Analysis

  • max time kernel
    138s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2024, 02:48

General

  • Target

    3fb278d835a0560cbc77ce4bc1f9e8ab.html

  • Size

    3.5MB

  • MD5

    3fb278d835a0560cbc77ce4bc1f9e8ab

  • SHA1

    bfeacfa7c461aa457a3cbc564b173957924597ef

  • SHA256

    0199d66dc3b3c7df7242089bb95b4b5d2f817107f8fad67451be8ce748cb2295

  • SHA512

    3197d47d7cdb6e53a1994d8efd1c5ed37a820cea428d3972e16511cefe4fb835731d778cb5ee68acae46da36a6503e4958a7c4099de54b642a89ddd6433ba2f2

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6N1I:jvpjte4tT6zI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3fb278d835a0560cbc77ce4bc1f9e8ab.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2504
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2504 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2472

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6912a913502b6162d1d93c55cc21df8

    SHA1

    44aba172125f2fc10e717a015401eff349e589db

    SHA256

    a7aaec2603f00cd7b0a991ead3066db83031f095d98b5f0e7959405672afc47b

    SHA512

    84d1b261920df8ccb9191e2ccbda3e2fae6c3d616c404a0a0b494ef6dbc3651a04acdd2652b03fe0c08eb39ab623f7b47d3dca52ba27a50900e7fdb5e192f0ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c05821ada7fc903b22bfc1db98eb4e41

    SHA1

    687e14379149e8b5791d3c568fb5c4543030cde7

    SHA256

    939496a04dfd71949de92da543cf9970d2c2c8d99771b9ba2a322a2cb4ee0099

    SHA512

    e7f678168cd3aa573296113708b3ae55a2b6d208924ced3414a984f85eb27bbbd0b2ca76e8a3ea76f6aa78bd27410b39aa37f1d3373d3737fa2298a6866217e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    faa71217963d82943c91037c5bc797e1

    SHA1

    6b321054111b02fcc47a45b1f72fae0aac9ff2b1

    SHA256

    597fbf6a16affd744d9b761120fd90328c5648abaf815256963d4987ca8fbb90

    SHA512

    43919e952470f9ebc81a4e08759f28f163a349523dc4b5f4a53b7d814931b7379ec39357817fed090d7e5a9dba08abe1ad48b398febb6dbc576c588224f9659e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63daf45905544aa748146611db00526b

    SHA1

    c4d86f7eb6aa7b361505f8caf597cfa38b9cb5ea

    SHA256

    d807684269c59999677ebb82260ad18a16d00cd16a498cfed0bac5a6ee47ebe2

    SHA512

    26eed032f1cd87c954bcfd220515c3a3ece8b94cdac1dcb076101ef74b6fc35cbcacee8fead12b6d0ef68f5eafd55d6318eb0d6c7ee8b4b6a8ae68bfb81b7be6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b6356c6e4f82d31bf08b468e12fa58f

    SHA1

    a33eaaa3f6e65e5741639902370549256d091a95

    SHA256

    30f15ebe91925a83383e884bcaaacfea93efb2e97375b6ee51271469215215a8

    SHA512

    b61581c2d4c68665a8adde8ecb0a04cad2c5e9b6d9fbd6910d7b7f1d27091bd3b9544007225d419b3d2d6c0d30cbcfa69a9dd0b9d0be15e3546ae14a58405452

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3cd2675bbf95b93ac8d539439892ca98

    SHA1

    292fcdb68dd9e228cb2ec717f0a91bb6823e029f

    SHA256

    38745be0a511a7c598382900af2922cffb5cb1b27fee2ec6704fd27af6a564c1

    SHA512

    cf2700ec91b3c44f57de07831ca45f9ad08b59832878f9bd89dea24a9a990892362a345b3556210dd93261038e4dd4616574a40a40a30036b8968ae55caebc2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a5674761a5824cd1556a4997615752c

    SHA1

    c2058fb21459717f88754e550eb2531fe51db5f9

    SHA256

    84364d5993228144463ee842242319300bb690f785d9807aca700c9d429d2aa9

    SHA512

    7961862b643a0537d9dbf64dc21cbf13e53b403b65525ece2a4ef6bdf97a06a2f1fdb28e592666e1e263196bac91f8ffe9be249ea02416478f7e3a4f89ac394f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58126d2ae39e07d5b016980dc2c963ca

    SHA1

    61b4c552b2c78205d74b22aa1e49f91157425322

    SHA256

    0273155c0de0006c7561369e68dccfd754b3c58b0b80ca24e12d916e9933ef80

    SHA512

    14a82e185e90340225b70244dfea58e5832ee03982d940c6cfe1b1d01e24dbfeb27d4b75133e3beedd5b8cefaa31676eed8e32c94993a4f12479c9e95e1715ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be34d0f8e8844d71e1a253ae4e678c03

