Analysis

  • max time kernel
    138s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 14:28

General

  • Target

    39d39fbdeb855789c10538fefac1fcae.html

  • Size

    432B

  • MD5

    39d39fbdeb855789c10538fefac1fcae

  • SHA1

    587a6a0eb2090edfb23a63f902d7652b29e5d066

  • SHA256

    9c850754efd7a343ffff9c928d79824f956905f48340891f3df274efb3710e84

  • SHA512

    cab42d0f36d7cf0deb6366a84bc29d82ba81e66baa19c03a3ca3a614c95ef8a1d28e7efd25796b9bc6fdde6d575c1d8d3a63a61c2f7658dd251f0d173e8ac71c

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\39d39fbdeb855789c10538fefac1fcae.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2280
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2280 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1312

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af403d8e2c11c0568c5e3da2c13d0910

    SHA1

    bec3f9430c1d44461aeba65e62e123d47d45362a

    SHA256

    c6ad844dc835ef3023ec5e2eeed2c185fe9b61b42eb0c0afdadbfd108a0499c3

    SHA512

    9d569e385bcbb2e4061db16489ca65856116d68f5cf7258ade043e592b755aeafbfda627a9dea22241568ce57cf9ceb00e89d34909941094e13df6fbff05d368

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90f8083e6267e5dd29d59d2eeb11f012

    SHA1

    0c3f8204b2c0fdeeac54699fd8ac423d4228bec9

    SHA256

    f9f4ded64ddcae40a8b5c8a53226dadef862776d3753c88176db253415a30646

    SHA512

    b1f1288692ad13447ae298b57495898b104c8e2bef1d5b5a690d15b88b3d3530b01d173ea622c73d01f4c9623d6ebbf03299ab0bf540e2b3d6ea8aae25e217c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3a054f5cc642aac934bf4fb1092d670

    SHA1

    5e4623709365c5011fb4de0315d67dabc6ba1582

    SHA256

    2f23c3081e037390447c193fc1c6b465136961b54542e205b88b7a78ec5027cb

    SHA512

    07f3215bcb3f1e13d8393e45d2c062d74b045c40b533325666d5ab25ddf19d926ac35fd85ab17f8b3a5f1cd94f3115a8812219ab6b905b2c8b22efc3bcf45cd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4d436edfd1e29d613ea01de57103f58

    SHA1

    bc8138149c6e93103027a0873d749907043a8ea3

    SHA256

    beaf794fca10567247aadaab6d7c1d480de33fcb2881421035fd8e9f945b54c7

    SHA512

    e258618eb34b68c6a31cb9ee716184b0fd2dbe4608e971109537afd9699dca8f991cc66a67f4800adab744fb4996b987dfa09f4356935fdd3874b50d9a8668d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f24a8f775139bb7addddb46900a9de2

    SHA1

    92bb05bfd55f21dfe9513a6aa5a03980c8186494

    SHA256

    27b9eda9243ed0d20147d36388d6594e0dbcbca71032eb14aa7192946c84dc73

    SHA512

    fc80fea8e7c329eff8b6b2972fb616ad6ec1785feebb5603cb455e99e7ebf319bac72e45049907625125920755221076e3eccfe3e0320d96e6877ac72401d5d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    500a2bad1233c200d0dc75e22cea7650

    SHA1

    deba12370d3b8d46777e3d5ebafd67af11039dfd

    SHA256

    b6b55042cc27037416753fa1379e20898b69be5b2f8e1652d4da3006ae7c52fc

    SHA512

    ac8191d50a7f59d99eb16b1aac5de5f86549f293d4e93d432aaeb8eef75c597a24d613b3cab2bc9682b1c4b0ea92813bfd16445b46d5bf47293f2880710ffc06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7994e3b4cb35ea5f52fe00bccc61d861

