1c9f4b650a01db4631fafe8d419d5155cfc9744f9db0c

  • SHA512

    3df923f0a5ba55050254b4e16d5e6036230ee2ec61cd4d1cd6d1c49b8fb6da5699330307b5e4c638089a713c0696a745e537709ceda700e67b5b62a5d8663f68

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NSu:jvpjte4tT64u

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\252ee93ebff24b02685012d53eb39303.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2356
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2356 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2060

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e0ab8652e3dbacac4e811bbc31173be

    SHA1

    4e1b1653c164645df8ad82bfeca52edb7ecf4606

    SHA256

    d9701353b1eeed4917e832eb2826876eb652f3f368d08ac0b6a3098853b23016

    SHA512

    8d16a5c83818d10a5ca309c009e5cccf990771840f7919176c7078630c2386558ba8152f7713b066e1d9ec8442c3bc94b47191c8d3906943470fc3631874ca39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    172b3038906c58d5d59b08639e7ebf1e

    SHA1

    12ea0c7fad401975400d2bd8fd38c5ee97fa1938

    SHA256

    aed144d87d64ef66e9aa90c54c2c502cfd4f7b5ffb6146e21e0f447c52259650

    SHA512

    c19c7bfcf81b43b31cfdf8f7488bf44f6295acca90124d7885f376c541ce7f4971641ed8e54802a54fb0b99885f1fa169105a6f8adbd67124e350b3159cd6a77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    738f00b50bb41ee8772a57c67cfd5240

    SHA1

    9e8daaa5fc9ab23e3c13af540cfaba4ba64986ea

    SHA256

    d21728d7acd01cd9c82862af8cb3c1a00f9c510da26b10e3db435c158904d1c3

    SHA512

    e0e69aa7edbcff88a338933c6303e19630890477a26e2fb5e62b4b6438d76d63e171be13255e1db8c9661afa21f2953cb9abc4d0f708e8319a2c4c33e9b555e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cc1173092fc6cb51423a3a15a44eb95

    SHA1

    33dbd7d56baaf3fb5865585da3532b38bf01c688

    SHA256

    458d91ac22dcd4db06c63f47a5ee7d16b9a3f083fd8284d98713b7826c223c1e

    SHA512

    974abd2060bbe9a531aaaa3fef0c420ac78b28521da0c1fa0a54cc8aaa1637ea1dc42794827ec7b9f0ed9e4adf8c8fac1c28799421d24c5801adf4d5a53f0826

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c273c826905bb9fd59e312a3f9aa8916

    SHA1

    c89509e2efb636d12e2306652f47b38b92ea4c4c

    SHA256

    f86d702bf2b2086c813b586913c6615c48186834adf4899e124d934797c4b7d1

    SHA512

    138062b5e2055d3c668570d54be2d3f77d17ef9239097799038e2da037980ac64ee5c6890d723aa60c0df4de2c13a2978841c17a7c4bc613ba983e628709fd51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72d3a3ea7a9e479bca06f03372fce621

    SHA1

    d94e85659bed9a2a17998a924ecc0a9a31e17f4d

    SHA256

    72b80b323f4b3bb82d1fda3e85a7047254fc3a3ab4f7f69409909c992b1a033e

    SHA512

    0125e8c97e7f8fbc286a5f811f94e1b5ba7c9ecdeece06870b4573022dbc0bbfb9dadef6e59dba9012c7e878680c69d3ac62564897aaab8705934c96b565c1b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5927a47fdf97c667b40dc8b43ce2c7e

    SHA1

    0f6db5fd35624d7cc4de976deaaa9229c835af63

    SHA256

    fde79006e8dfdc484f977d38de785ab8a5c866cb8f92de8c6943df06d70536e3

    SHA512

    28d93438f2a4e9544d678dffa49264ba18503ff1404e7071652f02fa10bf6d1be532e71ae4ffc66d7d42446ef35d19eed66825a7fd6e14f39166e9c4a5f122e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3cc4d03a4915ce78f86098477805c972

    SHA1

    fbf759a39caffbb51ab9ec4f6f23fb1990757516

    SHA256

    42427aefb3fe5f7c57f95827fabce626a9d1cd3d63baa9a47228ec1798323526

    SHA512

    32baf3889a2e1cc0e75a0ea0c6e60db33dfc492c5ebc9963df213a35bb9d5d1392a65c74d9247d428e025421fab2fc4f6862ebb56fc7a06a1c4d1c246b53dec0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e94ac0948ecf7edf2c858223fc46010c

