Analysis

  • max time kernel
    118s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04-01-2024 07:55

General

  • Target

    40504f6915bb47c926c6302e21506185.html

  • Size

    3.5MB

  • MD5

    40504f6915bb47c926c6302e21506185

  • SHA1

    4fc60e89da01977ea80d4e031ecab2ddd3bd127f

  • SHA256

    6bacc6b19a1c3ed95bba1e03e31736e6599324f49fb8e0b6cdb20817b1e462cc

  • SHA512

    c805df1b3bbb52ae5042e6ef103484a71ae62baeb63c10639f3124ea39be66b7a7a008842aca7dde8f0cb89c8d40ce1b63c21d045c3d8f7d94fc32791c47b773

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nur:jvpjte4tT6sr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\40504f6915bb47c926c6302e21506185.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2388
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2388 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2360

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0307a9c5c566924be3bfe2e05b589a1

    SHA1

    3699d4426f29e777f980d23896aa24dd7bcdb4f5

    SHA256

    7a180758173fdb22fdc097a8b64a2e63926ef1c91b15858ef1216ef7369e4b84

    SHA512

    216d8ac342af9b627b1b0ae77685e0151854575f97e15ce7320d9f07c1cd3f69f6acf237088492991becebb4d540d64a6181df7ebd7c4e3abb2af6e248a5af21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f163d822ea001499b1ab842cce10c6f5

    SHA1

    b0ee0b26e22d4376677c7d269ae06f71d8bcd412

    SHA256

    578c27a6ec39862a5c720905e803a2867a810add4f034069fa314a800de84702

    SHA512

    d60fc73b1d2bc0eba988703b85f52a57e2e0b19397c4af9aaca84536d4d0a3ea3a85445ae3a92fc514c4fae080690c5c7fe06fbf9451e62870efc86efcdc29a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0aad5b08a9c310f0b27d510078e9709b

    SHA1

    9e9796c1e350bc4f75d01dc4de79dc1f7dfe44ae

    SHA256

    60262d73f5875533aa8e53552eabab1d5279aa223ce82a84a9b780e827cd12c3

    SHA512

    6f01557ab78426f3833c6c1e68efaa2d51fb9b86fb4b2712948a3f61743f15abbfb63a7093435fcd4967eea56a348f2e690263d69545bcd92e02cbbf435a8bc2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c40546dd3ec766bedc1dee378646f69

    SHA1

    7d44d0b2b8aa95e11410983ebdc0adc1faf905c5

    SHA256

    228225bbf07d22d8872f3c5cbb4a12e37964bf69e204d8bf4bbe9b16368996e9

    SHA512

    9a7999b65a26ad381c71de660abb7211893947fdc60b3919c33fdc9f4b4b398cd0c45684c5a4554558d0040e0be9d2d31a7847df9bf5ab055fa500c3d9cb2cca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da9d131f6274a0e89473809694437210

    SHA1

    e2a5ed99964eeee6eb4623295338f839b6f15fdf

    SHA256

    825012cdba3b323dcf3d15efe523c86dfd26e0ac59bee17e8245f34b323d1a29

    SHA512

    50ebe71ddd6744d850ed7274f378dded44e737817393c6cb2f61d6850ed16333386aa4c545228f49c0c94398a81872de2de163b321f048481a9044baa4bb4fa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9499b98c3d2288fdfddbe2bbc6c55d51

    SHA1

    91af5c40c78713038b74baffacccaab5e1b67759

    SHA256

    43caff2e456b85ea848cc8a1e4f534e075f515772f1fc9fd06579b128e48601a

    SHA512

    e063c08b4e80060b93cffd85ac92068ec1a91deacc477ec51b2e52dc3dd21fbdcf37e4b6c32e0a9c0df8df77ad86ae51adeb1b5815f90e08e48526eb86cc709e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    230f7e073e2a426a20b1151cb1564949

    SHA1

    dbc4c74a7fac6c2e202f12454aa3e8e4b4b747f3

    SHA256

    6eb8322c1ebd18603be1798250276d9d2ed8fe3cf39727a141aa1b55da5534de

    SHA512

    672bc7761babbcd633cef425b3654a6d14b4173cfa249d312518eaedd4c5f3876f483b77401765cda23f73fc5003eec948ec7a04f19c4ec5cd8458c20406b36f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41c12a33bcd83c1e86e5dfb6abb570f3

    SHA1

    2a833c89cb0bd07b9483c195c86c4fb42f66fc0a

    SHA256

    b5bd3280249115fb8083bc760f5cfc685c92e6f90246685f1ed25358cee5206b

    SHA512

    00495ddc86610b5705f14791f6ca559956621a79d0ae2d9ac84ef11599970f474ffc2807ade0cdf4efac924e4c8c35d855b996dd1c46223541445c121cb561cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e035e4ab0ae7794ab19b6421cf42c14d

    SHA1

    76b2cdfc97eb61600adcc307001954f2f0f86103

    SHA256

    8dcb223bac6449fe46e5fe33e04461bbdefe011711e8bd6fd68b1c79905436a5

    SHA512

    88c66999f4503f397fd1c302d447001c30e10e9385d2f28ae795f63069d74809d0cc5a1374fc12571a398bfd981897d4eb0a1d187c6c8ca999d3d43901276532

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f894be921a9de1d74e6326b3a3e56238

