Analysis

  • max time kernel
    119s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04-01-2024 12:37

General

  • Target

    40e0dc84b5f89641c9ba927a3cce6bf0.html

  • Size

    3.5MB

  • MD5

    40e0dc84b5f89641c9ba927a3cce6bf0

  • SHA1

    b21af40cd22cc2167f4dee98152d127e3092c1af

  • SHA256

    2c8febfd0f2fc501023accf1c4d09850dadc06b4b0f3e013c7605ce58a72aab0

  • SHA512

    403f017358249126e7e4419d3d1428e24886795d86fc457ea4084663b0949357459a9f47e71655fefbc7597678ece85fe3085f6a6b4f3b5c4b4dbf0a74c96dd7

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Ny7:jvpjte4tT6s7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\40e0dc84b5f89641c9ba927a3cce6bf0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1836
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1836 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2272

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f86d91840f25f6a17e6e06f1222eda6f

    SHA1

    9ada5efe6763cf4a5a4a2086a746fc4129f989c1

    SHA256

    0f995c4247380d8c1c4cef0fe7b9f3ac10dbfa03f2b191711572e9eb5bf2b2a9

    SHA512

    410f6ca53d0209eed3094b2560ff9588dbcaf73678156f581a0b0adf49e63b364f144cb6fc251bbb6f8229b1d9ea3a047365ee712a37945f311b59040ad66462

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d73820bb530615e04a1e39384ee6fe8c

    SHA1

    c605fdbd804dbf7e7d587ffa8747054f17ad585a

    SHA256

    82139c90d4464ef4714eaa5e01092334da3c32436bc07ec42409f808927c39de

    SHA512

    b585d9585e8176d636316b39dbab96dfa980efacd2972a31948e5fc168a4b496a07acc02c99872ff0455789daeb7f731f8c53e1681c10c992adcc9e49853aae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e176fe620bd60c529c358e830b62da1

    SHA1

    4938824e464c45d991c08bfc2fd0f01987990ad4

    SHA256

    4e7505cbcc8ee3589b95222f9fc1796dd0c8ab83f120af5d7aee35f54dd54be3

    SHA512

    f8b0aa9b3fdcea5a1e90cd6cfeac11c4b542a5cc9d19dde5de4637361d6a8db31baee0dcb51c9f6121297d72091f0da646914c9ae95a1585caf2ea9dffb25bcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c06560533cae0bc28b797c0181a256d

    SHA1

    63839fb0fd198046a3f9b9f9feae08eaccf00806

    SHA256

    19db7e7f61783b980e5c7f8ff03ed679b33018174daeb7c7732d9e9dd64e967c

    SHA512

    6b3c50a39145c315f929897be3372a9db5733089df6514f1cca1845cdf6c45fc8938688ddb205fb08de474fd6a9fb51dedec05feff8dcc2cab5f57cfb654565e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb6813c413bf8ca057d278b5aad7ecf7

    SHA1

    8c31975e7492f586dc7908909096bf8e0b0f5304

    SHA256

    e532d2f86f5b80d4ccec9494e66207a3d7e0a4456d82beb4e6e716a3999e06cd

    SHA512

    3fb708c768d5bc95bf6cccde8c68b25f777356fa23a9cdff110adf9216cdc53f65a1b53cf1047128faf2f1d610b794b8340cd572d89914f0eb92b566a01efe88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ae546efd20631144854e583f92f3042

    SHA1

    f7f3bb33934fbba91c5fe3120d14a241ca95690a

    SHA256

    9ca391ff358ed56297b42c3dd83080b58912675e413694a6706d0bf637f4e53a

    SHA512

    a6868c6eef8f0e36a8e276727ae4e99608c2dd871cb47091a2d56a5ae027a08d453e391d4b073861b1e31485c6d5c8dbd38a660b8f1352993bfad532893a01da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d5ae115a5bb29387b6f91970e33d782

    SHA1

    0d56f8753c798f7f6b13ddb8c62667f39b51d22a

    SHA256

    116ec0bd578f00414d1a21f6feb279505edc63363b9e87837058d164fb6d6f25

    SHA512

    969f4faaca2a78cff6dd59560852fbefac02f2a74f34d407b28fcfd5c1d85181dbfdf0276567f170d8d9e7e8ba5758a12a4f89664f64c3bf0aec9b70eea45fa4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d45214587f34b34963f57fcf6f0f7c8

    SHA1

    0b201e928220494d062ad56577de47534ee468c3

    SHA256

    de281e8c4d782f0dc7d84ea861aecd64eecbdb6d38ec73397df704ec72885203

    SHA512

    b06d424098e4850fd5ae8e860360176b40eb9b5ea55fb220b68df3eafca65a36b56549d3b079b1f63bde638c6b45c77e59b942fd445cb1106ae077c6c7f463ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3972e7b9394d09492dc7a6d238757008

    SHA1

    1e25da6354249aa4ac2cc2838e9ead6d58a4fa77

    SHA256

    98f7e04affd89058b2332334d53249305dd5b38ccbdcee52fbead7d8d6704872

    SHA512

    288aca01756b215552e115b669104969269352e01de7e1ed7d857d9b0f5d9ec9cdf6c0b8f7740049de728621b22bfe1c5f7ad824cf1e5e1cf1ae0f11fecb2026

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    364f80537c7a5174c01feaeae87a4816

    SHA1

    e0ebdeb08eb4f899e567a40505d27c2e452a4d39

    SHA256

    a0093a797c50f21908dd2cf8dd61ccb9c5e11f5d3a82d8c1f7f3e71b9e7b9e3e

    SHA512

    37d5a70dbc7299a2faa14e867b46cf8a82989e563ebe112df9f749be1b29866a71a0ffa773b335ed3e6482e8043d546a07fc90ed7c30223845b3e0f1b6b0d577