    SHA1

    9641b9f4bc4a004aae298a0169da146f81f36149

    SHA256

    3a5585555c2d4aad106e4e2a9bc73d66ca09acff56f67bdf3f019886b51d1823

    SHA512

    ea28ac852906fafc471e663472986905864e187e560b985eb7a50dee7659369e6e1899a341a2c137c1e40406755b436eb53d600b9e48e333753034516e1218d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a11725dc2bb9b782bc245a523ab324e9

    SHA1

    60780031dd8d47d8131edcbf2c597e9331b73fa0

    SHA256

    191f8e7309e10074f91baebb235f5de4bd2db07ef2dab21b621af9ec97311622

    SHA512

    4b52dced0f34bf38d030df4805dcd24b49d73af6041bdc7b5a1a63475786df0c9c1145eedfed1c79985fbb2d425633ae12f8702f80b74631177b49c12882ad22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5311c1dc0519c0791af7d0be1a9b86b7

    SHA1

    a2e251cf806115805c4151830ae6a30183152582

    SHA256

    e352c397f177a3df48917ec547de2824a8852d819f20add1f85756c8061d5877

    SHA512

    7281c5a1a9abb8450816c79c827aa65b129ee1adc7b1add7103a71e168602b378c64267def27940516c28beafebb5ee8b809afd6d2c59d470913ca21761b0536

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b29dc96b72baa264cd7414ffc78b118

    SHA1

    9fd6571bc391a33c83e2f5444ef6e1707e83f71c

    SHA256

    47561904692e4ae85864fa9af70da1ceb70b92f42790b47eecd66f5b758aa19b

    SHA512

    680311f86daf645adbb2bd703c4075b2413f18339cf4146d9891135c545de6cc7ddf7ef98f253a8a2c2065026672446bc1a254bfeaa14aaf01e39a89460033f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eeab698d152601fa9d5edb4f7be60026

    SHA1

    4ca782aabfc03f7d39b260edf0a514bae44b6472

    SHA256

    131d0be0bb0876af2a29a3eb7e70c257fa1590bcafe47983fe02a0361983063d

    SHA512

    8f10fee43ead173d0b9a826bae3e66ae57903c00ae8feee14b923c3e73a90aa6b8a3116acbef6e2ffab371c633e5fb45eb3d9adfeda0ef9c621ea5eee30d5cfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    093145dda67cb984ba59571cd51244d0

    SHA1

    6d301d952e9e57039ac0cfca0a007a89d8ec8d53

    SHA256

    d93e10b938473c1d502c533885dfd001a2bef70f98af2a4ff6cab1d32bcdd792

    SHA512

    f25979a2c2c7f0f99d9bcfe7ddd8ae1d93bfc6c5e4103303b2aab6169985d3a76245973873399cbbbe6e0d7a18a2f8156164521e21f527520fafc0ed8fb61810

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62f61a41c277b4492eb53ca5b4ba3006

    SHA1

    465e257a3c62e9ed03b8e2e7b810236996f716a5

    SHA256

    0612d588355d8faf03b91945edf456ebbda9710f6a8bc328bfba758bf243f902

    SHA512

    ed9312de2c7c872a2a94aee3e2640b578058f7f08ac967bc790cdc7be47c707932a5a4229fb0b910f2b1d2829bc312ae1625cc580c30f536f0888cc5cfc2ef91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abfbf418456d4a9e71b24f9e47ef13c0

    SHA1

    83f60d622c8a7d418ba74899438c53f5fdcb4937

    SHA256

    ffe3a3311f8a16d7c4c5fac38d116abd59fb34e28d2db7e40efc0ebfacca82c1

    SHA512

    54d1f86e34a7fc1c4a4b11074960aa5aceae88f39c6d2e5ee2ceed1b49fb6af841cff44bac64ae34728b3db8955058c716a28aca5d0531159e0a9d63eb3f18ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    591b01a119694539cab3f0f31508ffad