    SHA1

    4c20d9ef71d322847fadd8fbf78a976436030140

    SHA256

    fbcef1839a404cba715939c0f777d4fc1212de20622c912c6b19410341ff24e8

    SHA512

    9f12c46b85f08bd87e80d4b952992f9d5a5e0b2cbcda29e9cc55b365be9b9a814ec41f2f02cd39c3f4791ade455427761aef30bc07c5b717984874c99e6e8f07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    711db44a69c422fc789a6c2505099761

    SHA1

    8e62aa30adfa694f0e1d94af043998dfec7b7389

    SHA256

    eb6cfab9cd0c66f164940523c50eb05c87fe05e35be5b0876768fde7c419508f

    SHA512

    526a0d8b03be176df8714156553bd8c3cb6cb69e0ca3f949bfe144ac18d8ab8fa3e5c5510424a37ef0860a3aefa19150d98d7c9dfc44db4148309b4d6211ffd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4cc833b64bdaeb7bde5adbefe8e3bbb

    SHA1

    5812fdebdc852430abaef42848df0f85748b7545

    SHA256

    e7b2f5aa25bbc6ad81b810453668dc759d5a3fd8a0b1ec8bf96a6b84c84e7030

    SHA512

    b6a858c5c13039999043893ca56849b62cdf8a5c0ff33873235848d0e846489459d26860f45f39c76dac60c054cc6b48473d2e5912107e7ff09cab6171cb6123

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69a86d4e4ef4e6e9d823ebaa882e7a9c

    SHA1

    b38078581c2c7910a0f9a19eea735de62280131d

    SHA256

    7b4d6effaf142a56d37894a9f0273d6aeaa956e0d64731471df0984cab67ee33

    SHA512

    ff27f4fb88cf03f4176c0cb954dacb897f133f60d61c66aa0b047d5245df4d73047de2962f4e28f5a54f2ec82d03d4d92a5152d05f10f1c2765903c1faaec3bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d762d0b81b823c81365abac38361087a

    SHA1

    5fa48c0feeac953be21baf43c9c2ab062cc2f04d

    SHA256

    2b25815657575093fe1418f551470be8a19e7c49e07c48ee28cb12b4aca12ee5

    SHA512

    614d161685215b3cc3f44134d0542e527cefaea6944d1cc295e5ae5726c6fa66e13318781a6c6a6235ea587ded71174be00ffe466060a8b37ba79ca0afe67bb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52911770f1c262dfa8acfa2bf659f055

    SHA1

    6e1b9b17a01e4bc6227b8b46662d1e8302d85bcc

    SHA256

    42f42eb4c32bca52880c5ab177488126a801a10342a2985f2de39dffc262d68b

    SHA512

    d9262c704d3bf230653a29e9595fac6bb1d8e3328c5712240911f091979320288fe1dcbb56b02e15df3f71164b732c2afdeb2c3c9143d340fded2c0d4b9afada

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    105f7f06d0518cde46c9f1a35d2123fd

    SHA1

    59860e5725e551dcd27aabd08451e7594a0ceb1a

    SHA256

    7aa2c62d0258f7a8adaf1b403596f8e1e124b2b1b4a75fcbfb09a5d2a120cd83

    SHA512

    697225e291f8cd6f399c12b69a8a37a762d7af0e8350c7a85f1ef834ca91790da899e6ed31d9701d7bd1cd258e35a3f5199102c10601ff06d213e07a6a3f4a09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f50e7b1c0fad86a267208b2b8130be56

    SHA1

    a1d1ea10899fc0126a398b1d8c95a2f512143f0a

    SHA256

    2420fc901e2e0dcad8fb06cde0ad623fe69cea18e8478568fa3aa55a4777f1e7

    SHA512

    f6e8bb0ef503a6b35a6ea403637b46bf2074d66c4a759ebe593035508784b8cce3ad1c80dc02a9e0eff2a851379a40a308a1297cd870b083951f36f8ce75119d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    600bca118fc994cba7f4225494d936e8

    SHA1

    eed03cc4fe8160038f0c39d815dd60f1323ed715

    SHA256

    87e3a759fa5e72fa5705dfc9c6eef8c8a0c77f05ec31fa5ecfa36cb2cd731fc1

    SHA512

    394526d44c63f0193536096f5d49703be7bb2551fe0649da8d9f28fd99c6831d69661f3e7e6b53963e5bd5f250960ee6d7a0bf44e00ae30f0d1e22e156c6e667