    SHA1

    29f2921b8a7da08c12283a8fec81ff45eb5d6031

    SHA256

    c58bbe9e08b00d5d6af4d164c6724c8e252eb26e63cd2f7148314204513a191f

    SHA512

    56e3fa3f70097aabf274f583acd8650dda14719aab76ee346919789da3d312584f620be5beafbc2c3d60220d7a508403b44ea3cbcea767a4c2fd1ae3d6433c9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44901fa9b20690efe7d8804e7dae76d9

    SHA1

    3c55c49a7491d85977c107629936f432f0fd6ca1

    SHA256

    fb49c2d0dfddd7bcfabb23ce8427f8f045b13e36f375547e47c456d8bf9970b1

    SHA512

    d9016b44d33242b152b407972b8d23592b8c6f314c15e400233dc26b118e37ea307c13b80117b0c52a800ff2caad6efb5165c5af680fd79802dfc13f9c402c38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04fe9d263f810c32d45c37dd92a29d27

    SHA1

    d7f808cac48f282abcc36cedd59c4b1a4757ff03

    SHA256

    d14e0f433a3a1fec433b11a5942c7103d3684369be607b2f483f0127dbcd3079

    SHA512

    16a795b8854b5947a4a2feeb6f701bc479034ff5e0f19a068d8dd177cb200424c8fce07347bee7eac286e0ecb91f5c6902b76e9e0da568c95960728de6420b08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e6f988c7c637f4907a34a9453f49d0c

    SHA1

    17c5da2c2303836c3098b5335d900e216dc9be71

    SHA256

    7d7f17b2a4d0271d0f43bede11dea258b509b6dde8759b0502726dbcd2994fe2

    SHA512

    24c32058851606ed52f6a1b3981721e6ddc546828c5d577523bae37d04214ae392e0170bce5711ed66feaad02a82a198f8910a4ec3d67bd5339312f30a0e7946

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0bb66b1d4bf4dd246481962c060ff6bc

    SHA1

    5d322e51dbf053f5a40d3a739f1d22da21edf9f5

    SHA256

    51c5f8b6b355f941f2a72ec88b541a0fd2f45f53ef27c8f20abde892bda9b752

    SHA512

    98f48816f8d3529519b724223386e89806ef52ad15996c0ec06c091db0951efe50ad27ffdb5eeedfd9de32657f54dff4babf7658c35e1d752785f3c390a44d3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    573586e1b92d6e5771c387a16c341f14

    SHA1

    8bdcd9ddb35dbd97888504c0a456530f02f822be

    SHA256

    77afc8efda5c9fdd440502c15d392c052c72b84fbfd9ba24cbe6cad650c51a1b

    SHA512

    6532bc4a9123ca570ae8c20271109d6c8944c337183b07e80994e414185925c9b2a4cf128d39f50cf179900be9cc95c52711818af866cbb82d96e2646c5cc248

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    869a64db125fac9f1b081fce9ed9fa19

    SHA1

    bbb64c9365a89b7b397bd0114b26bbc6fd3cb304

    SHA256

    e686fdf47a570d98e3f67ee76fa977566f4c19343edfe34adda7a5175aa3dfa6

    SHA512

    234c2f02d011184a20e758886da3f2a0fc8d0e29d817356d1b23abb99e4e1c08ba7c555df501e45912595260c4474a45aef83baa2e91e5ec1e36e0c64507c0bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe4f1f4e1d0b69b3c011f08d295149f1

    SHA1

    89883281f7740f0fac8f6485bf58282cc6defd0b

    SHA256

    300a6f692904d63847c9fe0db20dc5ad28b06b3ac17bbea858d07146ab941a79

    SHA512

    0acdda2ef99d422edf0b798c82b61652d0c039422a56c0dd39c8d79fa18900f2589b026a0ed0db3d3fc0d584bebe005943963bd227dfdff4c8236d9f39dbb2ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8963f3b9f65028f906ba87766831033b

