Analysis

  • max time kernel
    145s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 14:41

General

  • Target

    494157e49e7f86def36a1a429ea634f6.html

  • Size

    35KB

  • MD5

    494157e49e7f86def36a1a429ea634f6

  • SHA1

    62d3d471563e31ea4851bd134a3bc005e5a004f7

  • SHA256

    0b02127ffda5332f7d9c41cfed1c3d15ba09d4940d33098f9b1339b4a95c32da

  • SHA512

    cc151b2d5fc591f34b424715f0179ad52ee9c1ee31f0da610fb65857a8b1ea46631c9a024d3f0a784bbc1f3ffd600a2893e7da13d864e5895ed13a7c1abe78a5

  • SSDEEP

    768:SCZn/7ZBbk6jnGmZU94eKBL9IQvm4jU86ouf95rUEFXJ+6pASkWfvokpWCcI+DvY:SCN7znG2a1Kepr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\494157e49e7f86def36a1a429ea634f6.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2964
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2964 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7e788e76819e7f3f2b56f0bdedd99ff

    SHA1

    d7beb401ceb12b2a5227d1b3102562d957a32d4c

    SHA256

    d060e2868b272b75797fddc03e593c0051057b7247914ccbd6d78a600bf791c3

    SHA512

    649675723b2f2811448765a3d229b244e0b6c50df5482a95f48574cf7af77247fa073be5c0c325472fa048840af9ffef845fef8a2a95da47fcdcb560a631ab33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5011f0a784429f43efbbf38f948d386e

    SHA1

    add2fc7347181f95ca6dbeb36b27daf26efc8ac5

    SHA256

    a233dfc415f8e15f68d7e60e84093aa4401b24d2fd3991dc4d10b0227448097a

    SHA512

    3f04268503b75211c767f9154d9960cf32a8af4403e4411d37bc82a7a460da7de5bd0218b884a25a9b9e673d79266c0b5729ba7f28aa9473c30506f337b57e75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4db93eae9b7b2b4c9d7b67131123a8ef

    SHA1

    320059273e3e41534afa196f8e67fa2c30abbe52

    SHA256

    e7107ff25b2f93770e2b7308a204cbae564e9cc3918c317bba44e4d0ae3e4b06

    SHA512

    afde72d71175633629f7358eb4d95aea0fc7cbb2a305d850f37e5c1dc48da3bb4894b96b5681330830108c7461ff91a5b4784b16e8d2f4c6b97203286d9a6f87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c3dd7e7a785bd6c8196a0c8ba1bc503

    SHA1

    43b319ce550c6ccdd1a4e7c66623a0c1f5a00a3c

    SHA256

    18b7a292d60cd1a8af43ca030e4cf398e8198f71bb9f24284e83254580014659

    SHA512

    e251a67658c5b7df428533397fb36af35d6aaa42c23673042088df9e60d8d30a50dcfb6eacc5f7a19fc0602981697ebe56687b609377b4681465683c6194ecf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed291571cadb942b0fc19b00dfcdb757

    SHA1

    ffab946dabc58609f49e140148ad8994ba26f5f3

    SHA256

    3fba1e544153c3e08a4794f3405f3a04aced0317212df210b9aea6226cd82eda

    SHA512

    4b6d9e01f862b2108e9fd7aedccb222cc597e15c34cb775eb4912b233993b6dc15c5d0b745c5855438c0f7645dae09e0f2d093dff2520df886ee80cafd68cfca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c41a7519f0ee9a1f764ead03c7c5f382

    SHA1

    5a95061c47713f4352b14dfd83f61ee17a46d8eb

    SHA256

    98db33101e496ccfb5b3bb3eb841c28017a88cc2570fb26d30c51803126b7763

    SHA512

    da43e675aad5835d7d66944495eb8e52e52c18968a06e59cf1e9c50d14fced5152c9576667e4549a7cd9339b3fe834e19f73e9892dafdb7a3d3789dbeac8e4b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d5e7c2a6f535698f0e6fb1722b242b4

    SHA1

    56db6e6a34025204fb58f50855970355e43d383e

    SHA256

    51dc13058bd948760753c55ae38a82aefc48b4cca077a699fbb7cc29f18a571e

    SHA512

    4f88e99164aeb36d0999ad839cd908b1371613f6cca2b54697a171ea52ce4d24c4f53e29cb998a56a5015fa71187a7f900c7967eeb5be01877fc3e2914332924

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5116f2e905e891ae0a42afccabb2775b

    SHA1

    eb80635e29c52aa4ab93e0c2975943ddf5112fee

    SHA256

    8b301193fc4926372af3d9d69885a6747f394689ed535b6c0ee2370654b3c12a

    SHA512

    59a727d1a8e1e450d8d1b53da364ac40d460fcea3ff1a4e2cc189ee431a0abcdf71b5ca9a1f566eb952d3647410b1c9a90eb788e89c09a88f5cc5a3de086dba0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9995d0d0b216c6e200dddc6d3a91e84d

    SHA1

    da4605bd5935c0b6311091c4d824eecc4dd82316

    SHA256

    8cd488541e8de77028fedb772570b0d4966c5786f7968885da0444b3cfe4d36a

    SHA512

    bb281a0abb75f3de0bdab1de254fe8ebe618510b17b392a7c7facd428a4878bd2f9ce6c6213de09fcea0f7183ab13fa04fa6f6532d21b38211d4831d2dec1128

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0bcbc0484cdcee9cf2adc0ba4da0616b

