Analysis

  • max time kernel
    121s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 03:12

General

  • Target

    25e9a812bbbb5ec98d2acd10b6e592a4.html

  • Size

    3.5MB

  • MD5

    25e9a812bbbb5ec98d2acd10b6e592a4

  • SHA1

    7c60219fe2728e257643c66434608751a877129a

  • SHA256

    b8144dcc5570df2806f692648110df34cf717d32552d5de105844cf233a68a29

  • SHA512

    817beef3bc26d0947893006f8f12b34fc50a3061945578a3292765bde48d3620fd85d0bac635002e241bc41a4107449ce30863c5fd2e537e1c61cdb5de0d6dee

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NuJ:jvpjte4tT6sJ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\25e9a812bbbb5ec98d2acd10b6e592a4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:532
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:532 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a74ac0329eb47d45bdd83483c75b2e6

    SHA1

    16637549306fa4678228674743a1f8a1f75a8d31

    SHA256

    65a2e2d220d6a7da9587742160e332c7beeb77524e98e25e9679018788ff877b

    SHA512

    65ca1632df5dbfebea9f9a8d8f67b248d835a567b1b35e9b99421be30ed81ebf8771a4b8351b832e4dd67ec1c718575d107383348b34dd0f95eeca8af7e48f5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    472c355ec25607ce170a39fdfd0152a6

    SHA1

    53d4953ff12df7976e6c1ce063bfdc7428264e2d

    SHA256

    60b7c3e67be2a1625756d431561948f1a8863c8f99697969fd34c4fc5340ecb8

    SHA512

    fcac1026cee090736c32ae8a6b78964ee7033ef707cf761845204dc8746079c9aa58a186cd9d7c1117dc3affe9947afe5c083d006c54523ab06311eb9153d949

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b931a74fd536dea9b16c3f370ed691a

    SHA1

    5508513ef9c454c586277cea3405a0b7bc456379

    SHA256

    4b1e04426b8204d64a80705c8c6049042e9b230aa2353d88b749deeac0b1fa3a

    SHA512

    03fa623c60467273aaf08129bdfcc91984be7f82518492c5bbd4fcf3d7686d35d362b21873b49476458e01f360b74813a8f015368bb377881dbe5d31b9bd932b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e935549f14ec0ca346a9c62f944a175

    SHA1

    6f7cbff4f617a72b58770d7a2450f0933768bc04

    SHA256

    a68c775a1a295cfcb79d4d10f56f7950f97fca4edebaff1f11a25c16d1b3be3a

    SHA512

    db2f0767333864d1c4f9336a05ecee1cb3bade5f58b7ab4e321c1d95db2270ae7d279208718b06eb776ddf5132855034ec6d95da91494f1d1fa026a79d77b904

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8bf915779325b6ad3fa1832005ec028

    SHA1

    fb8bdc52fa0c96f2bd5d48db4b8bab9a687a016c

    SHA256

    b13516ce9b9174b1d57f671037f22780025672a70fed803bd5706430b492f935

    SHA512

    91a36abfc47e32718e8094e6995dee10ca6f413633487d0019e40551e373449c9662656ec3a9c363cb663fe0da4d9cfa9f18544ca7053fef276bb36ea90d90b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c49ec3aabf4c4f857f8d08b0932c7a9

    SHA1

    979aacb6c6bc91db5e12012b42a889e46fd7f1ed

    SHA256

    20bbed9bc14bf3ae3c38bf61bcebf2b3a715063b6b39ad78aed334135ae1bc08

    SHA512

    b17417b9c89f56c3c0ee2cf9b5098300b2191019d3d984af9d4ff8dd29d75fbd56374325812ed173d0db9fedf721ed2299870745fd44e1cc6a599b631d411899

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77f1ab031069e8d3f838ed2b9c0f6c43

    SHA1

    8e5f650254635ee285e2929a74aeb077867730c2

    SHA256

    9e2643b5567d63e56d3e08cb3af93cadbfb3eacbacd6a650d7e315faac8945b1

    SHA512

    2d799de378bd8dc1c4ddac64f9dd8391cd231f47735486c441787a8c4038a5018f4484767bd48298dfea4bb0df0f016624b3c0b3d504e5e4c67f56565f47e125