    SHA1

    6560c9cf0b25c04d2da335478c47720938b3fa81

    SHA256

    e84051cbb25465a51721c132be4d96975517a941a0436fbf23b22459d76e60c6

    SHA512

    dedc637af2e32362c982fcec8ba5dc58b7e7f74331f6526a0570ac7ac21fd1541f8acd99aef4e4a3016a91b54368fad5c8d8d109fc7409792daf21e49e7ca15f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f870552f5e3181958ac944e75f3e4a31

    SHA1

    07f4f3fa700e61b2d509fa57f9ab77b01321143d

    SHA256

    03ebd95935975bcfd9f5938f223bfbe1d2009f195c18f656816e33031ba21a98

    SHA512

    a0e19fab143d9890c1ec27c8d56ae1b51b7302c860641fd28c576cdeedb4f77cfb04549cdf3b0ac0e88fe591261eff5a3fdc17be8d5ca9ca66831866ad0f8dad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b650d455fdeebdf6c147cec2c2b0377

    SHA1

    3ad809f180a22a5337d441d92975751c31013659

    SHA256

    495ab642be7566c0efdb287f28d5cc41aa808f4d3ac6cf53b479513d0eb4bd5e

    SHA512

    1d8ef7f6d90772f6c15ac6293465f56412c74bb7b58772a5599da87a045fd598e576cb5e6f3023936e7a139542d49e1fb7e757011c89abef6fd40a77ed1e827b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0589a54b59506ac85bf4e261d197d6c

    SHA1

    4fb7ac9662544ea32daa59a0766dc2f4061d5302

    SHA256

    e5923e64e30c02dd61a211210a85dbf13d38d9e33481f3f4ce8c8d766c224d88

    SHA512

    096f375422a78af235b1abaf00b27c2e5589e0e21411e26f9d9b4558b1ddaebc6adbafd5c2ce503f3550a29dfdd818b81f32241f0a09b0708acc23c946a19507

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    137d22e4129a9bb4092214c9bfb273f2

    SHA1

    c657b06e1aa9f11ef7c24796ccaff8199b260559

    SHA256

    d074c07e6492f275e02d8b82e2f41d195198dc0eaa6299b2cfd254ab0d8217b0

    SHA512

    03066e762b6d88d18e3d9ea70b7d51150f6494458525713b56b62a931f9cd7ed555a1867d99c51c3f6fd39e2acd332a5a0dbc94430936db16718b6304bca2f79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fba6207b344eb9e5a8ff2001be698cf4

    SHA1

    865ac709a4932f6821d741ac4799249cdf2476c4

    SHA256

    33a0f0a859c0ce7158d995ffa70ed0d5020fc40fa54d0e176472cb500c00c7b5

    SHA512

    6c10f168c2f14d5d07029289a7d60fa32bc60ae161284a0e3bb4fac5de46e2057f3ebfe7d7698d2614a2d3ac9b5f3f152a9b299d645b2f4f3e47c7b14c884ec7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eee4ba1b2a2642b88699b3bb79c25c07

    SHA1

    08a78adf4ebb45bced0d50ee0107587999ba223a

    SHA256

    daaca9e49486714ebad316a710b63b207ca3bfaab139907b2dff520be9a07d26

    SHA512

    2395c868a8a32bb77d31bc2dfbd989cc43331097aeb8027153e50beb93686748166e7f31436bb7a1938fe694ae0f7d4efa6cd90d5dd5a31e6aab5355685df07b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d24a9f4c399be4d79f2a4e9b7e437a1b

    SHA1

    a59738aea5b6eaa7dd1c696ce72094d428a2c198

    SHA256

    5603496c54eca5a780e84aca3c8e879ffe3d5578fad112941b770176788e6ad6

    SHA512

    dc94d53862d643975106774054d48bc88f80ee02fe803610c56f1eaf6f8c4381ac19e39fac178151228e96517a49d142bd56b672c14023cc256c03976904154c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6759decbff35680dc554d69f72aab242

    SHA1

    777b0a84850ab9241c974c70796da7e9f03c306d

    SHA256

    4d1574ab99cdc3a4b3d6a2dbc10ca743272fb7b7f96434311165e82de1fc3dee

    SHA512

    82462e5897ed3803ef5370f8667d889d2afd33443398da79b6a96f8106b24a62eefdd880e48e165c6e4812558e195d1019d56eecc83f51dfd44efda4c84946dc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HVBRC7A9\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JIH1AB02\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\CabAEB.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar100D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06