Analysis

  • max time kernel
    119s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 04:57

General

  • Target

    2910794b8b1da4e5ead9021aa30a7152.html

  • Size

    3.5MB

  • MD5

    2910794b8b1da4e5ead9021aa30a7152

  • SHA1

    931af20d9433627287fa612ff00e920d5b8e0ccc

  • SHA256

    b49c1afc1f324c33bf0cf080e52eb81f69b81d843e27bb5d23951bb06699a0ab

  • SHA512

    e56d9ad525924da72620db5cad684327eb14470589e17d24131f4f478ecb8d700150be48e28a377fe9431b826b3cb096abadc1f9d839ab72467485772438d4ac

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nf+:ovpjte4tT6N+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2910794b8b1da4e5ead9021aa30a7152.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2480
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2480 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2264

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb8af806df9979fc7ad47de1e500d5c3

    SHA1

    97f59f4ed320fc7b36f0aa04e851d383a5d29738

    SHA256

    2fbc75d52e7ae861b682d19f67dec51a50e50e9efd095eb0ff555341b4b80467

    SHA512

    3a5a72630afec987f66f95d8d7a12640a9c0b2042c8de8e9d64cf69dbb704845e74c2aa2135ef446cc2362863eec64cda8ef85c1782633c856026e12047075d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d9ed5b8ced337cfdc5e30fc2f23c215

    SHA1

    e8dd139bdf963e689447ffce2633b9d8a934fbc5

    SHA256

    156092de6e0cdb56aa86b2eb4b1a093c4c985c43126e481a48404585c0146831

    SHA512

    75a63bbc64221f682d8d27b654c00d4909f49623e65a64d5e40844914f728756b5d006d4a29dfd17e765d05116bdecb7f1e58d86d8704fa357aaa83adef10398

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb943c10c5b64ab3030d2d26acf2e205

    SHA1

    23fa0447c0e0490b0edb9308195ba2d635437de5

    SHA256

    dbe1403d47efe7c02902b9dada9eb07ffd29f29e94a86619341d628bfa2e0e7d

    SHA512

    af7bac7aebd79fa166e1b013edcbff3a9bf424dbdcf44b160a737e97d0d407e2d839764cc0ff5dc27051bc7b52141c7edded0a6dc2f68b17b0cd3168e50acd4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    935acbd106b5b2b1c9c824495cddb93b

    SHA1

    a2d89c4c51fe88ced5eebc04b4178ee1d08826cd

    SHA256

    7034b8c3ee13dc59ed0e52aba1c684c07f3fbbfcfa1be7ac05f369a8ef91b716

    SHA512

    1923d7c72286f600b0990f03346001f8d0bfb3936f7f644c66fdc66076766b3c590fa7b693083b0ffe4799c3477d5a80b71889f16fd09017a752733bd039de5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c2ed1e50e4ac8849d69ca61bd6bef8a

    SHA1

    e62e4c66755826045e931c550556450bca47967d

    SHA256

    dd9e6c3adbf72af1ddfdce2b481397adecdca54075d20963e915543390c21bf8

    SHA512

    63cde56ee84711c1ecaf1d8ebc09b5b42d242777e7fafa1cad17edc6435746e46d903666cfede80a588171057d4d65464c04bd6d2450c2d64c1eb87a93912861

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d79d313e8daf900942be06b45c64307b

    SHA1

    9a283f2a5fe9be3446510141bc13c2004d91a924

    SHA256

    afeef5c4cee745277cc1908be08606519cfab7c6528aea5abcda9be4fa2d9e54

    SHA512

    786f5c92d10e06aee18e183848c4a19962f85b32cb1e7aa86ae6aee936dea2c5c8c69ef8a34f930d3cc791cb83079202a81ecd1439fecd151e9fe3c6f185cf34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87b3aa589d150a5ee1746403bfbbff9a

    SHA1

    b0395de8d017c8adb7f4b7bb6fbc2e4c47208f02

    SHA256

    e3e703cdf9910889e4eab0f86f7222594af906c66224ad57297633e705ca843a

    SHA512

    ba94d1701dc0f39908631848ceb2aae086bd4cd449bf9c72a54bcafd10aa8a4d9f6903cacb642f4b2f986dbc5f864547cc6c0658a876958ec303c4ef1ed4435b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c25ef2605b4b887e990fd430c4b8f5e

    SHA1

    1bb9abc6376b33bab5eae06a5d63fa08428e100b

    SHA256

    fb240c6033dfafa05d621eb05fb0ac1cc1ca00d3ee53a1f8083c6702493d3ba9

    SHA512

    fa2010411b93361e2cbdcfedefa22a579bc9c2ed9fd6c72b8addf4636fc5fd91f91d5e5f244a79238d0178908771748483203d2ed50827fed827b4ef1f38b75c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58e3cb24ea111c54f087b891c30a147e

    SHA1

    02ece2fb6eda998afb2f1414273f8dce80c6d508

    SHA256

    e5c90915776d826029ad9af30c93dd92ac7bab34c89bf6100ee0afd59b4c75f4

    SHA512

    4e34776b07eb675e7498d1c4842f27463ba68ca71481cf8eee10f2bb80dcf3719b7572ce7bad414286b87454f3bec8a646d1778c8b3de5ec64d212036d94ddf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51bb1344a34e5d7451d604352110cf98

