Analysis

  • max time kernel
    134s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    06-01-2024 14:26

General

  • Target

    467515c8f3f89329185d6f8993b5db97.html

  • Size

    3.5MB

  • MD5

    467515c8f3f89329185d6f8993b5db97

  • SHA1

    f02846848864fb63b1c934e2c544294da10bf219

  • SHA256

    9eea6ceb5eb0a264e8d9eade66cfa172acc57d100987a0aa6ec053a0a1a94271

  • SHA512

    638ba83ff09754c5fb6a8932578ddd052734c66440302bf34a18c386bee2e80d899c17878d7f047241c58af984f8aff541996d6c27ebc8de89fb71e67d303694

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NyH:jvpjte4tT6sH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\467515c8f3f89329185d6f8993b5db97.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2184
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2184 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2160

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfe6f8a765e9f33b02738a9715c8d380

    SHA1

    4ea64a3615a9a223890ebd666bdb52e8c46dbc4c

    SHA256

    945ee31d30ef688e7fcab614751263ff548baf19b063ae6cefc33ef7d23c8d22

    SHA512

    2700122126271f88296ae116e2e5d1664ec41afd168f66c4e9abd5d296f083089b945349da53fbf5eaaebf2730d20b07ca3e8d3d29ea66654da594d41df38ecf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50486a6481dd1288c7707ac8d745bb3d

    SHA1

    a83795d77ccd71070c1f3b9a5ba556218a3ee001

    SHA256

    6b01f7ab1dd0e2eb1c8e95a7ae65b39a7239fdfa3eca9ee72df8d1a29c0e81ed

    SHA512

    aaea21e491d8d986e2001559661335e4e1de56b5141fe6c5181c6d3afc0808726d70591f045b390ed128b4557e46de736a31dd7a8f03a289724af50c41afee52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    358d420bd123ab09e26eb07ed65d2671

    SHA1

    0a77cd15784be3f3f8b991939683312e918179ad

    SHA256

    2c2b3b23b4ed43a997f5ba7fbdc75f5f14044b72534aed9c1d9e872cd82bd432

    SHA512

    def0ca5636d3662cab7036e655336aff13893b6a6b6b8f5c464c7e68e939cbf9985514fe07f151a75b580e3db35098881c822684579761bbe8e1fe81f45eba95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4791aee39aadd4f8547ff7afbdbd7cf9

    SHA1

    4a20a827c1558acbb6bc2d94d87d18f64bc17a0b

    SHA256

    4f71c989de4fe00817835d9ea1fa820e57e7bdcd4506d41a753ed7313e6a56a8

    SHA512

    55bf833d4651a648634371fd2825890be5a26d80ba6ab6499f83ad808d9b9407a34fec08b4fcf13df31222dbe7ec50c4bfac448f5f0e4514b255ff74495c09e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d22d0f278e733565b6d2aa6b24d28799

    SHA1

    ccea30503ba746baaacb954f259dd62d7205e565

    SHA256

    b5b36d6420bfebee42d13f5427099b4e840c6a63f8cb987991e6085a4aca7e1d

    SHA512

    6e9b5452285500ff64468f005f0cab733d4a24f142f32bb77b6c6736f71840d92237a6d32c3a3c97723c19b7e6de5af04f45289945d7e6f34da7a73cf1ded0ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51719ca5fe6a766019e2a3bcde4f736d

    SHA1

    e024c30e59896cc1c686d8ca96794516958ecc7f

    SHA256

    60119ac27ed08a7e153b79e1ee08685d2f8227735a045077ae462097eeb65142

    SHA512

    fabd19911ce6723777f374ce77c3f7a2a0b982c3eb633f933fa8dd48996f853ec76808ec1aed2db0dae4404cde1fc4f9c0e734a377db2fc6466da64c15b052a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb5f53c1eadb1ec71c2df0f2e1bcd403

    SHA1

    99951c66adf0e01afd83c2974c95f71587f574cc

    SHA256

    afeaaccbb58a2b1c7160e5562e03f06b8449eaf456b552255910ea704d3d4280

    SHA512

    002f9a1de88321ddc988bbbb9012344510e645b71bcd5b11082d6bf8be50e3bf44f7b1d76720cf35ad5c5ff9f22ce217f0d4b4e4661fc388a303f1757ba632db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c2d2269375e16c1a6062bf1a694baa6

