Analysis

  • max time kernel
    133s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 03:47

General

  • Target

    26e1811e103e464586f4e36f5a467615.html

  • Size

    3.5MB

  • MD5

    26e1811e103e464586f4e36f5a467615

  • SHA1

    821b2a9dd19cb4486a3245ef88a2a8c88be3ad85

  • SHA256

    70ee35cc71cde3f5cc11821742d84e714ed6e738f2445df362d42672280ed8b6

  • SHA512

    4180a9f90b993d971817c8eacc5a33a0d61f55023d657cb3f48a7bc8f3e7fcd939eab924dd256e0af06570010c5f2d5081cef1676af7dbbde8dacd2909887448

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NSu:jvpjte4tT64u

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2428 CREDAT:275457 /prefetch:2
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:2808
  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\26e1811e103e464586f4e36f5a467615.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2428

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          62fc724ad5150173a544a36f6eac53c6

          SHA1

          9850e038b942b4b482486a5255883f7bdea57ec9

          SHA256

          26ad40a21dd4371d1e4ca3508f8e1b9ae13f9ab2c2bd5baeb10f227aabf49e01

          SHA512

          40e0d5b22376a8598265fb73e76797db92db4842ef3dd532069e9782b22f3a8994bb0c7f054a8da3c6d65869cf1c0b19bdc51562b0fddc0bce4af8723569c3be

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1c396771faab973a037ddae1175955f6

          SHA1

          de4d00b917b924224abb0c6e055963b77852ecd5

          SHA256

          a05d5d3f3d2c2bbe4836966acbf00e611fd2acd4242b55a19a708c4f043c3bb2

          SHA512

          7798f1cd2700d0e14fcd866f54c5e3e10146a70a051daf8943fccb919ca82100d15607bdd51e1621459bb59b9d0738476c25b9d737e85d8048ad76ec4dc437df

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8ba32f7f12846a2bd29366ae85003ceb

          SHA1

          9f37b552b486bf0275c94704a67e185b721f1cf2

          SHA256

          d69375433522f4681aa619477db2fe229726e7091c8d6296f00809e7dbbf8175

          SHA512

          d7520caed5f19af328e96c2ee1d2d010a80d4a07be72347e84a07f77d349de13ccfb67db11528c88a7b4280525f36650bcfa0a350a203d1115e86e5257f9205f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          17a3cfdd2b22940e0d642590b632da00

          SHA1

          b2a9049fa7f2a7de28ef7e785f3e19f7fabec4d5

          SHA256

          0a58aa7fa121a5526388c613db84e0c81cc1144d6baf97fc3e1f57c6f20a4f14

          SHA512

          e500de807a0881a5ff9cff8f51a8c639f5506506cc33950be3a8a7fe8a57c25e3c60a3d5874f643dae6f1d4dfd115808966bd25941b1bd6de8ad623fdb8d4e25

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          93573d612aebe9a76dc831d68521b51d

          SHA1

          cd81590ca97808009506f09b9530a6756a82faf7

          SHA256

          b0e3892af05e382f7f0125d769b4d1eae6fc1c0a224d0fc841233286ae9d813c

          SHA512

          1ed7c3cb4df4a7f08e6c2d9be8942f44fab155018d3b03e8d0262933c42f6fc6fdcc75684f202c466f514f877b5b7cdec5222d20986163daa34e275cdc64264d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          05071bd96602aeb691bf79de8db9b4f9

          SHA1

          7da7fb99f2e5420f409459df7cca9ddf5ea70ae8

          SHA256

          ce8dd9084a225d8e244cc3c8383a858c3b472d23621222e253c46e1be299ecd7

          SHA512

          9e5e4d4693e58f9fb4410e125e103aa44d10134e7069fa74a5a516a3684246aa82ea2235a4f39af2c7422bffb429c1e6c13a4cc165799924e66598cfc07b8438

