Analysis

  • max time kernel
    140s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01-01-2024 23:09

General

  • Target

    3e1d7c90d5931eb588f5951a5903edea.html

  • Size

    3.5MB

  • MD5

    3e1d7c90d5931eb588f5951a5903edea

  • SHA1

    b1dbd0f2dbc6f21512c0198dc8df6c29944d134d

  • SHA256

    fd840b24348dc6e05593a2f045dcce193d32462bebbb5880e31f913771a48d33

  • SHA512

    ead7a758deb8f39597b091b9c5a5678b9e5d6dbabb614d8bf351938f6a240de534b06fa655282cbf2e90fa48ab5ada2bb585b190b30756033b5af5e505223135

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NA1:jvQjte4tT621

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3e1d7c90d5931eb588f5951a5903edea.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2076
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2076 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2844

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9829d4efd976a8869b445b56d8836a5

    SHA1

    68739611f5e47dc0c8300cce664ca7ce47962ba0

    SHA256

    276443d776d8e86333fc06c8ca65b56d8128d955cb54175ccb0c01e3453b67ca

    SHA512

    c9c924ae7fce1765386372a2152832172606e3849195327341243bb0bf3d948313020baceda6fd5279bfe5e7eba14f48cbe7b09721b2fc3ecd1eb7137fc826cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb0c1081c47f8f293dda62113f5f22cd

    SHA1

    bb0d533be3d9075e5665a86595ec1ffaf4dcf2d3

    SHA256

    a7db48e2e0f1f643adac4ec74017f18b50fb2fe8d4683c7ba4696ee25c4ac9b2

    SHA512

    88b1e436b6fbd5bdfc56efafc9f5b85d79f16e67f723130afdfd32f4a299e8c2877c28efad9b546924da896d9f85cad5164127c81dd30025a4260ec1c7858517

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9c4fce4091a643efc2bde9b9140fd13

    SHA1

    e7934d5e75ff60874bfa8cb3c8f962b62b27dccd

    SHA256

    c8596e318b1bef7ddd965ec74ef1931cb88cbd57cfe93fb3c61f285954d13234

    SHA512

    34d7394cf5b128690f634a5199e5f7803319e4f8d336f4ec75fc4adcde0c8cd2d73e6b86914c7a9cb88b2c39a6b421170cc1e9bae035bcb036278a613bab0e73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2966290241eed054d78437390d8533ea

    SHA1

    9dbd1880dbde69e7eb841a0e2d746ad77152765c

    SHA256

    e501eebf279656172aacb641e96e7e847bf040fe548dd94921b3790bb18093f3

    SHA512

    49f7d0315630cf1487153cce452ee9c3cbe52a733178c19ba22c999967aa47e13a4869f3557de746b05bf5511b50b7386ac20d86ebd0c8c1c10a8e34815b7aea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca9a8c597250d3b8c6b7b4f773936df7

    SHA1

    60fe81c4c227c600bb18366fd5c5e565faefdd7b

    SHA256

    fc13c14541ef3e0939191791fa798dd9ae1c77f030013a96fedd48ed0f6f0d63

    SHA512

    613cf7d4ca5502b98b4bff22b056961536c2fbed64c9cdac8971104ac242026c74f665a8d6323c70576f7179f6a8814b2ef67107212b00c06105b935855f9207

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a059c6c74a7cea94dadcaf07a91c39f1

    SHA1

    1e0a084abd33b1ba67c6c5fe6b78a8298845400f

    SHA256

    8b323d352408d8076d5f611e0ab5b5f3ac0c28fe26aa8e88a19630c0c4cd0870

    SHA512

    1279a2f541df57788141d8f10c1b576bc957f759bd8a369d541086fc3acf142d7a0058c55cfdae3f693d5d8d97d89c6c5967df78df72e9cc4f25fed1ee578940

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8682d5a7d5aef6f13d0ba581ed5784a8

    SHA1

    106bb1f1b66722a82042a5e9c98cb5fc9c1d6408

    SHA256

    8c6e396548a49a56ae05f866b3faa5fc4385ddb01aa756f2e8ebc0472057e338

    SHA512

    f73e0032cb960f704dbb33984657f762af3e2a6d48ed790c99c9c5c47b5e0ae4c387e886bc5dedd76a61588f152c12255ae7cdc4383061091cd17857a054748f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec63fb3ea2569c951d48e7874dd82d30