    SHA1

    0688254b0193b0b2e98b3b3001553aac4dd15c8a

    SHA256

    1077c0318dbbbe7ce96be69d39438e33b63d1c0178fc1e70d84f057c9019e0ab

    SHA512

    7cd66f13012e5b07f1b01926a61d975789f2f91bb3206f197f05acdafb8b57b6340675893aa66b289fc94fa67f10472cf184b11e309c5326ae6853e29f382a20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a0f60ab5c0aecc632121096fee615ab

    SHA1

    9df8acbfc3e8eb992112699e594747fbbd27c079

    SHA256

    84d5de068ee517b014353df0b8dced41d17553fa88301ab51989c4bff7f746d0

    SHA512

    2940cd86c61f776dff2cf00c4d2eaf059bd89cc8fea9b8e5b0f1a7d0c91bfa413974ceff55830da322253389eb1766c174076c07470697da0b2bf5316daf4715

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78293416afe82f8e452404bb09e3b4c7

    SHA1

    e076e324d0e2cc06d534c10e42e3e7e0ab5810c1

    SHA256

    34223446722781b4822e7103e41f51a00889e132a5d2b5ff5144144821c0a024

    SHA512

    eaa2e2d297d74e9be212a37ac061c9df3d788529acf798902949af5290bd90ff3de7e8155fc42c140f0f4e51f03f7c1b88de782d3b7a429311d2ebf75ecd9f83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    761bf606d38b346b19a498361b46a728

    SHA1

    727e8c3ff64bd745d49e9f003e3947edc16a265f

    SHA256

    a76b3f652076ce6f8d57596d0c95476c3f590dfac684a4f5a7a383b52f47f1a6

    SHA512

    3fc3932763b1837c04c1afcb14dc2f3d3d03070c31a8a34c816eed5905dfe97418773bc3bd4cecae44d3a9ed4470f9ef7b259815dea8f29f6a1a26f76edd0803

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5426506dc721002fff6be19811555ee

    SHA1

    c48c7694c03ea667201fbcb8e0ef55ac23a7efa6

    SHA256

    60647ee23013badf3be2e3a27a430037810e2242ce747f47a62123a69ca7e01e

    SHA512

    1c6f7ad7a174a2d3a18c5e06e11907de167c137e82b7ad6ad7fc61dda0f8245783a974fb69b143ac56b7097e4740ac09e215f2f91f0b6a3af27f611530d3f55b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14c5e357f88d8c2ced0baa98e26bc663

    SHA1

    d509ef1206710eb93c82d09d8ccb8bb942e9a4cb

    SHA256

    edbe1e9d7568222ada68601795f7df251579ed994fd6ee96954df5f723e5034b

    SHA512

    db47d9ac8790057eff62a7d8dd620d609aa72e97fa4be12c7b13c3d820231c618c5e897df072fba264194af441958736a6ca3cf8d34d158992a77c556511fd8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9a06e851a9a866fffd410eda74b14ac

    SHA1

    45f969af9399176c5dd7fd701540de33fabff2e0

    SHA256

    2b389801d0cd34e80466a2bbae32048105afef49b13703be87eba1d551ffe025

    SHA512

    f21b7fe5bf73cd0166bde8da90cf767782c09bc1f55c5f403a358c749b6b931ff8a2ae8630a53647c602ef2c01ee301e7878c22d995a945a7cac0234224dbf6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77bdd97481d54aa18092201260c747ef

    SHA1

    dcf9f8adc30756fd34623ea99458478124500a68

    SHA256

    624798cac047ff9472e60a37ce258b5733771180a76c31621a032bf72a5bdcfd

    SHA512

    5d34a6de58a7ba5cf24efd246ec794765a78f330c6d41aa9c6d00e091885dfad8626301bcbd0c20deb218770bf5e5e4dbd491552e702f4a42072f9697496372c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d762515031bd8628d66281f6bf72c3e

    SHA1

    95adc82c8c2009bef9ccee0cff625aaa740f64b7

    SHA256

    79eac9fd558796b15fe49fb8a267a43bac52baac8455de2eb2af94deb97a607b

    SHA512

    ba6c49db7f7719510eb12e6a00aac7057fe4c6b44cb9fcd3ee34f2fff9e376b6edd339f4ab3f7f29a2084ec8495305bcdd48f13942a55f8d23e708d628ef019b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    748f9b23c29dab7428ee67a71f59ef02

