Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 14:14

General

  • Target

    396ae71f7f6b39f6c102de866e59ed4c.html

  • Size

    18KB

  • MD5

    396ae71f7f6b39f6c102de866e59ed4c

  • SHA1

    1c2901c676ef4675af8c6836843e2969f5402b1c

  • SHA256

    536d39fc8210735d53c36f79ab8ea4595f550f5ee7b3f9321dc701a340cf0e53

  • SHA512

    6e786b2d287486c654d160aac98f32f40505cdc0ae55c963d610be175393d6228eaff0a6d297721bfc0a68b7acac8f34729d140bf91f77368d84d6b154a28dc4

  • SSDEEP

    384:KbRUxdLLX7eG9gMCkUkIpmN5+ta2rOJc2GJj4JjzN4Eu15:KbUXzwaIpmNCbm4Jj4JjzN4EY5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\396ae71f7f6b39f6c102de866e59ed4c.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1984
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1984 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3024

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          341cd528d43fed388b2618ee7eba1079

          SHA1

          e73e15c0e6855096ec50d2c1b3d5809b7a72b456

          SHA256

          2f8db0faeb203f1789af5dedb781459d2ca1d59f28fcb2c96ddceb1879911ae4

          SHA512

          35d073944717ebff93988fa5f1aad4e97f2fb89d6e7c78fcfcbc32171f1c39ce30b38e694a30aa29c396eefb3e9fbc2c162328e3b6020377f91508babdfc2411

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          822dfbf6b2e1f3fb0777e498b5394482

          SHA1

          a541efe539248a2daf5b4e39b653aa0e4f3e4abe

          SHA256

          7bcf4e01bf316d43f116b7fd03a57ec82003f6c0af1bf1cf35eae83f8fa6892d

          SHA512

          1b6bd93453dad15576220c8528ecea855e68b7341ec9c16da53ba0d31b60aee2658724231f2b3035a954b706cac290701dcb756bc7d14a63a4ddc6a917150f54

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e11cf8690edd65f788354b98ddb4d009

          SHA1

          3379e273616fc13a189395c128523190aa454cca

          SHA256

          33efd2840021467ea7e27933ac708f9814a5d5a099d241dbc877c0a2d0bc3eee

          SHA512

          8aa91b155db7a4997095cd14826c504634ced69469d081b5abd0d9b6171445d582d474889f7a1db4f3151a046391802cb25f793d9ebce0ccae36c01924497aef

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          179f9192ed13233956638f1537556058

          SHA1

          4a497f7cb8c909ce080e3807d2575cede1ee5793

          SHA256

          a6a19fca24d522cb3150c377da2977820d7b50137154f40c1d25e17487f3a17e

          SHA512

          02b053baaccbb5ee2a2f7bfbede063daa1f056e1fc2c7664fbf7f0ead3cf02dfa3d5ad38b140cf68e667fa4dc874fcfcc1d3df2c5e2b814010a3a9e20bf454e2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e0598dff8ab22125faa30e8c4a6cac62

          SHA1

          0676c6b1b7a5956fba196318c0a827668e257b7b

          SHA256

          3e00580161088542db9d1ff943573dd736d3f4cefb5fad72b53df569bb0a8e86

          SHA512

          b0c0aa4b24987ac9df8a25ebc73cd215ca465bef467e8f0d7ec68570c22c802d04cfb9dc4fd69e270753fbeb0f12f693350f401669d34dfcc7cac29ce78fc382

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b5a7f281219790ef31a04aa0d694cb61

          SHA1

          727f76313d5ab7835c86ed01624266e967fa4c42

          SHA256

          d3e4d630a3eccf9fa31584f5c1c422fbf7d686d234f69e33e77aace191d99581

          SHA512

          ca1f85e82bf5e35481bedb31df90443b17b32596e5a2b56348f2cc718afdf2741d9f237807efc317920be29d68edb547c0ec708f5ffc64c9374af13ee900e03a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e2641b25b62eadec6b5b17d4177cb7f4

          SHA1

          73f76edd72cd439341540733b46faa7d478ac530

          SHA256

          18f0de3151e8d766aebb4590fd0b03b2cc83570123d600350617f5b301bd7ea5

          SHA512

          87154a778c486c6af30f3e06d941918c24bb6646c10c3184cbcdb475370d946e4d5623f52857f9e3cbafee75de738aba56e77d4a9008263c8a734d36a7b0a8f8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f5549a16f72382d50e882907aef0e5b1

          SHA1

          523b45bbe9e56b7e5e9605e6b6b038338ae6e066

          SHA256

          d8254bb095cd0459b8d25b75ec1b11d0b59948caacc7a39afab838e48a5eb4e9

          SHA512

          25a25297545f7c02c91e3bd0ffe62c49185301abd8fd6aaab29008db973c9c54097e664d8cf1baa3982e6013b497017aea8a75b519f913029e5c3c073c5e2054

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b3112d2dded0ef95e93c7ef7b04ae959

          SHA1

          c8a5cda49cf5aadfeda9f48518dcb147f0d37959

          SHA256

          8e9aca357de8a15c23bcc2009a54a6e564ba4786d194bd745f8ae0dd6be4f8ae

          SHA512

          58311b936f863059a6dc8c1a9947b390e550679df4b8a86e5a94d814f397bfad4e7a0db52f6b40bd318f6c868e71cad0537a0ee391798eea4e1d1ef43d2cbb23

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b9981cfbdf5a14949ee8fb4e15035e7a

