Analysis

  • max time kernel
    149s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 07:30

General

  • Target

    2d702555f68247d7b568e79eeef41a84.html

  • Size

    3.5MB

  • MD5

    2d702555f68247d7b568e79eeef41a84

  • SHA1

    dfb350bbb6a02596e41e8beebe0ca27b9fc18b35

  • SHA256

    70815a6993e50c0a53b3d7a49a1090e03008ba4d60a6320a9383067919f1f94d

  • SHA512

    c760f1d867fddf9183512cf40767262cb6dc0759a3e25aff709e1ee1bff419b30f0bb205e7408c4bb0f0c4276679cedd67199900b37b4fd748d7db33a8e24720

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NbP:jvpjte4tT6ZP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2d702555f68247d7b568e79eeef41a84.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2848
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2848 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2128

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6572090ca60d29963e5f6e9c8a68f81

    SHA1

    717d914fd65c25dfc0170ea04c3b9a87c8b4d860

    SHA256

    424f77c688550ab97407bf3325702cb8ac88b8c8c87fec90cd1501d0307e2917

    SHA512

    463e8ba033767e8a5e0409a7c20eb183327fbec2fea826630415ebe5d4b68e7e36dbba494f3b860becc33feb5ca0c9d4187b841ec9bdd43cc653d86df306a0d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    744729b644b438b328380118c2d12fc7

    SHA1

    acb2cb372027c432ba6b1ef9d79bb09ffb74aaa0

    SHA256

    c15248ed93f39e6acec12793e0f3ff40370033fb305ef65c8d58a3bc44ba6e85

    SHA512

    e0683fde6a36321332db97136d625a021ec8bdc0953d51bee8434a7a1be6064542cb717f7518b10f45f219802c4cfb89996347c81cda9ef7d622c027bb53574e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6981ba3761aba725bf89c4f96bc4192c

    SHA1

    c101d7f23fe2e0ee5a0a0bb0fbeab2189794be84

    SHA256

    4835c9f0ee6751eac2c332ea828e43ed7b7f30fb499f87c4d6b2226f3f1d8cd1

    SHA512

    4d578255a443a97db707230cb659121a72f5623902195e83dc41526094d5463f5b6b4ee8538094e49ec77ac24bed203548c6d13d7d15555c94fb6f2c15b80b54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7b4b6b96cb87ecb157015d6811e715f

    SHA1

    db3f2fce18d6689d4eec67fc1da0b8d0637c531b

    SHA256

    41a47e1cfb2a324f9d5693b1500d76aee9797197deb22e8b8f717b075f6f0cb0

    SHA512

    b7bdae3cbf1260292692920d46294731b3da946d89676b0f1c4ba7dbaa595fbab6b665d3188229099c3f7ea46f7bb9917f4192c4b047faf2fbcb5d5c9a94dc03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a88bd4711d363960eb145ad05148bf1d

    SHA1

    b670ccc3977268e0c014e7aa27ddfdb1383e5cd2

    SHA256

    e4068dfebe66c28ca987ad80be9f417bf77c5bdb208f93fae35b11d5f7c99d4d

    SHA512

    dda11ee8fc85e099f0d2a39350745a9bc8c7e8346c1c7c3515a462f92f7345da6cde0b367cfc47902a8e9f4b8cc0edefc40dd8b08e19ba63c848dadd9ca7609e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55df5af51d25eb3d09ee6f918a388c01

    SHA1

    4374635431ad47fb786c8e390634081b3a461aaf

    SHA256

    62813b9e850057c5a228a3f42b109493ed3b6907535ff927b5cca2d231db315d

    SHA512

    b919eec87a1e8fc4fb3761a9a16932567cc795082be7a1f7455fc3b077e0b800b23016f354185373758d981576d0127545cdbc49de254eeb2d516e5f5a11dd0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9fbf18e04891912d048a6a3a684424f

    SHA1

    a33da933c9cf6353a601adf8c3aba8b37236bfc3

    SHA256

    934365db8b6f334559eeb0d345f80b744a5229c493e2331ba46426dfec5ba7e5

    SHA512

    1ebb4c152c353765201fe978429dd1597855f6048a514aebf615f311d4e167d871355514bff901e5d6c64a14832201a8e67e839c17bf56888c9414ddad7a1c99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed76f6d60fc901b554401521c2ce6d32

    SHA1

    ea9f3232d1529009a20a057b33314ed0c25cde1b

    SHA256

    1469d67d5eed064b94b1f001b8880152a091292dec04f631aaf2f04f2e4d3212

    SHA512

    efb50cb6a971a6142828e207f706977388be6d345b85c46261c18e47d08578c13ebd759319612c0e75f5cebcdb363a2b67a0c7dd9ccd45021719b5e2d9a0d5d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26643b71205b52e0804cb99b6606243a

    SHA1

    121813eb58aee7e4024a44c2b03958c533b3083c

    SHA256

    35336848ee31b7d5f693978facd5ae83c0c5bae4426f948560c1d3216f042d81

    SHA512

    40742f8ff7bb08efb9ffb42b04b8ab9d0f1f90c6964e01db2914c11c555cf29df849572dbba344151b3df4103654cbe8e07328cd9ca73416456cdeefb83691b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4a27ef033f1076b90756a543cb209b4

    SHA1

    9ed282b93dcc24b2c716b1b50d34a18be21726ac

    SHA256

    98bff90b757d1b0165dcbbb966b6b5c473a414abca1d529a9d507dd010be2a37

    SHA512

    0e12d498d746a62bd2a26b055c6bae8b4d119dff91b7ab690571ffdaeb487d5fa5037dff0add98ad44a11bdc3f93ff076918de22eefb24483870fd8e4ed2009c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    413c30be6fcd716e0780d668e279240f

