Analysis

  • max time kernel
    140s
  • max time network
    173s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02-01-2024 00:14

General

  • Target

    3e3b25314ab145ce8e13f630e978371a.html

  • Size

    3.5MB

  • MD5

    3e3b25314ab145ce8e13f630e978371a

  • SHA1

    5a33bde3edb79d54165703d03bc95415c9e689cd

  • SHA256

    1feb73dbf78fc18f223ff5cc1ddcef21d8be48b7691fd8c4371a895053920a84

  • SHA512

    539b235e1b6ecdb6a3d88f8956bdc2f72defa28b33953fe8036f3b700c9c0cfc6bc6353dfe3b9ada3e0833f7c7611b47915a4c9d7d600a4b607d2cb2c78cb6e9

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfM:ovpjte4tT6NM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3e3b25314ab145ce8e13f630e978371a.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2732
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2732 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2156

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fea5c940a8c7ffbceb8f9910f9565348

    SHA1

    df9b790c88e18c27a13e135498194bfe2ba34270

    SHA256

    81274c4ef70bd931387e8870def19e9713199e11472a0860597066c9b4cc3ee0

    SHA512

    ea41b4d3a3e7d96fb3d7c4199149b7152384d4e6fac32b36508ab8cfe2ca6836e55563222ed451e0b0ad2cd56506616aae533ce8441b6a8bc7ab85e480a94e7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15b2f5c25e891b8680f640aeff886417

    SHA1

    da64b134e2ba616bd1272788b55eebc9da7f6cea

    SHA256

    68570851b69b1679d4fe4eef870b7f076c805b732e0cd154d1bc069c2dcff539

    SHA512

    27786fea5153379067d62617ce9b07eb890bbc5f00c636630ad6b24905c239519803c5f315844fff07f9def770a1f5fdab269ba0d17d56b673c2ce6f3fb017a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8bc26029ed63656640f2035bcd83f913

    SHA1

    d43e8c8064ad9fd0347659527d4c334db64c7442

    SHA256

    21716c2ddf042f18c7c105a737fb663ce3ab53008f3ee9f12778764e846a18e7

    SHA512

    edecf234064809c1a933b8de9d5c646cde27e7b0f981b16e332614b565afdfc76935bc1d10d8bc34193c133a97ec5f321f49dc1f2516c31603bb388fd6c81e66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c15bfb6b228dbab7787291cbd3f0629

    SHA1

    3cf732da3316ec84a8a1f5b1f81c7e585288b9df

    SHA256

    e79d68c05114195611fda7730c5859449a52e54331e8b0b63bbd975b9943cbc7

    SHA512

    70f0dbc03fbf3881f528b2dcbc0d5b08b1a5aada6f3267e9666ca2ef8d8ad7f5cc313084a63c5f4443e1b088fbd8b632bd0f8544e786396bd7c6f99eefae7bed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2c605475be20ae817ea6169a4998703

    SHA1

    520c43f2929b1770f3dbf8c40789060db69ba5e2

    SHA256

    9e1707891405a56af06cff34ae80138dd1858ac4e21d7661a9589e6e1a8b9b48

    SHA512

    5a7dc6ffb7cc43e4eded4b4d16e2abb6d81bb23a83446bc958653e0cb12060756dbae702958892e42455400da5d5a0c97000838a99cfd7df466856dcea6a6dbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1118d43a5d55ab90459712e67f9c99e9

    SHA1

    454fa02075c411a536a284443eee41a0f7fcb8e1

    SHA256

    6b6d4ba387b488029d837c6c4cd7e7f60e726eef6a775b9890f2d307583f3e92

    SHA512

    056d3974c02efe0f0bca287cec17b3b3888d5e24fd566af906d47507d9dd15d2609dd7d2a42883d4804bd76279220e072fcb918d139637ce5942627d1da01326

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0287db3ba1ca8e28db9ec8aae0829afa

    SHA1

    78345600a893f4ec0742bdf07de92c51013b4d51

    SHA256

    13cbb0257ad66f6ae78e8b4582dcf7acf5cb7611ab2be12f0b4ae13f6ca8d029

    SHA512

    f81f6b2cb158590651f5177dd856739c85d042339231a614c367bca91091b41cb9c5bca025942cf16a29737e0317bedda1c61396f66101a68be559b370f4c11b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d42eb42f63166535eade2a0939ad9292

    SHA1

    b5ac6f3a5ddae20ac06ef314d781f065d265e6d0

    SHA256

    127ffd1cfa5791dbe7fc042c0618d81c9efb57db475e60657cc9904a2a5d5db3

    SHA512

    220115cb5f23bb31094b4e8095748f1b390c9bd5ac4c4ea949470bba21628d2e48d93f095f06822f72c67777e2fc22f5fa00f2d92c1e1b483c448c7dc4583b19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99b2dbb5e1e2fe579cec164f5f2a85db

    SHA1

    4bb6b773761eb97a84dd4c33b05636bd60ddf099

    SHA256

    3d8c22580373476f7aa1dd2cf31df7c7cac161bfcfa072a031e1b60435f05911

    SHA512

    adb4c702fda99494a80a28933ffd868eac62803ef0348ab66208d8d558dfe736685597f855c1d9826f8cec8e800a216118f64f75c6af0caf3a9af5209a98e1e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b783a9844531c25691beb43c458b17d4