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6b5987b0f48883279f8c03a66fedd2e

    SHA1

    216af521e25c2735c8c01258f2c8328deee6aecf

    SHA256

    2bfe22b616f653eb2e921b1d9c76c044144469b0035433ca10c13f61fc2df290

    SHA512

    4c7f535a15f55fa8c6fc23ce452908a42407fc527820280a2e5e70c895221e956e9156d7c62f30f676d7120796a9d20fed853767efc6b0bb1c7911ee5c9ac692

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71f84749f4cfb314ec6a5bbdb2b829a3

    SHA1

    54dce958ab6600a2a1cdeb6803674032519b8c56

    SHA256

    cc0aee5986f7d605c1194a3b68d51493af8a0e7e3a9fd45907852c9cad1ca5d7

    SHA512

    d0b5a4801fa986ede17a5ba45d3815284b81bbbdc3e8371e07081073143ecb439ec4f9b079045459b53c3bf250d7289f1dc1f5044a4544e87a40f13a671d86cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c87c2ff76bde70d00c4af3ca078fdbf

    SHA1

    9608d20abd437548da0294c1713100bcc0bf9567

    SHA256

    7fb734ff3d5a2f3ea435ef21608ba531d842f0c71896d5b71f80d405fa01db2c

    SHA512

    9837a520fde3555d462b13b53de5ad561a86b6d6c3e83b00245dd1fba09ea9e414d164099303014979f67529ccc4a8b38afe3ad6d95fb4d73995636e43757722

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6892e5fddd9bef801e3ea7c5ad29ec6

    SHA1

    3944c0de28ed5f9191f693ed38bf5d305357fb37

    SHA256

    34273cd36f1797c22bc9128acf99a9e6da85fde1d090feba5fb460b67a04a0ed

    SHA512

    deffa8c60fb9c9b21da0feaddb08cdbe2315139585ea76a2eaf3ccef52ecf123bf09852baf5bf038e69d9c69ea430543ad1575ecc92f1c9c01bf3bbce5c4259b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57ca46e3eaacc9d90870d3f1afc2f7aa

    SHA1

    773225ea086728dcd6a8727f16af855b317bc624

    SHA256

    912cddc47ac9f38cfb5cf7c2b0f4ebb6fec8303410c0968a2781c5ec599b2763

    SHA512

    88103def521b92e7d0fe35da05e5a7f0df16b452c5f7698a37fe6595cdc9886344f5b792342472ba0e995f7ceb70ccf9744f57da250987eb9c6481e094e6b8d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23f09809b313f411a83f825e0e6304a6

    SHA1

    b5b17a866c4fc669b6b438ab91378ec5a92e6170

    SHA256

    60a6602ec219fbf881703c6ac9729a009ffb27e94217e38d14c9dc167bf54247

    SHA512

    46bbea5ef0acbedde01f85453ce9c2114baa98faba2ef9df3a0cbf42caddf1086f6344054b4d5dc588e58374eb5746e6fa9715d9e1ad5d4e66184bc94eb910f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90a67e88eb7135b74d762886bce7f110

    SHA1

    fdf6360e01637e9042d3535bcd8a6ebcaf6e7ee9

    SHA256

    e76d2dc593a659d8791dd736f4a63de63f41122310f7ab1c61bca11d35b44fe0

    SHA512

    b14db0ab5bfc52b06bb338404eb4906d33268d11099e0b8654d5f867f027322f5a8432cc748d2ecd56ca9bb6e4004cc98e2011688c5d3be4f0fc7e7687140ee1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15aed60f1a2f62258ff20174639f0395

    SHA1

    f05719493e1b8d99c0f1cbee68ce0c57310699b3

    SHA256

    f20f5156ee4f2548a13e7c4e3923c3af7035d6778aa95cfac698cf423e0872d4

    SHA512

    cb7664ccc26ba0fa93de98e985d73f575dfed5433608860b05ca4ddbbcf852875a6fef8835c1ff583af1acb98194df5a191de4a7e12f125b178c6bdfeeb44ed2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b706050572441058bda28da78f80a43

