Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2024, 08:42

General

  • Target

    45c933f6ab795b1e1d03b3dca6ec449e.html

  • Size

    41KB

  • MD5

    45c933f6ab795b1e1d03b3dca6ec449e

  • SHA1

    9862ec29b6220b1a776e22cdb20b5b5322f70fb1

  • SHA256

    baa52bed95fdfd9cb0edb800a672b96bdaa8c4b9119eae378d366eb0ce8e1b68

  • SHA512

    7ce63bf1959660ab13dce0d1f93b97fa94aa7840ac848ea4cb61ce5801f3f3ab832420cb3fd2dd6e4853d664465bb8ebee9150bf788f7bea5054775f26f1a675

  • SSDEEP

    768:bayHHvPWl57jHj+HUyIGohL/OiCoMuqldzf:b3HH2l57jD+HUyIGQmiCZuqlt

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\45c933f6ab795b1e1d03b3dca6ec449e.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2148
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2148 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2208

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

          Filesize

          1KB

          MD5

          d96a363cd037a2291a61a6dbc21fd087

          SHA1

          7cf499ceb50968a7d074de6f8cc3a8c12cbe819e

          SHA256

          89be3ff39366e74acf046fe58647b725218a3c25c9c3ed60bea93370955d8bff

          SHA512

          faf1d76c471e976aeaec14746dddb34bf0c94ecfb5eb4a3f44c4eba64f5939c4da2417c760a92250b08bae7e6373810c504f6e6e07b1e104f2e7b3f4cb942d59

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\265C0DEB29181DD1891051371C5F863A_1AE11409F57BC5D68541053A9AA94231

          Filesize

          471B

          MD5

          67b86e635c2feec9dd145a3a98d3aaf6

          SHA1

          8ba117bb2273df8e96099ae7e0ce181aae027ac9

          SHA256

          5af11ba1b706a17182ea2ce45dca4ced558478186000cd558d0c9e1f74d1f35b

          SHA512

          d781a76a504113058ec9277160b6326f266410f9f131bd0d5e2a4c78a30b9915f43c8cd35a6df044d53bb42f3d0699d4a94cc8e5f9968fc3ae9871270b071cb9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

          Filesize

          724B

          MD5

          ac89a852c2aaa3d389b2d2dd312ad367

          SHA1

          8f421dd6493c61dbda6b839e2debb7b50a20c930

          SHA256

          0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

          SHA512

          c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

          Filesize

          410B

          MD5

          3f7dcb1c6ad8dc45493baba759c8702c

          SHA1

          113399e366c7de890a35854f050a9d55a8de71c7

          SHA256

          904895b9100168d0fd7fe1f70d46262392aa1729aab1afd0dd4e13d7287ae8f4

          SHA512

          f1e04bf57d013e1f689f2a663b37a6d571eeea88c0e3e543770739dc396457c39450617e730c2805d7af37e3616ea8472d96059c52b5919c9960bee51b7e539f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\265C0DEB29181DD1891051371C5F863A_1AE11409F57BC5D68541053A9AA94231

          Filesize

          406B

          MD5

          aea7431557ec71d6945d71a13eec57a8

          SHA1

          ca5e54c581606d3ff847801afbc3642d07118225

          SHA256

          15eb7848b942ce569e50a1f4d777819b0cb63e1f46cf0b9f81400d222b3c56af

          SHA512

          8292749598467cdd13a5b154f0140a20af9b7f72cc2a5bdc7c449514173a9789c09bc0d972f8216174cd39fde456a1528956302783e95b627232287175035a26

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ea6bf4adb1ad55a2e222b98c24b20d23

          SHA1

          f35fce7338e9d2a6d4e27803c7c0a16c938686b0

          SHA256

          d2c937cc91438fc0a1c8ecc031b9fb8e3a0efa5884144c7b38fbb62b84ac2015

          SHA512

          3c877870e6f8a913d8f054b58f884a924a3e77480a0cea8b3247001975283d6fcd100fbfef40a038cdb86d31e2ed8774f50944e09928c02f7a8f692487d34d29

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          be49f4c57c638f94e7d14d3879e08c21

          SHA1

          6b321fdd7915cdd98038bc2634840264c94cfffd

          SHA256

          77f4d5e4e8e6e327f6e326982e5b99014865f02893205b8796cd497b4be5e3ef

          SHA512

          8c1c29ad39bb515c5d000bb698e0d7ef73c7bed8f64f269c419ca03fba27c2717dc0ee00165cbf83817018de74576e0b517ca65fc29f273e394e9433c7c58e31

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2b514ed9f50dd6692f2e9c355117e0a6

          SHA1

          2eec1a2871ca58785a0fc9280440cb1910d4b4a2

          SHA256

          d145d645df399d104aa79592bad32094f32b48c51e8997ef68756a1afed821fd

          SHA512

          d6a42076049043541641b4a36137ee2d3bc1d7bb28d892b1e463de306b34f02e0e78b922db551b8b18bdbc2d9c5c315a6827e272ec9a68d4c5fadbdd11f2c3f9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          54ef756c0e7ae074a1500cd4899f5c78

          SHA1

          3f822ae463e5e68a110f7e0b7701a694f84ee7ca

          SHA256

          caf964539625f083a8d2d970edfb80ce67926fae9f93f2d9db3a7a86d4a4fff4

          SHA512

          d7c0a260371587e9b34edaf324a0ab840b50aff93437aed3d1f0137e95e01c95f24cd29b3ca0231241a9476e8d6ac1f21a35b713b89d028c0c34e2176ba8fd41

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          157c62b335799795985e904ed7b87e9d

