Analysis

  • max time kernel
    139s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 13:12

General

  • Target

    3778f129757e37bb54d9c4c73db75b45.html

  • Size

    5KB

  • MD5

    3778f129757e37bb54d9c4c73db75b45

  • SHA1

    0b75ba4c46b090119dced2118dba655503454bc8

  • SHA256

    043e93a0f15c7fe7989c94a4a902061ea9fb5cbee18b5391ad5b1389626eae9e

  • SHA512

    0cff65344b47b4894138cacb49d6cef114207803fd8b1b625e078c95f78196f8bd7f30738f65b0d0f7744dc16b0c1bf1220b83bc9d5f44817412ec9403daaf34

  • SSDEEP

    96:1IPyCQ6oISUKzvehCZGaXbrI/zvXdm+ioAaKLah3xVFBcD:1Ie6XS47aXb4zSa1q

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3778f129757e37bb54d9c4c73db75b45.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1720
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1720 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1372

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          be8c4bb31a6efcb6b18a1fb3911a1caf

          SHA1

          d7f240db93b661dbb6c53d4d9bed54958a6916da

          SHA256

          009dc2a038b69d2992ebbdaf390034293614e6d6685cf50fc885ba1e62fa87e8

          SHA512

          e24af8b51ab313cce7e217b17325860c864ec7ab9c08ca6fdb98fc57e98c00c8648520974c828f139ac34d14c5f0440fc8964335f75d8b1ec5ce6f3e979e2706

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3d10baa1fdcd025cf949b37ab8f0647b

          SHA1

          d638ec7afc570a529642ca3528c5c2278bc9fcb0

          SHA256

          f8b900415a0b059338fd3d1163ba1dcfaf8259050282a20735075d9e8eba65cb

          SHA512

          6b8b95a8552f63304d32ffd1dd8b457155d6bb60d2c81adbab00f0c42454753017e1ab6edf2bdfa9668b4014a358e485edb021afba3d21ab35483035c81482d8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          948255f4f7e2e44410d2a32fca7c2328

          SHA1

          5f69a22be3ca25a43f6360b98ebff831ba1cea64

          SHA256

          a3ff62eb1dee1ea0ba6ac0656b96b30793a3af33772a4ee2ac3f7557062e8ee3

          SHA512

          79048352d73df1ee32b200603e15975c8fdb907c49226958693103f526803887305e47311aa958b30466dc5a9cadbd471ccc88c4f3e2bba75737f590dc59a3f4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2ff55f82795e91720b977ef145124ea5

          SHA1

          965d950c6b2093f1cddcc3ad3985135c8f8c9eb9

          SHA256

          da7ea31a51eda0cd4e468d6d78b1a6f1f24812f7300c5f5a0ec1e2730d29b060

          SHA512

          e8a90937a11c1cace8097f93eec102688e92b3cfb04893c3db5674b5c6f5fb9e78dba0855f74c8bb289398250dd739f4b35bc065ad4a8a67a599a8193e0924d3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          925d4bff1f62c693deec26c0edff701e

          SHA1

          57d4acc204d9e2180e66d1c44fa2aeb3bd74be11

          SHA256

          17fcdc9fbe1c2ba387a1c6474ef17a2df9c946376784ec1a91fbb5ba3798e4d9

          SHA512

          3bb8e01be1b4a65dffd650b62dfca0f86740c52a6c04659c97974f8075bc2dc3a662913e339c70b7161521ded1fd969e04bd469c76b071f97cf37f5a896c0475

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          12ceac196945fa4d97964d7b2b78fe17

          SHA1

          dc9396f4bb9811164b2a8c41c69929b535dc1087

          SHA256

          8d13e65eef84e98b4ed7def99c9a1f82ec35342092da7144d4a2c60b2f891d09

          SHA512

          9355b42a2f6685f4c6642ca199697bc7e64859f6401e91fd147f704b2f26eba457523d778a8adbf89eb4c652d3c450a0b00879dadb95af4cd7376c36536a2f5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1fe0cba0870951feb9d09b0a6f971740

          SHA1

          f03920a3b959a6d30a12d1478621a58398a71c59

          SHA256

          0ce3e9edf7c8b535988aa6315230c45c8acc0682d8819a170c48139c740cfa70

          SHA512

          1deaefb7a86e2cba6e20ded131f51cba833d7f02456269243efc98c5ebd8207af7f92bf5b023bf56b020552ddf26152f42172b140fed48030d2683a4a635a101

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          66c6edaf351c822640ad1b921c24fe2c

          SHA1

          27051c1664181682dd589b3c9430e7264a994505

          SHA256

          079d5a86aa39dd20018492a74a5b7a10415bd4675768433ec96632e333a08505

          SHA512

          57d7a42d91f7eaab984cae6026b7d9271d91e9d334ea3141592d978e59fe8ed7ec048a0ae5e8cb29b5105b30c11fdb195b8413a69bcef93ca0b064df4d29d168

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          90d400448997d217c4ef5d30054e6b9a

