Analysis

  • max time kernel
    122s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05-01-2024 10:48

General

  • Target

    437c29775d3752ce4fd9aaea423f6600.html

  • Size

    3.5MB

  • MD5

    437c29775d3752ce4fd9aaea423f6600

  • SHA1

    dc19b4fd312a5b243abdf6c1aed29511bbb3a814

  • SHA256

    4bae9491ac91701f5bcde80700654d4d7ef50e7193236e2d8050757d49893e65

  • SHA512

    39e424a8a4c01c89e65181289b7e86dbab8884bbb7701ece92603955e27d059e323598e1f3e4bd0ba256394a9a60faa657b0c5eeb6e22c7333eee1e144b0ef19

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NG7:jvpjte4tT6Q7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\437c29775d3752ce4fd9aaea423f6600.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2140
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2140 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c235671ba316ee1c6630c8787928ff3e

    SHA1

    1b73d1a8eb9c131efbc8285dd1eae15e8a506301

    SHA256

    0b5ac7df06ad1a2a22da62a36a24327c4f739d5c8cc96b29e7866cf01034af15

    SHA512

    4a425708d8e41bef19715b59425442302794428f8c890a83a1697c0cdb8465366ae3997d671693a5a8f5e03928bd0a7bcacdea75df26ce3877066a84653f44d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe65a13a79a87543b9549a03d42768a1

    SHA1

    0e0eee3eb8fc4c2788324265ff9ec113a55fff76

    SHA256

    ec6cde90eb115111a9e3456cade74156a9dd94ce3c58907d66306365493235b8

    SHA512

    a820442419b208f88182786d4dc2d5790209545e0db4b3f3b83ac0a7f6fb3c90ee19ab182a7e4a53cfc3eb86a873f7f24fbd3d1aecf90dba5fe02f4a735a2402

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14d9a22dded98c5007835b12c3d6f236

    SHA1

    0d784507a70e717c897b16eb7f3a436d637029df

    SHA256

    5f46bf9b1e8b23e1253f5cee192924d99eb58cc472be71d18528255bbd755905

    SHA512

    9f364946edb3b0a96c7fce7c38d3e470e2cf78d27fc390fd2a65e93d82e7321d503a44883aef3b2f2f16579f39da33c680eb0db62ea10a18ce86e0d88e415571

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f85a0d5bb331c457af73e0c0e8a670d0

    SHA1

    5cf0267b7c4b6ae69524e267ac097dbb3266699a

    SHA256

    0c1202cb2a5a28f240da89f8b828be8dccd6423bcdddfc691f8f3d650c3dc58e

    SHA512

    51def2bacd379efe31bdc934c09d092e3a2a780743e8a04bb1320acb834af46d1c5d65479a82ba4a22d07fe75db55d3899c378765990eaaa20c0c720edf36ba2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e432da821d5a4f7562d575bb1b61ffe2

    SHA1

    9945f232ed2a98a074b00daee172c3dfe31eef60

    SHA256

    1890c50fff6759c5a2339d891020cb26b6cc36bdab0ad75c701ec2e5e0dc5186

    SHA512

    6d134dba558cdf94e140d158af05f1e2851100dcb1b4fcb5a6789c5bc63cb2da8091870c09fcf5efb37dfd1bb9f1fdf79d2fb61894fc3b63ad283a1d1fef5ca6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d5346bdd292382e05ed01f72614e90d

    SHA1

    9f6d5f4578e7547b37df21f14601d8524a46fd73

    SHA256

    d0a457c8fd3ab8adda797ffcff78f9389808ad1de3e755502ce96dda312e592e

    SHA512

    47593dfa5d6123c8d31ebeca773eb46cb5f2400260678ecf99d0421e30240b3faa95cc423bd6bff9958a74932cf8beaf0c3a4a5019980fed9f0dbb1e8cf18d0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49cbc5332d3bbdf4c19c47c740e3bee5

    SHA1

    e15481b2b5a14523d6664ea3ebfb8224d01d0d43

    SHA256

    86af6a4dd05b5fd8dcb4c3fb3a21b710df592f0202bc42f4d96f8ad3c47eee4a

    SHA512

    6941fb76ef1a2b0665b3ce884e60c510aa8778dd598d7af66a5ca5a7dd064e63dcaa2e45139ee7e175e62715830861ed0cf672faef668ea9b6361bdade4017b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e9fc6548fe4c6a461687fc15cb69113

