Analysis

  • max time kernel
    122s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2024, 11:40

General

  • Target

    40c39ba472a6924de754eb1184f97448.html

  • Size

    72KB

  • MD5

    40c39ba472a6924de754eb1184f97448

  • SHA1

    6111b6ebc6ea7e984b49c1c554cde3d101229d45

  • SHA256

    7124c7baf8e5d14e2c96aeb1dd168ba9bd1f4a5811531afd44584223a92a3e54

  • SHA512

    26fd4054b528b65066992067effb51f659bad48daa448dff1ace5182792f4ca57eee9c4a5a122f62be1050e5aa7851896464263802bd4be97deb95cbba7b8ee6

  • SSDEEP

    1536:NaplnNrueFoRo0kUKVLc44cjwX8vFpMw7n:MpFJueFoo07GLCcm8vFpMw7n

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\40c39ba472a6924de754eb1184f97448.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3044
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3044 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1404

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0b886f3ef35e471a860a50763d6ae5e8

          SHA1

          93a5866b0cc95e0c84d3909e4daaa691d70c0a12

          SHA256

          3192595be6ea305554178042f33f83a90af8ff151c32ae7b84f859fbc768c5fb

          SHA512

          0f9e799366f3340f919d4597148c49042351c3ff5e6ee2dc9a20e491b08e930b8bd60e884f6be0b4e84b6aaf42987eb894fb17ad3712ac54dcacd6807a6fe30a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cc640d86d8305e8e9f8fcd79c985bb5d

          SHA1

          17728bb7f49cb1f078062a7bfabc537f0f173ccf

          SHA256

          32d04677fced6a7963186291c97ae80e3db641c2633302ae01a6c7d906cc8afe

          SHA512

          0c806fd4eb3ba68b0297b99094ab5154c8f268ceb99c532e0500acfd20a10b523452e98819d77071f727a69e7229b50d607697c02ee6c2f4fe702c0556a856c5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          597a4fabd96efd73057358c3fd1f9588

          SHA1

          86a9c17636de626f2d7d8ee1cbfefa75372f729c

          SHA256

          21adcd390e5dca29b63e0d739e5c4be656b93320b91bb2540409c869d19e5ac6

          SHA512

          14bcb1eedfc41b5a87b00d541c81e2d41baca16ece1771e8e250fe336dc688fa139be80167c6a7307e8ac30b177a1e7bb1f590b4a0ccb574d64cca008ea539e5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          251f32534209ba8149ba887eb2d10069

          SHA1

          e3e6bf0abc01fb517c925e03837c3784a218b3ca

          SHA256

          2a4aa18fc633d93125898a0c3c7ec7fd66339a50a5bf7d626fad59b50ba1eae8

          SHA512

          2bef4c0d7c8eb6ce0d9e831ed3ec5f86454afa925e8a06dd6b09bc0a09dd2be08d1908b16fb65848921329f223a4b58c5475c6a05215f517911eb3f71030bfe9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          70b45067b11ea801ade6c1f3e459c89a

          SHA1

          d684fa5427d7e9669a4f79229dc7fc26cbac4156

          SHA256

          976d9ab0d8f9d9aaebbb4addfe573920a788c11d53eb16c65f7032b2f85f3b6e

          SHA512

          eee52e8665ff374c43588ff4a4085e20f11515c5f178c29b85f964a37e68be67f664b52a661e556a5a595ece2059db7be47e1b580cccd6a7938657b2bb4da42c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e3abfa6fed96419bf899a584f82f2402

          SHA1

          b52dd3a55e43806b6807f81fa1334ced802a93cb

          SHA256

          1a67afa1c7f52d3d19609921e5bb1de3dcbf13a5efd3821379679a9710742d28

          SHA512

          501a5eb32b06eff434904ac12146209371e8504ea741b97ff709801bf25ee01382be9b54f46f08f5647461e38f03ecf982dc07af2df118f8460f50dcf1fe556d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cb16baf0587a37c0254d1a44ea191cd0

          SHA1

          cfb154665e8e1a89232b63d9997bec1f727471b7

          SHA256

          40f73ea28c2b59e44d11b4a3f988adf4bcc2da53915d9537fee937dbf96dec32

          SHA512

          3ce64c6f46b1b2cefc677394a064ec9883023d2ba1beea0d2c17f2be3fb5306b5adee64aba360229b0bc3dfe38e80b5fd9b307b1cd95dc32c0772755beec2466

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a849f57bf905db0b844a7da9ee8df1f7

          SHA1

          1810615a0aee1f083c8591ac1edb03082aeca21d

          SHA256

          07667a6da41d51e0b0d98e8d7755ad94e8d36e92fa0cf8207e85e82c55d3cce4

          SHA512

          c54a32d1127a3e065b4ec457e54f69ae7a162ae61ad878219e17ca26919c2e783f535c7b8000020145bdb5d959e1ca81187ecffd23b18addf2df06917a396dcb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ae83bf810a746f59fd7bf9540cc5f362

