Analysis

  • max time kernel
    119s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 07:25

General

  • Target

    2d4e6e22e5967da22f9617e868c720af.html

  • Size

    3.5MB

  • MD5

    2d4e6e22e5967da22f9617e868c720af

  • SHA1

    801892b092616ba064cf2c94dab6364ed4a1d4a5

  • SHA256

    2616c30fa61e590c25dbc77d1c0c62359141c07984415def464b3b9f7479c9b8

  • SHA512

    03063d56115086940736782e643b2c79fa798d1c41f56421258f51d8f3822b697fa35347c10dcde9e783e9bc1cf2a1fb18743de0b50c6cc3120cff652dd4a9f7

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NbM:jvpjte4tT6ZM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2d4e6e22e5967da22f9617e868c720af.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2888
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2888 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1968

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    a94f3849331bb44c533c5baadc540fd3

    SHA1

    7d6809d3fa3c96e19621b7849c009aa4b553c111

    SHA256

    42d434e393556b75d480fe9d04825ed0e78d70eadc7a4d10a4f55852eb3a0234

    SHA512

    37fe2e2246fc02fbd8a58611b15ac55d14e05b01bdcbe68cc59e2161c01480a7eb8ec51448e31edd16bf90a02a88f987e961549856898a76e3d7e22a928a2d30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d30de4decb8e0e038d10d11fc2003116

    SHA1

    344a07beb182dd4cc96eacc6a251d20b1a934699

    SHA256

    0f8c87513120c73652c3cbd245d18bf8df7889cfbd52e1e550c4d25c79770adf

    SHA512

    40ebfa990784998cc533bcf9b1be4d7722835b3ca11c5e5a20b83508796c14a613ca44935e26b5887be3a0c600132d22bb7b56cdf83d48a1153e7b4a9862142a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14f6ee34311b373dd792690b8457c7b3

    SHA1

    d76854805a444b334220cf10f42feff22ecd26b0

    SHA256

    793429af75ee3613a19e354a067fa3bfc56ceb1c419a7b756526cd0e6fcc60b1

    SHA512

    756509d09b98a50df517766a5ca47505f0a971b108c7caf8f55e8c73f9198b1843bbcf89cc40b8f5cb7b919b725b828b413caf4b34fcf05322630a111b7742bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6ff83d81ad75edcb6365acd7e036316

    SHA1

    b9bbbe535ec0efb171205ec028e22fe4e4b1128e

    SHA256

    2b7e3991fa0ef4112881255245b21272e6ead6abca3e9d03296beb82153f3d1c

    SHA512

    ec9586ce4533be9aafa504f6e1e9443d4394fb06386c1c9de78fc4b79d8d4086512445fe05cc7756fa0bd99683c1a677106adb6ddc6d81d8dbcc1e841a18d2df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63db3356b9f735985a5cd53fc1032c1e

    SHA1

    4364a89ecc7fccfe30df1a9462daaedd2bba2e65

    SHA256

    a728d366666e6ed44936134df19708ba98ef4b7e8ade00c193f155e7fda51dab

    SHA512

    5f07c66059a7c753838bd61cd7906c03a491fbb77e604f6bc1ccf83453d26b7b5d06bc97f8ada5b89ee2204a5e0e1619d9c9e33d0bcdc2b9c3f021041da77480

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b14c38f42e7045f5a95c2aa6f6347fee

    SHA1

    7fa6f59d6d36b4c2cc4e380e6a9935fe544a5871

    SHA256

    35fe026a2cfd292ca1045c2c794475f01cb84fc0ea7986b30d6dfea382597785

    SHA512

    0dd245f5c506959c1e8f589af98bd0ea89a406b4a918ddde58c0ca11cc484d2eb25595edebcddd9c23304fce0b4c3952a2bfbe6aa2f603e92daa910c3dc3ca30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34525f414ad653429140b542c237d20b