    SHA1

    2aa2ac25390d9ddaa4afd002caa22e56abe9dfbe

    SHA256

    179bd7448f522787f54423f6780645c13fb97d55596890fa01d5169bfd57f535

    SHA512

    8a5390c2d7650e05503ac95e1870bd5e9f3db98c51e8b0e6a23a488d5b79b093190cd64d0176d136d8366849684f1673f344cb9a59bdfc86107ff12ae07697e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cf3f384f4a7a03608d3f42553ce5dc0

    SHA1

    4d8c2a4da4aad0e6c827cf7f81cb765fa9d1288b

    SHA256

    da02660406174cd9c085108d911e6654444ef483011fc13542ffb81d2de738d0

    SHA512

    0ef773c32a052b1298a70e995f9b2d2c510cec2483baeb0e21c9b6523c133ef87494e9a23dfb0e4f49f9eee392a60baf367f3dfe5cab0c038220dc4918f0d84a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c9f9164780abb47525610c215490da4

    SHA1

    40e41c2086b2287b13d8d8ed7b9872b9be7a5255

    SHA256

    dc960a7864a10bd7223eb9d0533f26dcecbfb54bda8ec50254d65975a8391b14

    SHA512

    04decfec11ed539c411ee35375a099495edcfd47986e1fb03db1f541a2d9c02ad3382ce049444d7256bfaf30183662aa8c13406a06e440f42b7e66ef8ba10825

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14de5dad2a73c64f391dfd11c5ff3d38

    SHA1

    2f93c7f65434ee56e4d42ff36eeb0757835002b9

    SHA256

    8fbd6a92d54545dfdcfe6e5d198dd15aab72ddc20ec9234f050279566eaeb639

    SHA512

    3c79cdebef4449ea167d39b15558a542b63dd3b57d068ba5f9476f6147d2620e0e7bff0d3a63dc7bd7ee68528bf3cbdaed67aa473b4eb3ac0a99bf1719ed200d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1861082c03a6cceaa3eb24a113478d03

    SHA1

    3680f1f7f277a3cbc2cd7240c0458fd1c6aa6d9a

    SHA256

    02fab3f36e6becdab2129b7ff6a882dd3281ec5cfa19b33a37e46fc8582221d4

    SHA512

    5d0e6d948a72526b9733d662807a329c4c59e0c785e40471394daa6f320095b1d792b94f1a64e9db2689c86c75b97e55fdfa0c21db2cb1e9401cc556f85ea1bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0233e6d9c8326368f47c74c318938aa

    SHA1

    35d29bc899c20209c7282474439b07a3c78e4d4d

    SHA256

    5572c64062627978c55c34e8a0848b8fb5849e991bf1aefde87fad7ffa49ee05

    SHA512

    4dfc1fcf6213ec34ce1574fa8318067fdc5b816b35bdb704f4873ebd07a9f5642626e3a189af67b9fe3e54d7e900a0c896f8b06484afe010e52df991041075da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3d8d1c3dc124037bd6979145f578334

    SHA1

    59b99b25566ff183a7576a1cc42676a1ded371ee

    SHA256

    4e70b6abdf19b23882a5a36eeb734c70b5c8e71cfd3679f997024c5430a1623c

    SHA512

    75bb46b7ae71b4d68fcfe4291d621a9717fedd6e4f8adff4c471d002347bb52ec05fbfb90765556883c0f6b0682f914f9395f6f8993f5167e39c0abcf27addc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75c51c268177e83f15760ca6115519ed

    SHA1

    6e48c33091095ddf88b4844228c0e6d6a50d57bd

    SHA256

    86131bb5697c6d62e75e5dc7121bccd96d832703d46db278979196a18c782a8f

    SHA512

    767fb59bad71efd4f2b20fd9ae74c7b8619995d9220e70e33087161ee83328641b0b4ad8dfd326fe720dc8a5e061ea3fc5aa540340dddafbb75e4b686f7f0065

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e65098ec8f08923a62b80451f6db62d

    SHA1

    fc1879d7ae599b7532adbaff320bd9b425550320

    SHA256

    3af5e7888b00e89f3b30605ba44da35a0e86d15fe54c70997975f26a44a86d63

    SHA512

    1f4408834a03da20899ca126a3029a45f2e6329fe8bb8f60e9ce8d3d917bb7541c0ae69c37d56e2705099eb8c866cddcf0036fc9c3eda6d9687da238d62a58e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b1cbb43b3f7143dd59665ec7f089a67

    SHA1

    68228b1e2d9e3fe438e65810eee93efae1c2bd88

    SHA256

    d32a716501d17138ade40c93863ae36f772b1886b0750fc25c60888d35f61480

    SHA512

    a864f4e670278d5a38dd3f77947dd303b5b448a27875a3ace8d5443629624b1a4d5ce3f7d76ab55402e797d61857c55d91f935163d70138264ec14146daa559e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4K0WM73A\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JGM5U0T3\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SP6DRJYJ\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab6701.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6702.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06