    SHA1

    ec6bb33976357f66db4a6fb9a8ef698726f4e43b

    SHA256

    046cec0e0842c54533d5666049fcda7ca7c15bd2ebbc3b55834513ecbcceb276

    SHA512

    27adbf985e23cfee081a0b308685370073cac9de947b618b8c1b6f97b6d6b1c69b5e5f49c24cd8dd84307b14bbcbd30e4e514b2be499e529eb9f15dfa7ccfcb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    406ad5f492b5af31d67f9a6ce4fb5687

    SHA1

    be9132ac413a33f7d4b95e9ec9f6b57dd45a0114

    SHA256

    59d6aef0596b03472f367441c1d5b2e5a971af72d732b20b835375532efd5b5d

    SHA512

    093eeeb4d9fd559b174f82a58ef5bdc22a45fd6c3239f6890f55f31d78068190ccdc4425ab0dcd50926f7419807b51b292797a28d734acf466dc83ae64d5afc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    704680addf40b9535bc6b48ff4b21f62

    SHA1

    4b20c022e2b2aeb0da3bbcba2a95dd216659eced

    SHA256

    7ef70f97b3e5ca45ed1e31180760c0485ecb8e9fc312f8f90813fbbd6793c8c4

    SHA512

    6c4f448957b6b62f7c01ba32056de93cc27282cdb03e6a87f1c99954162d5783d95aef55c4fe959baa3a8fe5734a3091d742dbfaacdced229e8ad7435ee14bf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c16251daf0c1a914c43d7c37bc6bbb5

    SHA1

    ba181f2bfe4153f1c9f8c12c0a6e17dc36332081

    SHA256

    aaea0ad5a8a18621e4717bc2d60133ab3ddaebf6a4249d2ed10c06e3a909a042

    SHA512

    7698fd45cd0b03897919ba375d715c635aca117bebcf5d2dfbaeea8abc3d44bb709629f6d78b717616de14b53af3c6a9bc338d199f4bbd4b807a58af338c1a98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef531e1a4a1f78e80125aa1a10cf5239

    SHA1

    77007a69a9e0f9b51e07130a9422721336db7146

    SHA256

    6b31e5349596b2ee0f5bf8dfe1bff6f60726b143f63419a13adc9043453910c0

    SHA512

    9d923218d8f68291dfd4820af42aa4c0ac0abeb09885201d9d85ed2ebded9e5f58bed4953a076fd33b93141b702f330dc996dbdea8a34b0d2e38c6ed7815d76d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e65a38160aff2dd056aa698c52719799

    SHA1

    fce2ff28b981d7be1c1d01902d66e277b5690db7

    SHA256

    0c6a40a3d9dab46232910b2e5bf6cd04164fea193b739ba4a1fb23b9781e2dd2

    SHA512

    8a6c148527884301dc315c5897a2e3c77504c5915332624ab721c7db3ac334f35ac133e1d6c85e9e741c1f137862d8f9f49b05b2a4aa9ee8fce0b7397105bdbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24a2c61eae4cc49012f16b429ff87f0c

    SHA1

    9b08002abe05bf207cafe491e57318a8f647a9ea

    SHA256

    97a765d7d33b8d0f2b9d369ed74cb4c04066b21521b520733acf0453eb56aac3

    SHA512

    304026d8ea7478efd9cc1bb852b052c93bc05d4e0842b43f60e6741ed6c381bf77401e2e09dbf6719df4d69273516fa25d3925931d936be2a7342f97c8f77691

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    beeb71ac7564fe90cb607349b4f03b0f

    SHA1

    4ebc24ee291a05973cee3abf94e172c206f0fb3c

    SHA256

    528cd8dd59c31f945dc2c7a1057b954edb6950765b5524c11ab2821a035d5c2c

    SHA512

    a4624f242ed554ee1374121a247db57ea978f0ef116fe27da3b32998e87159a79c0b65230e3aa2f0ee32ede9f12838b71ed6002ef91b94aa5c64ed8d5f53c212

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88077e2257b90b6b91805d715b148c8f

    SHA1

    fcfd9d1eeef3dfce176db6206ad02890de3745d2

    SHA256

    c25de354ced736292e3ecc49218aa6931316bf9481d21fd7000986e3670b58a6

    SHA512

    d30c49e8fa91ea094c941a20b52b81ba5eaf13828e1eff9c4af6c07cf5ce17af63fa54fd32f19e1f2184f9f02b74845d4b060647ec73ff439b6fccc59ec31e2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0c35b2a1b76a9030bf22411edb05ff5