    SHA1

    0d826ced17affa2eb5b42981e81aa2d3ca0a9688

    SHA256

    221c68107db35a5fa7a611f3efbad85ff6cdcdb3aef01c4bab37640d99a0dd46

    SHA512

    afe69612aeafd7633a1daad97f94f1a0a1a1b8c52968b94ff1beda9ea9d8866b2885c2519757d8b15ebed08e33d73f20b718c6a124c92791999765d59e5045a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f642aa617641fa4c9c65d06a966a2a41

    SHA1

    623123ab4a9d20b0549ed5f97b705af5dd3759f6

    SHA256

    affbc4115586ce13026c6cf0bdd431b7b4069e2bbc2ca52e92cdf4ed8ce39a4a

    SHA512

    72154d1df8ab18ae7d1379f219717d78465bfeae81b38184ed940310a2bd659408f1c9a441ae42adf622bcfa868f2351a0dd5e43469801a5e31264416d054bf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    666e9191e043da24c56255e81e3ad0b0

    SHA1

    07d5cbd17db543b4867272138263b0940896f5bf

    SHA256

    fab1b506c32ca98e179cd2631487aeb8677ccbd8f5b90f2b72fdcba82bfdb0d4

    SHA512

    da88ee488e0b5cb0a68aba86e2155993f9fcc134bd453b12a2cfb3e55c39a1d8257a32a188f9a803d451ff1b826d247fc4345c1fde6fb2b26de3771d01f9f7d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85ec0753801621c9750e54c6f7bf1de1

    SHA1

    c39c21547510a7859429b0d50d9ba58426b03442

    SHA256

    3a4f355b437185df47ca0fc59b80e11cf3064dc48e99a8a9603c9723a88554b1

    SHA512

    d2086bc49663d6a38de98d984ad9438607b2d6033d7513cefd90f8b9480c6e129487de0882e4ad2b8b62b03d28c5e08baec1ff5429cfb09305b93a8fdc38d4a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1a225e31a119b131ae1415b89836c24

    SHA1

    8c9cc268f65b8962eaaab1e4918b62248a108a99

    SHA256

    645b064bc6184f37f62318d0cd572b05345869b1a739a0d6ec2f5d32954db349

    SHA512

    dedb2fb73a8b1b5d8b471ce54aefa9fc08224043557e4e4f6c63cbe221b150f764783c37d26eb55e15f261595bd40f46c527c1a70233e3a29b0b09791645144e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f19e289fc8e485c2f05b641d68f0071a

    SHA1

    d5063d508633d1624739ff24603a6ece2e123561

    SHA256

    4bce9ef863bda5b953a30669703113145f88132b8a8267b7801d0aa6df694a6e

    SHA512

    4e86a32a7d302d7c2c45a861355c08ba4380bea4b2debad05353035b78feeef4db0d8358587b3b552b1081c7de04a835bb93cb8d3cb7ec4132b89483426cf45a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    137b1fccbd6f15d93c249b142c26982e

    SHA1

    ebe1f0dbf1be7caf7566eccf2d3148f0cafe7969

    SHA256

    90816ad02685cfe4413e59d91737b6b4d7324d269750b10a1405a17536f20474

    SHA512

    352114c43699b27379e7f6e27d5c35f2e4195231da7075fa0471cb76f32d052b8c557c582942f041dfd9f9d228b1843e021753764e8e0fcfc89e165e808b1523

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13fdb26aef60a7f73b455c0e16508dc5

    SHA1

    bbac74f5c2d7832a131427998260e8464dc5ab12

    SHA256

    a2c33f28b225ec3cc78d17745964b384e5df0e1c58e8fce03ac654fe9ce4f609

    SHA512

    dbf8a6c322c7615d537fe5e978b5fdbd1faaa5f8cfac58545bd709f3b347c6d82aaf44ae4c7fb0b8c8eac903a2bfd0dcfc154f7d0880f8e479fb27bd036109dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b81d5d3bf0e8013278ce2db79d073566

    SHA1

    2cd94cf103a3cf709dc5a12abc013df70ba3484b

    SHA256

    d98adf3c0eb987b93ccc7202b148a6a9e541fbe5a9203ac7ac402de85951e387

    SHA512

    dad24bf3bafc03aeea0bfaff12de9f06a0ec1e32debcb6a109e374d1b64ed9337ee212f6c145b84bc363f83577399cf24835290358974572b9cec35fc02ac233

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab784D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar79C7.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06