          SHA1

          06a63a2831b344f5d043a0fc761bbec2491ea5f2

          SHA256

          ec970f1fa482e9fbcd4629464b1a2853d34ab1f616c09a2a2bad47e989941a59

          SHA512

          2d8d855971eb2af6722f44d0dbcad0b0921548d9b14a83548e97759a88d9bb8ea76e72d9d15ee474ee764c16487a3c13bbe136f33f801b8e1d42b684e8f895db

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          14f934e1a94f3f8f2abba7d3a13210b5

          SHA1

          b6402d94845c31e361c5e0afc5abb2f0b9605436

          SHA256

          e2effc15b6e0884dedbf52c31b6c3f906c5e6e0bd5ae18d3d81e15ca259d8560

          SHA512

          fe288d7abc21d7201590b72c8e039c2282b27f0313838f516abfb81098af0508d84a8014b1012d22f4147fb731ae5a6d5a82a4cb66fd9d2d069f5fd98736f53e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          738da112b96eb49616f6752214ec8047

          SHA1

          2ada20bc58e2d6aa703103c83fa1aab6f7c18ff6

          SHA256

          8782598cd37b5c228d48f1213c2b0decda531da7674a0e944de19a222394a776

          SHA512

          f188a37808d920c7c1cb1beaa89b62626753d81052ea75636656b9611f6bc7ae59ccf5ba92973b2fd98d5e05818c5e93c64e8ef6239ccf80b6395c65f0f7ba1b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e3d9382738233e448ca7a1ec6129a3df

          SHA1

          378faa3761a00c944a0adfa40d690311ad32346a

          SHA256

          7fc90d1f50f831b0aa8f4438a60e058757a66a8d4e6d09add0d9cc5de9be1617

          SHA512

          a050bcaaebf78f0d058423ff707ce98f5e107bdaa7830c39aa4eb092622cbf238c27d6833b277a840234a9a1ec2046f77598a17381f9150483517562711e8162

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b9cc76c3eefe4034d2c6840ceedeaf32

          SHA1

          da35b3c2855accf707f9434402cd43278c8895ad

          SHA256

          5344a0c3120b4d9eb336394bc5b1878302c7481619923849f65db80784351b3e

          SHA512

          15015b6bd42cb9d5a85b96a8d402dd8a06dc97532c3336392eb9efca7fcb1a5b3981e73fd1f2e7047f53b9dad63c6af34846832c5ae6902025effb03c48d6b93

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d7b9b59a2b2cc8e53fd8448bf84aab05

          SHA1

          a5f9637811e1173d20caf1486824e4308269104d

          SHA256

          a21e5e55a28a67fda0f2c150405bb4f54a6c523ed63cc53debfa4fd76e895381

          SHA512

          419e9c41e2c1bd06fb8e16c7d0afda8bb4cd1be53f4ddb370eb5f1d21322f5815113edf3e8f6215ddc8e7105f6b9ead0edc8065efe410f7381d43a3ce294cd26

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          569de4fd1cdb09ef55709f7649511e0b

          SHA1

          1cedf27dbd403125d1516bbba5533cd06e7299a2

          SHA256

          ff84c48dd27434bb2593ad43c9d6639531b3abc8863dd58d2c2f77d7835be506

          SHA512

          571cf7646a5c40aff52eb27f24631f6c144209867d5871cb93ac2584b402f7f699d2c343489cd90d96fafc7d5a95332e6ff215f52368c19cf9ef45088f666b9c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5e3fbab260808beeaefc991b73b42d36

          SHA1

          88593c49071391126196e002d1d63e9d072ead77

          SHA256

          aec5bf65c6bb8f6203b5d4ed5f27723d246e241792aa9bfb445b80236b5bbb46

          SHA512

          27da1e81a850b896c4f543b9d23f5978df4215d524fe251eced3bd55972e008896a0c3d0c0ae8b960efabca869b372d0ddb7ae12ac5fbd7d3fff06d3839a4dc6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          970787f851d01991976b7019f35d3a92

          SHA1

          ebc816f8f82fd52345ced6e16dc51b90178cf9e7

          SHA256

          6ac92b2c071bb812aad46f398c4e60cbcbf253bed4f8d83b59807045985707da

          SHA512

          95cbdbb986c7ac819e930264219c4b8cf983e9acbc5fcec7f1b66334a345541f908c1a43534795ca36e24943a1ce50083ba82e442c0b0efa91b62b8e5eac1e3e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5940d22c5251b895803edf45ca4322e6

          SHA1

          7dbb7e421405d6f56cb515c09690ad1ec0e13008

          SHA256

          e580210b8992eea4c86626bdbe47f7d874a950348af2dd328936f36c29164423

          SHA512

          8f47ef911293e34773af855147caf313c1c696bb99edc71d560cb6d371609c42f7029b0efe88b16c66f0730f2a6e8ff1d2bc3363a82fe15c78b0837bde308b50

        • C:\Users\Admin\AppData\Local\Temp\Cab7CEE.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar8163.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06