    SHA1

    d9c5a1d87dbf0c4e3a4dc87b51bb30287016617f

    SHA256

    70c1c2d9f2673cb5c0bdc851707d8fa5b063b5a795307e452af36f7cd97e9011

    SHA512

    e15e8d8f2fc27fa553662cd549b7e589c243dcf4bbb355d499551a62be94620abd8763a7cd8188fd80b9930ffd7462e6f36e70d2446fba0bdd8e7cc83a6e1b6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1bb0ea9f4b779ecc4596b0e3779cfb5

    SHA1

    a68ef285c9cf0fa116740a7ab41cbf533eb0ab5c

    SHA256

    2fb049df446ff4bf91af78aab3b3e0e651459c3733507b64f4ca9bbe7f80d847

    SHA512

    ab709fd2e1304b9aa50a5db7f86b6c74eff68e19e5935418ea0d2d51cf18dbb78f308d6fb2a32ef0cb2f5c45142124d38e21c04ab8ca4878785583b8f26f6f4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    026ec401e1172b64713b1a75ab7d8852

    SHA1

    ab1848a804748cbf0f8caa06f1a97a5f9a819360

    SHA256

    7cabb25c03b5ba65408728ce87b5256210d560922aef9ccd4b5c3a4a40463178

    SHA512

    263e46ef86f8c2405784371c1ccc06042f50318f28324787fda39c75f442fbc0e224ce2c97ac8684d9603063abdda0f6962c66c38b51e8f36c7ee7d5d6a54048

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f7fe853755008d6593861a96aa95517

    SHA1

    21a74946db955e6c0a678e796b91eaacbec90048

    SHA256

    b449d7e4e565fca29d022be28dea20256d98957596f28d272ecccc08a728c338

    SHA512

    e7ba97dc4634ba255bbb80516156459b5f747e39199fe305f0e7121654dc3480a1b875894f1f40a22c9923d74f4b3cdf697941b2273f5aa86f2b3cac8f2907cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3911a59a621b1f4fb45c221cc22e822b

    SHA1

    b4e3b0c2c79390d9053b2a3bc920777b712f0653

    SHA256

    b6c1454e2b27c931af61fcc99bbeaf9a3355b567a5341c189f305e89125342de

    SHA512

    e92346a869c73fc3a7877c587443b2ded6500c99fdbdd353da5de6578c9553fe61730004c4c684e408b90566330cb8b4f5ec5cb172eacfa4d9acf93291613e2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    899d7a635108fc716ac0cda84dbc486a

    SHA1

    312e2412b165ace04d250334cadc81089c1f4e0d

    SHA256

    5ba4608d8fa60185c00a682ba49beb2a016d0dd52254b9caf815f6b7eee1e82a

    SHA512

    18e56cea15e85c14f27edabd0b222af62b23cce6fedf32cc7d223a9d85783cd3fcacf5e4c9fc663f14205a8597c62d7a00ced0d4484afecd7be6a0ea0e29b048

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e375d6dfb277bed1bd38570699ba6dea

    SHA1

    48d99ef5e5247e881fce227acff66d41bf37e3a3

    SHA256

    07dab8cb02672c58377e2024e2db5659ad61f4cbb556c3c112a58e8b6dd35c9a

    SHA512

    1528a8635eaf293690a9baf0596de6cc6e9c788030a43967ac1e642bb60e338c3d41aa58053b73e5cc75a3851dfdb0c86a61f8a1a3b253222b74229a77a5cbba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9029f423f00d38113b20934d8815ec03

    SHA1

    66ce1c211ece756af8ff3da7ce9c1a6be1fd7f6d

    SHA256

    cde989d711016011417d6a02a36b6fff74d515b629cdae823c3c8432a332971e

    SHA512

    9c6f8457fa991d0af7bcc32dc8d5d61fe80d61b6e8fa43511e3a017f48175f14d1340161e8c4b81354237dcdc264b5cdf62a8016298480fe6b96dbc962bbc7c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3880d91b633ff3ecdedeb33a31ba50a0

    SHA1

    3fafbf18644321188f4e9968b28e90a32e17ded0

    SHA256

    0fcd87883404d4b53af094adb1cb8ca6b4f77364c9d925d89d7ea60746a0e87f

    SHA512

    c7b02460bffe16ba5adb64e04df891c9d0ddb4b8627d1b48280efd3e95b48adeafd611cd239fcb55a393b87c892180cb7da978da9c94836a0cf71c32b85daaa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab89c411ccd36072389ebdf3184f1326

    SHA1

    5b76243ee4e8787939eb509ee6c8d6fc9a739822

    SHA256

    dacef5a122c1408d61332825bd241073f4d2e725b64fa95e04c1c4c667557ba0

    SHA512

    8443841e1c7dc66102ffb6e78cc7b259b7daf3c301c307ba88c0335f4e4ce46301cd36b0076aae5d06f1b724ea606470840e59eb9fbf9f1ba18e086517d497b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a45c4270de64587cbe3fe8f3f4aee138

    SHA1

    fb2e89155ecec01c12e4e80b29d1b96d019fdf59

    SHA256

    552a36d0bf344a045ab42d2c04ca2da4c3b4ef31dfbe443b3f4fc0e684c101e1

    SHA512

    02c72abd09289cde9b1c595bd39808916b410d10b341ad58503ed525e86f09fbec00458936781409b7965df387e6c8bb8b3669052c6827ef4a238d78899bb401

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D0I6KXNQ\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RU3RPYUN\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U9VC31Q9\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab4720.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4752.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06