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35e28d7a34debfc4e57d9390803a8dae

    SHA1

    a129e0e081f051c1ce2303a6d8bfa39ac14beb2f

    SHA256

    6658e013a901ea91b88c63e5e3e7341e69712e2ecbb69cb25c8f7085fc58e669

    SHA512

    02a5f7144da3271c31e2512fe383dbb8725ad6b3312b2a87c03e0d56729fe39af617d6d05457bbc966c6a3bdce1ca77787493c49d74b80b529aebc113aa8a1a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c11fa9fce4a7ca5b602b35977584d821

    SHA1

    a12ee3ea3ab56971d48526bf33666b5468e39a72

    SHA256

    13465239c63cf8f35dc510860cbc898e9b02200a15aea292c8a87eec92a3b35d

    SHA512

    fe499ec3c417e8edd3fbdc231e14f978eac70d961a5e256e6e7b95e1a486becf5a3003cd2bc7deeab1f8cd811b68c953cd30624232835660185d34b8477fb4da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e426a19147731c459c3f97afc31fd20c

    SHA1

    560e1062a9c53320d083cf101f9af8f36c1a70a3

    SHA256

    734e54321e22050183144bbebafb9514677a4ddc9d26f9fae0061b78288b9454

    SHA512

    cdd04e34148c17d1a0567265d8ce062fce66ed69d2abaa0f2351b7159e40f651af7171a6326ec6557e985652a693131e8daaeca34daaa97cff9361966d8ce347

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67dc278e8f32d08165fcae2c6408a01d

    SHA1

    6856e7003e295c928b69f0af1228b93903c621a6

    SHA256

    8cc8ffce82a40cd7397e887b8ff8e7fb593a5c83a645e462a4a31cdbbbe3d0d4

    SHA512

    de143fa16f54ae514a9256e93aef49ab999ea0c2535bca91f1d4012828cf8597f2b72ce3bbfa12ba1da60ebc78bb1c58eddc51112c63e65370d51d563d2aac72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13069893e6ff695598d5726a5e6a6f97

    SHA1

    e406e85c932c62d62270df6572dd65c477ca1317

    SHA256

    a9724bca6acf4aa7688255232f5bbbc73f378bda86d27be672577e92ac28772f

    SHA512

    6b2860923ae8164531d4d62a1c58a9c40164e538ef583053f2cf6130e057d4a4fa04da624fcd60250114c92ecd027e1aa2ed2c75c147700d41b9d9d48eb84a0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75cb16abed634c1e306912b36097d114

    SHA1

    db1ec5fc61b2d88e7fd2e4109ac9c959b90120eb

    SHA256

    c22f0985c3cd7a5ac19c74e76ddbf4fb12b85ca77b2f4c6d43d95a33deb38edb

    SHA512

    2f59ee2cd464ad8f009b5a8f1ad35d6b856222b2101efc9df7bb060d1a9f3c1b8b421f37f140ef1130d02c9b0e3ed2d62d8c3ad5ae5af247a8bbd0be7db7218f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92acfb4b0c509c42f74b9694532ccd46

    SHA1

    5835ee9a85d2b90c2829b08ebdd464c7196232fe

    SHA256

    5dfd193790fc370920d9464d11a5412f30dc40e9cda0f76b8a3da8a692e029e1

    SHA512

    71add274a6d6f062e04d48e85fef5af2dc5f13b05abf0e5c52f397549332982006750adc194f2c2e4f551ba4f72a3cdd6cba5c7a7e0414643212ebbbfd162db5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7deaa0562c4f4fa89da5a7d5039e5213

    SHA1

    a95911987f0198c87984ad0a40f7fa94e82e5f62

    SHA256

    1c9508ad1a093e92463d0e5224dd18a869740e6915e26d4b4dc3471f5c5a390f

    SHA512

    a56ef7cfe5481d2e52e6a8492d3d5b86dd038d90df694daeb4782aa2a3080417080afb40bac20733c3cc3b350d011d20526290fd0059d41dace1f33bcfb4be62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a6b67b12d586daee5a5bace178976db

    SHA1

    48a1c8a57f5d3ac09d15cfbe52c9d06b1d32493a

    SHA256

    08e3bcba92ab191d13a1c35d28ace893ae6c46ab42fff5edf1ac13ef8b664c14

    SHA512

    40f5fdd996608672cad3d10b6410ad4be4791a1ad4ac4de959adc930b9ce74e4f7e398d4d5c9e05ce0c17dd90d30f1b0f28265af3e2e1913185f8409eb453126

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1J1BPYJ\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YV6H14B0\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab8CD7.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8D47.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06