          SHA1

          a9c3d3b860d83b6dfbcaedf41fb8edcefb706a67

          SHA256

          4f6778402b4495af557d665afbf85bc6ed8fcab977387c26aa3f7ef3a163ba83

          SHA512

          f48636414f5e74fc9a06e212705289548ddb4bfec8fe29e8a2f38aa2e7facd5f7c2e774e4ba5fb563ade0cfeefd33d9475ccf6083cb680d91cc2131154e3dcb4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          07778000a4071af5c97425d97b06db13

          SHA1

          4757b514d2a7f4cc4a29f2dfa1effa3cb3145bb2

          SHA256

          089622e6a7c1a5ae2cf7c9ac755c7e0055e0a31c0a08a98054a20ba1e9ff27e6

          SHA512

          0e44df4b6231de240df0a195632dbc7ed2187b5b3e6f7d55907c92ca2589f9a4573f5b2d813906bc05f23134e90f38dc20f85e5597dea057b61e248580983c0d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          50f220e2186906931bdf54160c2b051d

          SHA1

          5d88aadc2294a9c2ebd85103d1f165ef93bf5073

          SHA256

          22a4e6086fa7ac082659265b3c5e9609372617ae7804bdf995f2209f5b2aa02f

          SHA512

          eae63cc5092fe9eb5f0f12ad00ce958e0fa87f938766dba4c462341dbf25fca34752d977560fca289f0111d1e4fc23d1ea6aa96e6e4cac1cfb5d14fdda2c9d70

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a36a8c8ca98604a059261ffce7bf940d

          SHA1

          63830c2b3136c1042978635f6e8bef3279494ea7

          SHA256

          14ce7acce1782c2abf65bdb2dad613c286c06c7e4809fd4a47f8b0fc0afbe27c

          SHA512

          ef5fe00fa7a6a2e4c277887924fe27b51aa10ccbce7ed830d39aadf6c5caf5e3d6a99483c8a8fd73ad78e122ee6856a0e8116195d3050e44c57ddd48089ef498

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5e39cdf01472836f7970a0565f381dd7

          SHA1

          2b735d625926f3c5831dc2d58ecc4f90111cadbf

          SHA256

          5069e416d578318211354fc66ee0d6890db56525bc3531389453803fb1aeaf5c

          SHA512

          a62ffd1b7535c2af8556955ebb04263be124286276758b70287c1cd6c4d140d3ee72d5818d0b1bcbeebc4baf5ac0fbc819dcf5a35a828547728455d0431b916f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          24516ad011aaeb58ed4ba1aba4ad5280

          SHA1

          bc5e03f081f73acb4364af4664ae991b2f5efbd0

          SHA256

          3a69b315c212ee287a9876fd4c974790d6958d9a1cc11b58554a13b066c8ca13

          SHA512

          a48b3bda07c32ca6fcdf6c084a6f2e064a9ad7c400564e9e64fbecab53946e9eb2824ad403eb185c6c58448040886415dc2854283e60a72427b8fc8c17efb207

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f3c6e3a99a8ce61ef1be3626b89550fc

          SHA1

          33b30490ede3b93ea11d2d081e1ba4ffa835fcd6

          SHA256

          6984fd64d2c9f47044c1699573e65b235d9cef80bde3172bc6866f83d8952ae1

          SHA512

          45f440185321dc52d6a30bb640fe4cf42629f969f76c3df4ead916290c4dd665bd268542f537ec92e1ef52e2242b949ba418d6bceb715c0e020762fb1c5cb089

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c76c9f577507646f5985dc1ddfcdb221

          SHA1

          e6428303a8124d44da9b92b39c3ca4c119297115

          SHA256

          a42b863a0d92107fd3c6d56327b7fe900d99917f1f42f05d64e94bca0fa702a1

          SHA512

          ca8a011926fbb914dc43130e1cd2fc227dffde0cc675e95bb4d3dd1067791bdc43f3ec20b63e09094710ac152edceee1488cc7412cde222a42e288b5acae4a80

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d44d3617505cd5704e87bd1d1eb7b683

          SHA1

          c2f49a6bd9131ab115185599f4ae7981cb5de834

          SHA256

          20cb84f43058adaefb919909ea208dbcb4f9b70f003fda0ca3b0569ed2e9d502

          SHA512

          0ed09a3f46a4128159d98bed4f7965ffe32bce3411f7cbc737b169507b0b1595b101bfa4e473b4a4a88459ab897da3a0051d081a416ef43746d826450e9263f9

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\53STNJLW\px[1].js

          Filesize

          476B

          MD5

          d2183968f9080b37babfeba3ccf10df2

          SHA1

          24b9cf589ee6789e567fac3ae5acfc25826d00c6

          SHA256

          4d9b83714539f82372e1e0177924bcb5180b75148e22d6725468fd2fb6f96bcc

          SHA512

          0e16d127a199a4238138eb99a461adf2665cee4f803d63874b4bcef52301d0ecd1d2eb71af3f77187916fe04c5f9b152c51171131c2380f31ca267a0a46d2a42

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\ygNSLib9[1].js

          Filesize

          4KB

          MD5

          cce5bae95b24eacec63453f732f1ce4d

          SHA1

          3c1c87390600d34dece6379bd162c85e8c0f7590

          SHA256

          e4a70fddbebb676b15d880586bf76f6580dcfe29f2fc2e835e90175a670c2406

          SHA512

          50ab514e31e18df47c73b2f87abefc73b84dae8abfcfc3b9c638d310b1ee76aa01fcb80ff53062a13676385c0bf7c90b2cfa248e64343f65d40dbc99cb4a647e

        • C:\Users\Admin\AppData\Local\Temp\Cab7F7D.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar7F90.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06