    SHA1

    c3b737c50e8711260d27c7c1bd41d01e30e95db4

    SHA256

    4b2d1968f34ad27ecfbb06aea6a32c5e2682869d7c9c5219fdbb8336e1de554c

    SHA512

    8363fb4805e79267124a81ea44f403a166bee31ac8ba71137c3ce8eb876e72847c2414503654e221fe6e865a095adc09337ffe5fe2fa1dd8c488da74b514743e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6062430e7e09c6d7943b9c2f384e69ca

    SHA1

    a7656e3ab2c410f28e2187599d8ead4eb1f478f8

    SHA256

    9adbdb2aded47a9ce821ad9c5289e436047aa5c864c1cd49235d0343036c8f7f

    SHA512

    2995fa5280d7dbb9f614588c458e4080638df1cfcdecc2d0600b818a2cc207633b04a454eaf9c2a7326a32c8d55f1d43b0c1e3a6a3ee5f04b47ef8b7c46f0b9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01308d25cb30b2ed983bbeb0bdb171b7

    SHA1

    ebf1a413dd19693c767f0da8228c1aa36610f8b1

    SHA256

    143e0eeaaf010613577873bdf86441cad1eace6ade8138f2c4929232f84c632a

    SHA512

    0f70f15446b9d2f8f3816d45160132c75ae7d4e18609c4b511eefab82ad255ac7871b884062c3877885b80b401e7d1b6e541fbd13f0f40fc1df9f61417e573ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac8a7399ceaa0fdd580cc2af5cc4997c

    SHA1

    27eb2d67e85c35c39e91ed64bc9236239569b340

    SHA256

    9ccc85f5fdd4aae8163e9399c5bbb8aa475d782b77f2ea1984587ce412949cc1

    SHA512

    9fb1b0c135c17dd6e31360ce70bdce214c86cac5a3307a573102f7e0490e3e091fdb1293a8b39914dbf214d2a909f99a95b9e177a2e0b5bcffac3927aa04a554

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdb2304b451c10ac366d5cf44580de52

    SHA1

    d17f47eac520e3396b13fa1fb97c7a0f84a06f55

    SHA256

    6e43db39dca1c47977ac67e5e4d63f02b7e248b298942c6c7c0b842ef8428517

    SHA512

    07dea61a157cb89fa27a7a2c95de5c0f44fac0d0e916ed5db42fc31a6b8cde1a6978427ed629d41aaed61ac7fbc5fd0f496e511ca62b926aa9a72616a4acc008

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16baf2d9dd81eaf74b37a504a12fb897

    SHA1

    b305540b0c07050dcc51712465498dd0e3f906bc

    SHA256

    79a8785c9e8875616468cded6fbdda5d7876f1f8ccd5caf95d1224a651e2e20e

    SHA512

    987da40528615dc27eeed1135c87ade4045b624d0de890e63972250a450753dbf32da0f1519f9f991c1ae2f3c473e06dd64760d305a2f01a6cb826080e052068

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebb5c27a067197e5f8c869641f646e35

    SHA1

    0b4c0a04cd3e90a7b0fbe60a19831246e5e1d6e1

    SHA256

    da698146e2e98868e371ec47d2200a6a8802acd709d6098f8ccc3aaded6a0ca0

    SHA512

    9d757d0d4d7ee9646e9b03dd92db0a104b4117406245853b1956354b44224fa94d1c00c061583a0b7cad6d8d03ff2b5624c776ae2b9944bac63f301036dda711

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91a3ec9c900360a0b5dedcbed96e474f

    SHA1

    546c18d8b468894fb40c623ec7bfb2add7618eed

    SHA256

    c7ff1ab7fa6ddc836609936df152b25cdac38b64a46360d739eb8ae400636a95

    SHA512

    af40ab36f4b384f76c60f80d097012c83e2ed5bd06f446463368a077bb08d03db51369661d6146fb464facce8c14e99620bfa078ce1f0da1c22dfb396a2329d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cca4503f03eb64deba2335f97fc53d5a

    SHA1

    9ad7cdfcc451be48c7a73bda1d4d602b0a9feca4

    SHA256

    a442ac56d1c9500d33ec005ae215f9f725754fa5ff75922e033f5d73fbb21958

    SHA512

    af7918a78afc8fdb06ff18d493e11145d46d6463eb97147a4a7fb6624244ff249699e2b3eab69a1cac27ed1ac715e0dd0311d8f4fbb538054dac00c64b5c7fb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52047b7e831db3b026b4f24682c31e61

    SHA1

    869b9265b1a6d594b8c536910274a32a90b538f5

    SHA256

    313454c68b59a931b5af4ccc4d11689a198ce0f69b715c74d586fd87bd14b3c6

    SHA512

    47b6f2fd6b098123888ebcd74a96cf687183f2729bb4456a1a213bc9c706f8b4edeb9f3c8884ac4d092e6aa645952a65d3cf7b7b1081dd7263d6fadaff148705

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7f8c880a003dc52cda4a6c16ded6ae5

    SHA1

    98bad80d583256399a0970de58d9f5a56b4b41bf

    SHA256

    682ca278c46c1147c21a3aa288c2f43e873baf5ad80bfdd1effe26e2d2be7887

    SHA512

    bc56ea6a8e4f378496a8e06e2b984e5fd413424af58bd057ceb96ff12a58433fb1677c64c14305775733ea2c5efd278355ff813c4f168f884f828d525223f7ad

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W79VKSP8\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab5CE1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5E1C.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06