          SHA1

          c4940a3ad4b90b55291215f95b7206ae5c083bd9

          SHA256

          ced6842b6bacb0a0d9503b8cd739662d2bbe518ca5dbc963a8c48b9b7070814b

          SHA512

          9c3f94fa925bdaa811f919b5790a1735fd2fb837bf5c7155ec7ac12346bd3d1d96529ae440b986876029ba27412506e0c664a337a524d15388ac32e5b6318f26

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          14f0d78e607326e08528be16493b5eaa

          SHA1

          39a98c09cf66f33cd93808b2b4a6361160fd0489

          SHA256

          de775d7466c1fa92b6f3921a4519c31867d2d706617e9a42a893859638ab7de1

          SHA512

          830ca2c5901b37150c1f17b8fbc3b4d5cda8c1320c3c8031c60e4c8126fc0d8fbde5a5238e0124740544cd6448d0f323883420b671ef90fad197817407be64d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2ab37c44506c7a7ce05a06c503077562

          SHA1

          4417fc8dd5307d69409e49acb8e49a1dd0e0f329

          SHA256

          8f66bb1a327f4eb49642e7a51e28fef953d03e06bb70199769583aaeefe013ca

          SHA512

          b50adc831f590081e683d2ebabe64b65c5e65fdeaa7b7befea8841ae2e1a75f751b24d064028087492f10400001bd7393e240cdc227d8a722a5c20612727972c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          799dfb4c24ea5f2780996801bf80a26c

          SHA1

          20b74ee8a3ec08ce830f6dabc9d6ed2b9413a14a

          SHA256

          a8905f6778be9958285123028cdad57c2f676c9e6fb98be79cb4a3db62cef0c1

          SHA512

          086edaf433a3b7870ac2d5654d08e354743821ea40ac46b389a644b2398b8ec5367038f5bbac44a6e3ac7429911f5afec1c0a99b4e49e99c715f4e8214b3c579

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ffc57b721deba3252cdf660ac759a718

          SHA1

          bb8ce3b61455d3a30cad53d9046e35dd5546fd10

          SHA256

          14140ca6e9587d9d7a04f8b96483dfa67021cdfd385fca4cd0079cdee57cd439

          SHA512

          b8dc0ba6c4aa623a7b8018cd14ec3067eda881687d86ea5e9b998b63079c3992c559b86e912f11ade3e781f1014ac47369c0b090a94cc36c39fbee54398d8013

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          390da2655188c307d35d0545293b5fd4

          SHA1

          6f8e91c52ff9bbab0b5ee7c40e6fdfcf04cbbf64

          SHA256

          909d8226c7b8a7572a57dd4c0c4aea4efcbbb9ac13a8b2ff4366305039328718

          SHA512

          3e42f465f73e0b404b772630501f744b164c7b0bd806085a59c53655e276fd87ee4b19ce9e3274ade18b99c46c01da263438a3636158ca3260c2123415d4594d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5aa7440563c893e2c7fdb415ae9e57d1

          SHA1

          b836c23e284a12bca4ef530a05e54e39988097b1

          SHA256

          9b2aab87bb634f8a9694052f8753f1b070f19e30f0e3e6b0914331c35ba64a13

          SHA512

          00c521ef48991db9fe570a9cfdccfd0d36eb22d6b065004b3a868f65a094975d6da9de0e1121a7cf91598499f372b3ee72aa49c0da6e5fa5da0bda1337014073

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          31038f863cd9fde8a9f663052f68a451

          SHA1

          e418d0be576072f8fe81928a8ca5408b7294f3a2

          SHA256

          fd9fc111393ce5f7765158674144bb118c345011b3b71ac869ec293ee5098c04

          SHA512

          5be755a2be76b32f669aa9011d01e017c5bc78029d7c5779ade7b394bfbe4feb313eeb3db5199375e677d0a7ff456479bf37ef57104918dd97f8760758302480

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2307385e870fd8e9c2ccad005d97018d

          SHA1

          240ee44e3c16178331621f04b1a018fc10fd30f6

          SHA256

          ee80411f9a95a43bcd48507f81107ae2e06f6522e478ed778c14a352c97d8e59

          SHA512

          71490d4b756313a6eeab1270801ab89ce9cdd3b5d81030c6242e3d42079ad62fc4f309d1174a0f4cbc1131d6e537608b6766012a091bd92fed5323dca327aea4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          64cf8179ecbff9ec974bcceb521f602f

          SHA1

          1a4348f5c853abd3413642c07b3b78715010b250

          SHA256

          b7ad0c6909e2019ee13bd5ae2eddf40a6c0df547bf56db673b0ec542944a0d46

          SHA512

          37f77921d117ac1e77422b3e0155502bcad46f59c92e4853e67e9dac28c54a88072516d708ce6c24454ae4dd360cb116b9307a53bc43be9454b3475d5c7ea331

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E3F2LH07\cb=gapi[1].js

          Filesize

          133KB

          MD5

          288c5ba5b7001fe841c32f690f62cc93

          SHA1

          29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

          SHA256

          c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

          SHA512

          e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E3F2LH07\platform_gapi.iframes.style.common[1].js

          Filesize

          56KB

          MD5

          f6140cf2e81a9d5b9bc96970fe1946f6

          SHA1

          e18cb20a08d0c13d44b72e36e9560aec2187abce

          SHA256

          68cc8a99c8ed5cc0eb3aa2146fd34bee0051bfd98faa3c03b83c78b4a12a8bd5

          SHA512

          1f61bf7228ae9fc1b36249223f4ca0675da05beaa6c00b28b7fff500e0527ee237d139eaf6793ece67f8730dfff0207bf945a848795aab7c57301433449a8acb

        • C:\Users\Admin\AppData\Local\Temp\Cab69EC.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar7342.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06