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          48814d2e6803cf7d22a07f4506cc9775

          SHA1

          502e04a9cd560196615abc349848a6578fad95c7

          SHA256

          8c8796bdf441d181c37f0845c0b7ec6b66626014d778f39d9fc3deed5fff0d4d

          SHA512

          fb13e066e7109cb70525ce04392b3e3d15ca31e6801cf7eb9ccb8c03f05975327adbdfbe0d19495417136156b968b85dfffa0ca2f2a5aafa25650cacf646f68c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6acfe8ac7e0a297c0bfbe3f472d086cc

          SHA1

          5eafb3f9a5da392df46a0245f3b8e1dd10cb60f8

          SHA256

          82ce0b0d5ea3446b30cdd7fb8b447ae182d648b47b91c47304557e5eb3bc2216

          SHA512

          881a03d9e2fdfd49cfa401d728b8645357347a00b5f122bde2e82ec850d0c55740d4978d3955092824af4192aa881213982ac129daa2a6f9a560f4517fd76bfc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          41acd6b4df804af72d5ce067ece44585

          SHA1

          bfdc600763de43ed931ddfb86ab47b691b138c7e

          SHA256

          54a10a3100810d20cfeeda6987b8a577e56b7e3b063dca165afdbdbdb1898f1e

          SHA512

          bbaade48d596466aff1f8d7ead6365d19de5f688c15a1fdc7e0068c417cc8860f5a34e258a1b99eb3b8d796e3b82a4b43833d0493c20502a56ba1f9084bf47c4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          488593e4ba1fdf00ac724beee3751535

          SHA1

          cfc9947926ef5d1af5422b27f8e38bafbd94d25a

          SHA256

          4f5fdc7f262225db0858193ecd175fd797f42cd99cb5e661b6b5c77383facdeb

          SHA512

          4b39096869fca69dad7822ec920dd48b94ca682e4927b184475942b990870c868b584d1c4a58095e96d3d9790008d92f7fb04ddc3140a9f2121b011c93c49f91

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f9a7a98f3979de0c8088b666f3a976a2

          SHA1

          fc0f63d888258abf1c95e3826b351e554c322aa1

          SHA256

          aebe4ef504bc9d8b273b9db405bc6dd68a53a95bb81be4419c6e31f9db0aeac2

          SHA512

          aaa437189010328c3f135fde3f750c033dfd69492fcd446fbb7b22aeeadcecc2c51dc3311b3b163e1ff782e1f843d7a97e5150e03135944ee060d3fe26f6f01b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f2eaf89db87dbb6ccbaa5fbb4372a2b8

          SHA1

          4e6fb3a1a56a84626869d091f4b4a4d3d0dbece6

          SHA256

          5244be7e9e401cf13d89842f386a05eb30581d82c7697cc72afaad7df0e762b0

          SHA512

          f45ca330f2e7247be79c7e8e72cba42ca502bd598e4052cba41e517c7d495bef012dfed2bf55688252e014b849b8586ef0aac908d8a7dd8ec340b79b6b75ae77

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          76f5f97068d631ea33e53e6eb85087bd

          SHA1

          e5fe94c881edd2650d53d19e255b674313b4fa2e

          SHA256

          7b6ae8436c47cfe3bedbf7313ed4eaa955bb27c844740a3815c75740dfca932e

          SHA512

          b828916a354c5bd7cecf1d492428638a3b6f75573ecbf45309a2cadae81ebeac3a7f30b451a2e15cf3eccce131e4eff4914b9c4a59cfe5fbaf2a8b1ee6c93b4f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          216488abd37a5757988fd3b719d5890f

          SHA1

          a4610681034a1674eed12973ee6bb821dfcaeced

          SHA256

          66b3c5c8724cbce7a5bcb4e93c6a90056857b659742766d5d7d0a3e7f5eb0d04

          SHA512

          0bfc71ebe8542084e7bb7834a1f59a70cf3850e1ec399dbc88738f3568be6dd4630bf2339b3a06e07719911af5fa0962e987a45a9b6539f501be90733163ac8d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c8b2e9e827453156d28d5f4dea31a02d