    SHA1

    b6d52065f8278b695cb7d4eb3bc2d9c67987e832

    SHA256

    591665120b3d44c44339cb0f3172926d9d2d00b55857aa44420c5dcb85a9fb75

    SHA512

    6fc02ff96189b755caf15f860fb493590b39fefcdea8d7d78bd09c76b89dd18b25bde8855649939002365295b8766d05492ac5478795f0625f5db59920876028

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8b4c52665b3c6d6f4f84d5c537e6e95

    SHA1

    3b748525b32deb4ab382f473d4792bcce49ba768

    SHA256

    cfe8784c793579108dd207f17fd85066fc72647a2de63fe7c2802efb95f477c1

    SHA512

    b6ec0d823509bae808d1bd45b656fdfa7eab544c60fda89711ce38500792dd40e358d1e1c6c467944bf1d60acbb8e00dc32a90c29a130da2e9a4f72bcfd715c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e63009dba3c58222d02120473d8b8aa0

    SHA1

    3cd6027e9292bd7e9783ae2b39e91fb938a9c0b9

    SHA256

    a4494e36dfcfbf0c93ed255d234d6fa1701ffb20fd2311f9a27910b6730fa289

    SHA512

    c8a9cc0dd729c86f6ad9318b25d72436e5f048cb0b348f1e5443e231e579115452eb2ef611d5b3c0975706e6ff7cd6aba191bf9d770dfd20df1d347e2c090b48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    107b57a29cdaa1bd17c291c34b3a6e3d

    SHA1

    2ed0fdd374d135ebde0a0372e0dcca67cecf4e20

    SHA256

    610ed6e23b7695b0560ef145483c03ba75a89b2dfcf467bd42a785f2e3b376dd

    SHA512

    fc3279ffce83543ea447b5d1bcfbea59a0bc118af7a7b0f36a9e54c95c78871e5176f37636c08b4d16897769fd27556c0c9701c52d3b3289a7ae1fbdfc77ff7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71d0ae83e7ebf06aff976940b576119f

    SHA1

    0db679db955ef66e220edbac7b1a559ab8c9084e

    SHA256

    36d5ea44a4545b7fca23321b49e2148b8a42bcad7243e2987a879501608f5383

    SHA512

    15bdd8c2b68bfe42ca3b75d1b4d6f2ffebde9618fb85aae60372161ede8c1931fd094b8ef585efe26a689ff925caa9ea4762031eff06721eaad2d9231a8dfc6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ff0948ce68fb6a2a88397ddec36013d

    SHA1

    45a22456d4050b5db597ca6494ac973d57e151ed

    SHA256

    acd31b6987683e27c1e23c62c88ba182fbe14ed070f656f507be05e9aa9db946

    SHA512

    0d7712e60ef0d3b810f6bd63cd10843ecb2f339596a42a746bbe489c02a32cc69046b828b330468bcbdc66db4cdade2ff0a30cc35f1eaa8569f3640e317a5822

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04546f487105bd45db059ed1d7a32b31

    SHA1

    7ad2023adb2878f9c61d5b9b4ecc4a47925a00a8

    SHA256

    4563a04e8d3111548fa6287f3739fdcd6185f107d1c85dc720afbb13901cc735

    SHA512

    e18a73a92169c561f03ec7ce20ec2aaf27a3861fa51907c568154fa68af63ede0bf1be410440fc52dfcdded3bc72dbdf823a60caf203c63271508d8ad9958678

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d214991723bbde943e1f032d792850a

    SHA1

    aeb95d49bcfda652c602e2b2ce4298314d6a761a

    SHA256

    a4f37de52f9eff49ff0665b90ce782f83aa8b6ff223a927bdef67d71c84f3328

    SHA512

    8c997b9ec02840b9bc9484efe1cef1f6219267d164037a6c1acb97eba9085f0643ded73af451a7fa15d7cc048eccead2a5bd8718858522679e7c6a983f01215c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cff15a4cdba8cfd6641867ab42fa204c

    SHA1

    97e07e37aa5aea6c4f5d64bc2eae8cec9dab0c9a

    SHA256

    38afa389d8777cfeb92c386fb92288375afd4c3895c36f25878339df00a84e16

    SHA512

    032a82e3aedfa5538e9929ac5570aeb2758db622ac542afe65077862b8dbe845a01cc5addd56bfcba2e4fcbf374d9d49a310bef2e366049981115bb2d3ee30eb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LSNXCBKV\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M61DDFBK\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UOO61SKS\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab7541.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7BBB.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06