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    557227c4aa8d1364c4ff456009dbe3dd

    SHA1

    25e7641616d77e5418b66878d95450c28806f568

    SHA256

    6ea66c5e2a6dd6e2f6314ff6c94deba0b1e136e42b1e6cc830c368435705ebef

    SHA512

    84bae3efe373bedc8913d99f28642a6dafe4194351f73f2603fad242ec6a71bdc770a9252e3824fabec06195467577c41af47324e0fbb4a1420b8c4abadc79f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e29015a894151d0690dcfb4592440c8

    SHA1

    b5ba0b5a8c1fc52037700d9d3ec8efc061a410a6

    SHA256

    6df72f726c791336e95c40a5ac8691a826c688ac9bdb24a31a777663c6e9613a

    SHA512

    30fbadaa898df09fe8016f00999b48ab91ddc1277e029afd87b85981f3bc8d569e56e3db615eaa18b4e5c95132806e32891fca673a1d83faf0fe4e8986ca156c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fac533c7cb58a5e093efc446d96cda4

    SHA1

    92272866570339150525693ac406125e1178514d

    SHA256

    2ccdb961ee3dd113d4567bac56a5507d566e02f8a17d2d525b8a0ea882f84f85

    SHA512

    9b0a84224693628c55a3971de0a6c0fc02386740beca82258d57e2045299c5d3db7ddeec256c9cfc6b4836ca980358ec491bdd2b46e74abd155a408b9d2339d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3be3a4d7aa86094ac459896e552c5e9e

    SHA1

    36332556d138535cb7c0e7214909b13a9166e2c5

    SHA256

    7ff37dc11cf485779aac76fb3d6c4c3645a686e3b4387ae2f3dc3a6fc8e40f13

    SHA512

    8f706c7187a7bdd17404dba83c342777596871fa34a8b88c08c4c5b6e9fa5a6ed985fb8674b5f0417fd541ee0ca1afe681401a2535f3d4287987aa8bdefccdd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2069adc7295b819b80446bfa71ec3a97

    SHA1

    3dcad0e918a8f57af655ef5b13a30f3be2d456a4

    SHA256

    50cb2c4eb98acbbea8179d1b437cce3dd1a023f3a6ced5de1609ce637c349d61

    SHA512

    dc9781f5b212caa42b7dfef15ec288c1005c48676f9c923d4c14b8565c9df9bf7a004592fa77309ce3f87da509f0929dd28fd3903416e23e9d8e9177d969e2d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b710cedda8058723434d5a76a2c0799

    SHA1

    645785f5d9c674e19e14d5a7747bd06deab4bb63

    SHA256

    ed0577818d235129e792416d5cf8d936d573e5a93b7b5f036d6fb3f0082527e1

    SHA512

    97051048c68035a9771cf3d125975b73d715cf154b4c6c9f0d921efee661ba830d98cb8ca78c7215fadf478cbe88a6464e1b58e69ec04aaefdff67d848ef8657

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e5b1a8851d10b0ee14e537b2d4f3177

    SHA1

    d854df7a577641bb65070ce900edc56c1cc90b84

    SHA256

    e8c400394a55e2d51796a844b2e7cbd46c09ec71f7cff5b8f6c71e1c77bfefd3

    SHA512

    eb75dde5eb946bfda6bffddb1988e78ce989c747b05ab18ad9246cf54190396506e7f4096dfcaea0fbdc04119b685437f2acc832fca5f0d2525da05facaac76b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7184455bb1421c8b7d24225b12246214

    SHA1

    7993555ed4c6ffb2ab5017a6669de4a5c5a2fe06

    SHA256

    54bac44c201f31ac3aa5646ea8cf875a1c1bd9bb15cbaf3bc868d54a325c2c18

    SHA512

    94fbcda8e792dd60bfd6b0c11ed1d8769b637166e54cb734248b17b41000dfa0c9e3265cd94dd7c4cd1ee62f74d3121c61ba01695265902f6a3ec2765b251df0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    190ff0cb3cac3d28bdd47a573d0f72f8

    SHA1

    cf5a84c93a2634459455204d542b0ae6796173d0

    SHA256

    a9ec18480b6e4ac264e235e43714d6dee7dd1f7ec2d509eeaccb5a17860c2255

    SHA512

    40730c8631a0a94ba661404173e6af7468ce10f19702b4e74f7266481b5263c37a3f09f7d2c7cba5af92804d2f978a70fcff1c2a2e97ac2c8a2a825fb89de522

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a454406af535b61b664b4fc661552b3

    SHA1

    72f57793b49949e87ab57777153536f8cb4c53c1

    SHA256

    091f80b499777daf91b6c6f38e6a129a6f385d82e80b35fe4dc4c59695bf07b8

    SHA512

    695d7ab0ac8dff945ec39d4b8b059d7fe84c7e1f786bc297792f392ca5c5c55b0988403d101c90842ed49f1978c3905e59cb439cf7bfc38449f568d78499199b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a34656fffd471c0d8d3c5cde786006f

    SHA1

    16dd8309696b1df3a34914f0429da277eec09261

    SHA256

    c51b2521779d867ccfc15793241439e33c8d3b61b6d5eba00efed45ebfb7e366

    SHA512

    37351f1e656d1eb03e0d2ae2b11ff5cf24a275e769a2aef908494db9581a01c7b1a79c4d4f48bb4ef07b7ea9709cb0cecda1db2ed72fc354523fc9f915211593

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W79VKSP8\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab72A3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar73DE.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06