          SHA1

          147c75eea4a10fbc223fa800348b7e371087d7a4

          SHA256

          e776c7c4430797913a4955068d5f6f9c0905272b8b3d498c2690c6ad75a2e79c

          SHA512

          06c90aea58a7066c00cdf3d349babb04406b4ad99e34711f25ba03d2833c73591854cc1c99ec7a71f09c931e6c1a2c29345f416db20735c158c132231b1c16bb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2dda5afc6e18e3307e8de22619e2a354

          SHA1

          1df32da913afd6c5e183fe6f5f7b3edbbd14fcfc

          SHA256

          e3eb496be63f1f24e0eacf4dfd18c4afa9e3231f246c032c0cc5f60e45d3976c

          SHA512

          a37c0ac07247da55156e97aab17e0f9ca1780290a4f5f6ba6dfffc2ed880e99bcb1a1acb2fab0f5f1da98a8b0323ab1f848ad77f2f3a3779e13003013ce218e1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          eaeec0503b5751275e6b7eda2f410f6f

          SHA1

          6989b03706f480b0e86e470908d50524e2e7f9f0

          SHA256

          462abe8f30b2adeb7371de850baad6718fc9ebb05b480d1f4e009e911a2ad696

          SHA512

          d734f4358b9da18ed80568e56f79a5dd9857077c20af89081378eda70ca755a89c81c71568be3c450d4d71e333151b0157e7ed081a63914a5eadb73b1ba12efb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6790d67e2f934b52501ab00d2d65e2cc

          SHA1

          52e71ec86718013ffddb945f261320c2cd9b38ed

          SHA256

          7c9dc66624ebb1a8da7b988b658ebfec312d127c545c3210bc69f11a46224e10

          SHA512

          e7363316c59432c716c7bdfa8549840dbcb7f506fe2f2c26c52066c5f17e02506c0c34a226d3595409e453c9b6322ff36ad890cf907de434b5b24ebb1336a415

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bf1dbad10258f83fe57e853d53c73ef0

          SHA1

          d7b23126588379a4de08c80811a9950b302af3a2

          SHA256

          7656a5b973851df53904fbc650f80d4ff7fad03a0b1b9221535d5bb03bb01aab

          SHA512

          eb10c5a794c3a5f55c49d43f6c81e00fc50714983dcb6fe38fefa457e4cb74b5c13180913ca0a0295a2365a042e7a6c9e9ba79885eb4aea9018eac9fe6c55df4

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFLWQ602\jquery-3.1.1.min[1].js

          Filesize

          84KB

          MD5

          e071abda8fe61194711cfc2ab99fe104

          SHA1

          f647a6d37dc4ca055ced3cf64bbc1f490070acba

          SHA256

          85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

          SHA512

          53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFTKP12M\jquery.min[1].js

          Filesize

          83KB

          MD5

          2f6b11a7e914718e0290410e85366fe9

          SHA1

          69bb69e25ca7d5ef0935317584e6153f3fd9a88c

          SHA256

          05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

          SHA512

          0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

        • C:\Users\Admin\AppData\Local\Temp\Cab172B.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar1837.tmp

          Filesize

          94KB

          MD5

          e1abb863db1d0b032f62f49ed58f27b4

          SHA1

          c093c3fcc224d95488b8f301ba7befddf5425ffd

          SHA256

          64767e64fe26c4d639115c43832dcc7fbabebed613ad09c4f6bfb7d1a87a04c0

          SHA512

          838353a9133a71e6783aff54804d85c460c54babaa975632eac28328d92881bdae5d6b73eda28dd8121488fb71922de04ca504f69b2000a547717fa1e051b06d