    SHA1

    574083c1394612805a7b5117250293ccdc1c2781

    SHA256

    627bc4ba6d05b4833afffc3867cd4e3da3d91cf3468b4f97dac980191d607fa0

    SHA512

    aa96de3d44d37a6f45dd01586e8331815fd63475695716e6eec7c4d7bcaa37fdd1cea00b2b815c5e7d2ab4e1ddcfa80eca79bc788820e95d6f01a09ab8ccb409

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d372e92b11aa293bad2c9ca15fde810

    SHA1

    74871572307362981e611b2b3aa79edc1ea85b72

    SHA256

    b6ab9a1973a238927a5777235a69ca1a22dc8fa03c518c720930871b41849b4b

    SHA512

    bd958973da3c76450b2dafd517dde176e013af2e3895bd713c4a9d4880da2fe3afad75974eda6fce6f0974ed623e8d7c9b98aa51b07ae1e5abfb14d2754c913a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63567b9ea1eee58a39c40a8bb1dc4c66

    SHA1

    1ac784821d48eb4ea35d0eb082ef33c9301ce485

    SHA256

    7f3730e9441bb9b0ab5d3996f6694649e903f6aa48b73393d16b8426b813059a

    SHA512

    bf89e6237d1b7e89013ff0e548b74a711637b2403ddfe7b6cffbca2c80ebbd09242ea414879c7fbb9b6cb7eddb38b591d0a7ae0c0f4928180cf1ed4125ed5f02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71dfac52e1fe04b10e635284a5d743ee

    SHA1

    772099ffb9a16142cbc45baaf81294e8abfc4284

    SHA256

    33b1d437bd90d37e1be4837824559abd1b44b999176e5bc36e59f46d6ae3f733

    SHA512

    133b8045f5b7e93247da0433191a32fa6c88280a3b60b4e457d2bdeeabb0cd61e27977c6aa8fbdac3c0cd19f8539f7cd78db694f91011b6e6ee11b4f77387fae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01e8087637a1ff4e27d9c4737e8947d4

    SHA1

    fd7012539cc4c2f09f9a2f2e751a673ee6060a78

    SHA256

    8d3a3baa3cecba14e1feb0026b716e1013d73d7e2403555ffe5e6a6a9520d190

    SHA512

    a7700bfe03c5fd85f4aeb6a97841fa3186bcb6986b29962e589c8dd7308a1fb22ce018911287923a620eed7d1cbaadd2389b8c784a12d54ba34f8b4c66dd0d1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a7462df6c35acb707a6de2edf2f26f0

    SHA1

    0c460ee91fff5fd859b4ee7585b5336501222454

    SHA256

    456ba1498992ccdd6aedccca07893a1c25a1f1013f3736bff0fcaaf716e5e5c4

    SHA512

    8336b843375a4ba8afd942d05abf3da752608ed89bdcea597d0f298dfd5c3dddaa37970a871ca7593f001b5915de3ef87189739ad899371b0944483930832b12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26cc39f752f993841d81eebd9abb8e7e

    SHA1

    f49dfb59f33872f7da2fa004dcfe9698005885b8

    SHA256

    3bd83bec13c740061f14983ebc7940958f53d3d0635940062dbf8ff77a20c0b0

    SHA512

    97cd04dd300125b28cdeac5af87780ec939dbd154dad9009a142baa0f5a5948469413846999bca15340c7632ce3fbeef62f2ebfd24343143ccadb09ecf9bba6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1b8a34d769978f0893bead51e01d24d

    SHA1

    0cf2afebce45eb9a87ae4c79ba0acbf5124ec11f

    SHA256

    5ee73296d8e0c73e049bf2659c15ef4e741cb391715617538b4465b5b6ee4b7b

    SHA512

    0bd34ce6fbbf1bb77cd2e49ba047537beb190fb1de8bf590555481166c41ac0e76126e8042a82218b0b6186d8931b9908c33fceadd9d5d466fab98254fa78811

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LSNXCBKV\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M61DDFBK\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab7013.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar712F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06