    SHA1

    038fc726cb7e2555eb08b8aab67be7a904229c78

    SHA256

    7364b6e44981f2224423940841f8aecc261ad5484997a2a1a9aaf68f360307bf

    SHA512

    eab8d39eb6d96e7914fabe17ad9ddd0ef6ce403cac541d742eb38905a51be23ba1980a211bd4f3d11dee816a83c2f1fc193ff1730f54bac0af86cc39c5e7c43f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aaa4d7a43c72ed6720543fd33d004f20

    SHA1

    0a2d5c81d9ec57be16215cd5ec3612d66a450c55

    SHA256

    465fdab9510e5dbb81fb718b9bd8691316958899d97b24e770a3e4fc536dee49

    SHA512

    d8aa2963e3de1b287432b41dc89fcc2112ccb8593c5ec43f3874d22f4f1e2909ed2e20026879a69bc2f6800868d5c80f91d078072c92c248fac62cda50ec95e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38dde2f132d1d21f6f4161e0f61bab63

    SHA1

    5918134272e915160f8e2fe6a955b36a6e68ad4c

    SHA256

    cf97750e020cc17b5654c68536a13ce025b5113a2e312b9a406e67607226e97a

    SHA512

    fbda91825874d9e3a32341f4547e27c934f81c48219416f054cf215d299d7af6efcec48a8407d2f5001559f56645ababcbfec4e6e12cf2bd16080d323000c505

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a835e17e67a51cdf8086ffce47ca7b6

    SHA1

    9bf76539fc640c0524bba51ba8efd358a22558e0

    SHA256

    b4aae2a561db1c4bf45c8067d3688d56e2003ed998102d4b7f3d3684e7994513

    SHA512

    bc24e54dafb83e60a854cf462155cbd8239233c033051119adf13b58fc8a3b1231500f35b2c44553fb51f5451111ff5cf18535545207965b9bc8034b396cd75d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    128eef5331c4685836a8971f622ca80e

    SHA1

    32279b2d6aaa75955967b1961bfdb7d596b996c9

    SHA256

    bf10dd14a2e1b661950b38153e071a76f8fd3b885cbfa96d2b74f000d76ce60b

    SHA512

    fdcf29a026f8a7176ec5cf1a71cefc2ecdddbf5eedec0704b330c64eca6e897020d34e0029e55088173de807d05b5ad267fd9e300db6d41044a97b632948c2ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c50a2a1a1dbeec0f27c05154ae955b0

    SHA1

    8b66d3f253072527a53942db1d2e8dde63e635e2

    SHA256

    4004cb4cb08e8740d3070e79824f20f4caae252647bed083be55c89e16804763

    SHA512

    77aa13fb33da46eeda189d2dd0c8d82657f22c9e96dbf6ae07428866ab1274542aaa04dac12bf940b69e64dedfdbeebfd7ec375ea80ce854c8748590dc0ef682

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2315927c85806f7111295def10e22036

    SHA1

    44fec87380c9d75d53b98c41ed2c8895516e880c

    SHA256

    24aa89a27548a8ebbc46c3d5cd26a2f13a6b6fd5e5d700c6a536340e3f05120b

    SHA512

    7d67ebccd05b92b96d482b1a502453ba8fec74f72435807fc909d744c571ad4d1217a75ff159779d185e23c65f06843568984051b2f05c924386afff22ea9970

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\0ptx2pp\imagestore.dat

    Filesize

    1KB

    MD5

    36de7b14ffd224f4f45f03c9516b361a

    SHA1

    ae2ba71b1c5d710cdf19b7639c2399c74ab19093

    SHA256

    25caf50f5869ab56eab0a22a7ba79cb985ca03ae72eec6d44b6ba9345c0a15f0

    SHA512

    9aee1dd7d62a46af81626986b4930ef4cf0ccb88054930cce82935d44a232c89217977f9c13f09f1f77e1e7fd400d5473cd5bf2bc077bcafb8a17ca27952d669

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Temp\CabA259.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA2D9.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06