          SHA1

          ea007bb794a0a7332b93a29af7fdd4fe10dc2f0f

          SHA256

          a7f63c7ee64d33d96630dab3d7d166e136e7e7e829d6cb861b6d200f206f52ec

          SHA512

          c0c878684405dd4549e9579deb6e2055f46e28f3e7b600172ed147ffa641e0307035480718ee89458c2deca389d6bb3ad105ccd73d07911c7c26e2bc4211d9d4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1ebcd49f7806021a989de461f3cd57b7

          SHA1

          0cbd0a315d7293a8cd09e08ec169720da0ae60f1

          SHA256

          8af8b3ccda7f0cf8759f519dcbb8030e11caf3405964c5583290ed59d7ac7c79

          SHA512

          19e7c59e33189702736f7632b53f87fa6b49d1436a28c6ad32e198155eb4857ff7859284e34868a251656650ddecf24997afea402e2771c6f4cff688f9ef1241

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          855e171e4d3f03099e16a7d417bd4c1c

          SHA1

          f370d61dbbe358429cf8a2fb5c804cdcdd61f833

          SHA256

          829ef66446cdc95057feb7cbaace0f31bdbaca41111038addba18965f57cf5b0

          SHA512

          ed46756e340964763d2279477f434607ee40093cd8a9fc2314595b1093256d2fa71ff17f0cd7ad89060dcbde895b64c79abd738ea0b4df2760210674efda4668

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0c1db7ad003e5b69fca92b6cb916ef40

          SHA1

          d2bd056716ce58fd68e1760f61262c1a17e04735

          SHA256

          80b072b3a7550adb065d4469565dd02b7621016837a2e0135f1c60faceb607bd

          SHA512

          872affb597c25544a3f113e90a8dd8f97a7b30068632b47dd9515f82fac2b0cc1093155d27c4d6944504a03c801703955cfc307a88ee54a4fd2e5f75d01be545

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cda36fb86e8f1c1b0450c70a3ac5f994

          SHA1

          ee8329eb7c73e35ffc9915dba281dca9c463c6f1

          SHA256

          b8d8e1d9aff75ab635b0d03cb49fd1e5be60b91f1c74b95e3daaddb3a5847f61

          SHA512

          75281f7bf166237de8954aea20a2aa2f185712b04c998d9f7592655fdad88af02a4d23f80e6fcfe87d7e8a6712fe8495be9101c3db58957fca89455436b98050

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d94c43a2763e9caa1e7046aad86213db

          SHA1

          e0104f22edabeea649d01cfe8ffa3c6c3028fcbc

          SHA256

          e92a77faf33b9c1ac88177782389ece63a310b4cd7bfc4b16226a391371437f1

          SHA512

          50d4ccca6a0eb375cc03aa887b3f4f6604d01888d666b7722bed470249a747868ee5beecaf1fa5f7b6b94d41fc4d50ed55b592e207209f1c270e7b034a826d1f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2ba39bca56444d95aa575a4b44367c8d

          SHA1

          3b2cbca438bb4a0539b473f2e32dd6d03f1ebb9e

          SHA256

          fb698a33ee597866a18bc16bb1c2e02e5bdb97b00c2d655bd73bdda293d2974d

          SHA512

          f79b32b9667dd9b1d2d228c7e9388a0539c6cfb6c4ea43257391001507ef00e4f7db9a2f90c9f2b8ed7b9babbea5f295fe8911a701729b675f3124fb49ea8260

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d71bb376de4239ff32a91731e6dfa773

          SHA1

          07e6b6096b7dbeddaf95e991834a139e80aac68b

          SHA256

          0e2b3c4e2b50f386159050c92d53d29c0093022fa9d47367ed538c967a52b29c

          SHA512

          27c01d74d3f5b909220c4de25f04de5ea3e5a2590b8549ca32684a410238976f3d03a3001c3b9a486d6857c68fff2882632ee50fca5bc70766694e9770195f98

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          20dfea6921440a7a2eb271ab01e64f06

          SHA1

          762ba6ffd06e07ed7364ebd77b8b97ace90537e0

          SHA256

          267817a23e035aa161f9d443e882ac3781b2c3baf1201b8b9d03db5cc730050f

          SHA512

          f0bb1622d506f4ab655d2b82813e71ccaf97fe533968172d34d4b684d05fea7153da9fb7194fd6e272b4a6edf6f33f305ad7cbb79a60c76f1fd085586cf7c192

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fd5fd7b455b678bf48cf282352e6241d

          SHA1

          619b41cebf22d65accc84360a7b0cba3309182e9

          SHA256

          e5498ce125df5bd7b2ddb95ada6af6ced1267aa9d035f7c6615dcd9d3bab7388

          SHA512

          8fc047b18d086941f1854d05a455a98173a94621272b18e14458d2ee57c4bc0226e304105de0dc2f601b8ca1826c0f6c42a8af03b4f55716b79d11f81479fd74

        • C:\Users\Admin\AppData\Local\Temp\CabC21A.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarCAA5.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06