    SHA1

    f76674253b1bd51fe19fdb55ffccc0b75f794522

    SHA256

    bc5bd071fe7718b2228e9613dd48a7ea822d2eb056dcc1e1507360cd78cdf2e1

    SHA512

    cd42367161f6e06579b11ef0771f4b13431e2aa485b7dd54628dda0665bc4bf4ff3e4b3d4c1ca6cfdf59817b1bc778af79c7931c99f6871a1089b6436032c1d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cf572bb7c253243c471128290349ace

    SHA1

    9ee499bc26726a31fb49415f4a818686b7e5a9b4

    SHA256

    60e2ec44e4e7baac12f054ade0d989d873f0dbeccf0347fd682fabc7fee7887d

    SHA512

    1675351f5a950f27848ff7a8d9970850117a924a79558ce743ad9fdab514a01eef185905d97d954b535c40efb765b4ef6c7263eb1b76f374d69f1fb5cac8b62a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7ff456a6001297d25775954ba500f28

    SHA1

    42cb26740f77b4a4c48845a5ac5d13348d500fe7

    SHA256

    2ad8d837d040176a9e1cd1e56b133daee755fd6b24231ef50afa288900f5bebc

    SHA512

    b1bd13916619d60ce4b6d24320c29a87b5a1df10b02e82ce94db69810b2e3253333c8d62f3b94fc43ab1956ac07314839a0def4a8e3d3796da9eabfa0c330e66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8ddff7ae586ce8bf117ed6554e55ef5

    SHA1

    c3190c07bb67c7a0dac9da1fa9a08033c000b08c

    SHA256

    7cd47fecb8d100c889a62198461faede0c4905c81e5d3614976d8b001ffbb443

    SHA512

    ad5ec6170d3ea64f84ab47bdf9fc5dd84cac146e0fea4839af917eec03459012d98db0e79d0f2a5d516f8336dfdf2d955701ba20e2e9b9e2bd0ac3d41ff0c12f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5d080821458a4ca8376ddbe03bc330b

    SHA1

    49f78b803ed7040fc142bd899376e43ee6104516

    SHA256

    f3a7733f92183e266b82c199e282530e46d03800e15272c474091bd64e8cf057

    SHA512

    87a2a3afa28af79fcef49deec9a4134de5eb6d9f28200492926815a6d5625e44f51bcd5a3b6f1d4173a853d298ff86f168285403e4a647fa491a7054789bc055

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    091c0a9ae80dbbddbc9a0623818fd1a3

    SHA1

    4473eca153d9437757a4c88e745eca4e434681c5

    SHA256

    4b271f16c9c5fdd9da8fa3d39a3965baf509cac21153b4deac750784b192132b

    SHA512

    50a0616c0951ae7fb6d4843e0a28984f26a04561f0640bd90eeecd7b2ec24583643524588c407a709aa0b0e90d35dd3675444e16101743792c216f3f23094300

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b6cf621c7d470eac54c8ac014cde89f

    SHA1

    84007a78750463b3ebcd947a9a3d206691866c9f

    SHA256

    d47ef7882390ada2a58f909087041b47257667affe4b27c47710cab55f14bb63

    SHA512

    f96b33e21e03f6ff53a5e8d95e15461ccdb7f49199934c9dcefeea853812da6e70d00f69ae1b39fdbe5663c4f0d1f3e88244deb57216e12bbbc3f85221a908ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c455194c6779c4419571448f020515bc

    SHA1

    904f9a039b7030c39a6e27340b0ebe5e79787283

    SHA256

    47a8a99909abaf94e2298d78ffa6fb8a7de0b1385a8e691e49372bd3b81b5e46

    SHA512

    0e0d4796dce7eb9fe0200da2ab8d24986a07fb0ffe981b1d8926a988128ce83c9879d62fb95b72aa40052001522c04c19a3a9fda6f2f47234bec5fd075cdab76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67484651ca0f3b0d329fe3ab5422ddae

    SHA1

    74e48ddccb713bc21a51b24f08e5a0321463b0df

    SHA256

    f0566aa02c9edbad767c592b7231240f5c903ef22596d88e56ad951c6780f498

    SHA512

    85e5c74bad6161f1a692db955f1699d0b5c3e13b06838307823922a5d78989bc40558244e51c7ba445fd41bf06066b93df771f10dea3872ce6b45ce4ab687518

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    370a1e7b489bdb184c7728ab69a9ee74

    SHA1

    da52851f2d943639bc9041c4ced6b5efe6e85a55

    SHA256

    a39fbde559e06d8f2f450f7497f15ea7fc4006ef6ff80e7311aaab4b13e99b71

    SHA512

    b4277493f18154b19160ee9a3e650a056b09a22503aae6f485a152e80c77eeb5587b296715cbe606472f916a14bfaf85fc0b08ec1caa0af2b9801a7ad1659c0e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\zmejka%20instr3s[1].htm

    Filesize

    184B

    MD5

    ce1a246981cd1f6be84e53fb3b6cdcea

    SHA1

    1015019d9970df1a146cb182bb6c4153754550f7

    SHA256

    092d5e8fbc98868f8eaad1a535fd4f1481ec50b5d8c315a77d59cea9eb8df6c3

    SHA512

    8a97558ea903b142ea09d7a2e0f17480cbb215d9144907cbb1d7802940a275ef992678547b75dea1d9b6d08b0a3488e90c70453938eab39400144a2791852bc0

  • C:\Users\Admin\AppData\Local\Temp\CabE1B9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarE2D4.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06