    SHA1

    25d549c9674dcebcc86a91a094b509581324ef8f

    SHA256

    3c5f671f109c9bc0ab38b888c1c552cd8397b1df5eb1db408e9866e8d97ee0d7

    SHA512

    46ffe805756e794c24a3d14736b86ea498a96df39da12f390a7eb74938bad41c70190ba010286d7110e4f30fff992dff989af1fefc16fa3a6713ee791c245e44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94deaadd3161e5d69f19ed31dd1bb542

    SHA1

    bb8ae6118d7634c14c7165b9ded317fcce2ff5a6

    SHA256

    c868e82753f8297bb5b10dfea200901bca2bd78a2486575f7c5396d624f4cf89

    SHA512

    7d0eb47a2bf1ee38bc0d4761e3c28a69fcf574f4e178d1839e16da25a25a73701baccebb86f48b72ce445e8713ba8c99deeae8170d343e7327c44fc71ed85726

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6613fcd12320dba9f3eae8fce2aa8c9d

    SHA1

    9c6c665f0eda383e751c736b241e501ff473c4c5

    SHA256

    2687b5819f286d5e8d9002fbba26285ebd3e316e046db0c22de22c0cc213c490

    SHA512

    f0ecf14a00347d878325d8387fdb761d545843e78148762f6eb2a255d1ff1cbfaa6c93f4f6b1c0e76d6fe78f77a732cad7a4a22d9bb4789598adf90b4afb1bac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2542bcb23926efedc413a8eff37bdbf5

    SHA1

    d03d1301879b0d5d095c2e30550fb01043d4186b

    SHA256

    bb8a04c90d1603d3473f8588cedbf749fdb4f3d969d659b00d401342c8efbbe8

    SHA512

    18f80afb8aab716625e0c8bfb8fdcd21e1df7f6b9c46ed8a395392c3e1a0a72168130f834c602f1ab56fe6bf5a271f059e5412c79ccba2c93ccdcb7fe8cb9c97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a92d42c072c2d963b4ae30caf27e4381

    SHA1

    cc9299de118dd049eb4d06ef258c4fc0865cc9a1

    SHA256

    aa446eb5eae1be4168b4eaf5b91558193862b57447805d96fd5fb630e809259c

    SHA512

    82c775f16c658acb526bcf8a276df45bedc292d8b52b7f55cab00141ee51b24a3de49fb5fef9d2819ba1f0d19d27e61b9be42c2256cecc4f9efb1543cc5a75b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1915ad6a7c4af2ef66286a64aa47cd78

    SHA1

    fbd3ab110a7add323b6c8e4efb04705b472b0e25

    SHA256

    e0b547a5f8513fee8332e33e5fc29f7a1ddc1a82ae725b32633617cb7f7ccfbd

    SHA512

    fd6f9ce6ca6cf7ca2e43b3c8fe1258b59e626876a9195fba87ce0c546aa9d23fb64bd4cbdb17a1ceb8f6934a3c4fe73b1ba668f39031c0b655ceab45079d74b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5d0f1d3271079fd7679085ad9b8270d

    SHA1

    b379a59b0b42ab7971dee5b063056c005b0b5fa9

    SHA256

    ffe614a8fcae4d0b981d4e305977a42eadda2a4e027f113d6e5647be8537dd32

    SHA512

    893a4574869ae71ef1952ff39b669e5c9683f8a681265d03828d34879584c2805a1a5029ee545e382b3a91f732931ea8702ab1d254bf633f3f9959b5ce2ed068

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9c23eca638b554ac4686294580bc8c1

    SHA1

    99897e553bb7b63b960d7420ef6520509a09c180

    SHA256

    02066f2247c6d8f2f31fd1c6c1be462ada29c17077cdfa59a27621ce315aceb8

    SHA512

    341c021ad3db8d82ce2d4b8ae92b9309f9b2efcff701a45ba6ca3ebfbcb3724c56b49566edd454a2b01436991883b9469ef35942c13356a1d2df9632b62ac60f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19c4c12f11fe8233be152825713294a7

    SHA1

    3a86cafb137017f18e2d530cb29b11ee95cf8cdc

    SHA256

    00f617d03346754c2e034732e98e1338626a8bdc05f02601436ea19b0646e44f

    SHA512

    d334c14588c0c551132b104a04bfc9e3c058ad9998bec10f92f3e1c89ee0fd85ff954e65a8c3dafd96823e6336cc0db16bcdaa887fa1d48029aed856143f506d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f0598a3f28d602bd67156d1344fd49a

    SHA1

    e287a0ae9cc0dc953d9d335d98a2d4b30423eb3c

    SHA256

    7eb4dda4e65b0f992b46d8940be4ed8b239f81dbdaeb7a0357bd84af92d005a4

    SHA512

    2ab0d4757b8d48b4137f515b1d0dd5aadbd1c4fcb78977f273568850f329141e4c30425efdf45892a3c199f1db96750515c2c22b2932a439bd8278278f8fd589

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9767f3531176fe2cacf5178611624370

    SHA1

    b06f0d63e20be5a4a442a79a211c82849c931803

    SHA256

    ba354fc75df0937adac4d400bf69745f9abd53d165052d46d78c6052f6277af6

    SHA512

    4814173ac18755c677c771a4d83f0e8c40b401222aa3f8760ef45a5caa64c98846fab0d1fe7a53aa46285870ab0f56457c225612c623d44549aa3ee2947d019d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R90HQQX\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E25VF8N4\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YT4IJQ91\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab2667.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar26D7.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06