    SHA1

    5d1ceb2fdd69fad33b4df610117e83a91149436f

    SHA256

    0e493d71a704f09e3fca982d6c36d2fe4194051705820df4ca7551cded8b35b9

    SHA512

    700dc65d092b9729ad7b6a48d8496c83a40f97f8862729b856686543e7098f99ba94ea82958fe6c1594a5b057f28f7331fe442b272928a226de0038923146f91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5774e13b53043eb423f4172e73f76056

    SHA1

    5be4690cfbaa3672016293899e018ba19e9335a0

    SHA256

    7947c18fb2d79c72fa432901740e9b4bcacc8adc45c6230d8ea1f98dfbdd43ff

    SHA512

    6bc582088cd72b2f0ba87ef4a7abbffb03f05b9e32645304d802e83bd1eae02bd48161331ee492a0be5645ecec037a46f22292187030de9ada9caa5485258f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06040e22d83116349b7740fae9e69290

    SHA1

    baeca7184babc1f37d9ac194d118bb7547de9d79

    SHA256

    d336ddeb0a29abc446c5f2a640ed6baf7c00a984b6d40bec0e30dfda86604f1d

    SHA512

    73367b7c256c847824079cc6eead38a52caf585a56f7eb6d894e623570f3d912afe08c61fa15e7cc3770bcdd892c500b82cd3cb04087281df66fb086dac21971

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e08b3c92238ba3e462cb64b0efad3d4

    SHA1

    08c6eb8a6a60554ff5baf4464df0e0d0797ffb6d

    SHA256

    e9f6430aba07affebaa7a0b666c6f9432deca1a3fc82888f3df31d54218db857

    SHA512

    eca80f1fac5e78bf5bf92439fa1bd1b41673802c1aea3d12154518f56a629b8ecb44c449f7739478f201263797f2909bdaa1fd27c5aaa9ddde113d5491c5e21c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c2d3b97e613064b594271e9dbb38a6b

    SHA1

    6fc714504a326e70968ac336646b920d5acb9720

    SHA256

    974cf8f478ea29797b1ae7715f99d9227571021a29066082da9d264e6a9ceade

    SHA512

    8fe61f70980b60672373b0c87214853e2be2e3e538bbe4bc58196e5f6bdb6ff839430ab3d8920890871a83f54d235c6605af8df598a0929da2e2ab5149d86937

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb099260be85638a33125a675d989a8d

    SHA1

    e513b8a75ceb66c56e5feb47c04aa331e941c690

    SHA256

    0a970ca2a312b0767e324a2e6052c382168d5c9c7c4ab3545de62ecd9afed30f

    SHA512

    b99f8f303e8c747fef670ef09bed2bb03948d070cd09cc9b59ee148041b4ceec2f3266a55c36785d3c2d363fbec9864108b25802511fffb6315656aa73e1bc1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d99020870ead31e6809057c6b40b2e79

    SHA1

    96edff298894e6e07e69a88c4427154018876ea5

    SHA256

    5681b5da4a7804edcb4e15aa718021418344e3b3c80fc69969615256bcd1d792

    SHA512

    76ab51b7d688eb7bbfafefa424dd859f6de0e25e35cd6811dd7a47cf1fa1ea0f74ee6ea636e4752d2c8e45adf4fecb2e54292ec944994b64dc39bb62fa3b26c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    302d2ce97c79e840be77104b3b1be4b9

    SHA1

    76ea95174ac624920ffa1182ccea20eacbe96e16

    SHA256

    3212a03398b24c62d12abc801194481cd26cdd092b0355b8bae493d8a0b3190a

    SHA512

    7fa105b88f3fc98dc57ac8f53191bae76d85d41d5c657c1279050a3dd3aaa20ab749fb7355cdb25721f8bd8ba23786043be4714826c05c1f95ccd264ca0b9232

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E1CCB52I\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1J1BPYJ\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YV6H14B0\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab4D76.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4E06.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06