    SHA1

    0925b94613525b0050b3eac85ed5724a88ef00df

    SHA256

    e7a0ac451e045edd6b3985dfbdb02c6f67b7bc54606cc90ff342533733504276

    SHA512

    e437b06a4b2aa3a7ab59dc5391d40895b8a4c7c0d6cf70810c020cc03fc1b983be19a858aa397b9b522aac616283ed497779c21accae3b5e15ffdd7f803ac4f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aeccf2d782c04f4188f855999fb72168

    SHA1

    70104a6512986a3806e1b1b4104d596d33200d88

    SHA256

    cb514996270113e963b36e60dbbbe887a23884cd008af518d319f4159f80350f

    SHA512

    2397ea46b6686941a9d1718bd3594f177e9ecc8ccca33b202ab5be881fe351755b9763d7dac82782ebe588d58700f653fc4c5cb3f6ad3c6cf6f2756827f690be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6a2b4d0565640e80f1d5ea86da3ec64

    SHA1

    9dd9cbe676288d3346806272301ce80ff3bf787c

    SHA256

    c78fe200fde7496070bfe73ac95aad971e8aa85835711283254e7563c54541f0

    SHA512

    8c7f68af7aa906309b0d8962fbdc13d7ec1ee067f3278894387b77aa2e57ad9d497374f1031498227913b8d5515bdad2ce1238b8e19a808b1890fc9c40b8b868

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0636ae210309c18515a1c90ddd654267

    SHA1

    6465caefc4ce85ff925a31ef5d50071d44446234

    SHA256

    51dba78165db2c9fdd7761b21d579cb3d17a950c92ffb531b8b5e42d511a469f

    SHA512

    1eff7d7425008466a7ef8d7ea1607ad168598167341cfabbd71af2914bf50cec463c418f33b4b6c5b3286ff12e09a6dbcc67686b229f2a906407b0212301eda5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ed49aea340576166d048ece40446814

    SHA1

    9fb9d2473b1248a62662c02389453c5d8ec0ec3e

    SHA256

    bf0e73fa6dbd77bc5eca08e2b1385c30ee9f7a79edd35c164811048a34bad3fc

    SHA512

    194ed34d83bb28a38d00ae65eb387a23ff70457339358bc75eb6f06a51e874910dac19b61b72df90ea38e908391dad2b1f78dea2943d5ee451dd8efc82f98f90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c012e74a03d64f17458d916595a78591

    SHA1

    895b5b4b6b2eb17d5907e5d8f03e393ac4f4c502

    SHA256

    3bb733c1120ccbb56e6440e2f926a552e73550194dae22d0fb4e28e2c8f69bca

    SHA512

    a0a21bfefbca86bc22857d805859001d3017dd59cae9d9f611175c2017c09aa46bfd0bcfd068b0711cbcccacd3b6cce51be9361f35b77494be2822ac3c3f2b14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88cda6fc919e32632bb17c25ebec307c

    SHA1

    981f6566aecac26f17cc8faff940a3f2c72b0247

    SHA256

    fdf62a0565860a64075dbdea556dcbfd3c3d7d4d538a5340e06e7face33585b0

    SHA512

    18c040bcb5adfcec8927a5034943733d1aa2ee202a71a00105849ceae6fc36efa1659e8e0b8b30c894ffa93f5e74f144ef0421e3aeb3f25b40fd30f6ff3913c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    608930f4595371947177f2d8d509a80b

    SHA1

    3e7faada45c30a952dbb5a602b637155ef98fd5b

    SHA256

    622f67dc1633e48fe1ec82126cd1c872025d6443e966ce8ca3140fe3cc25a2f9

    SHA512

    0ca2394e5e07e5acd0fc27b08bac48a7fda92ff75c2f05560f7bb6b4b86b925e548e9c7f0d1adf1504a7b2d14b1da84924e8dadac98f9c9ea4c9af0591c2c679

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E0DZHSH9\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JO1JFN9F\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KVCWAQXB\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65