Analysis

  • max time kernel
    141s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 17:25

General

  • Target

    499b17ef7ab6c5027479ec317dfa3525.html

  • Size

    3.5MB

  • MD5

    499b17ef7ab6c5027479ec317dfa3525

  • SHA1

    dd6f32d232b752b4e6b2fb612ddc883085353ba3

  • SHA256

    425ec8e75060c51cb744f590b6704285f737ed700da2e2bdde6b51009931df60

  • SHA512

    4427d01e8457492e3d9053a4074e41cac3aa347e1fcfb7ffacd35455efe09ddefa827a8b288adfbf7028cd509c0ab60f92b96878f1153c4bf7f033badfe1be6b

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nfx:ovpjte4tT6Nx

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\499b17ef7ab6c5027479ec317dfa3525.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1944
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1944 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2088

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da9ebfac7e3faffeafa9a4d41a353cd0

    SHA1

    ee9c6df3490e0d2bd0a15130e6f7489a8629ec5e

    SHA256

    aedbfcfe8bc44fa15d6a9ff0c16423eda82c6a0e3e2dbc1d496fca16d21afe3a

    SHA512

    3188d7873d5989e83b4e61768a2d6f2692f971b6aa727b33d1f0b7bdd4dfef0d34684f9f4e0af04df7cde72984a40eeae3014e580942cd051edbe0e31a293a8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d8384f246985695193568de1cc9fdf1

    SHA1

    651cd19265f1ad4d6b035a0d4d4bce313d30ba08

    SHA256

    2ef2a6e80e51d9559e6849a8efb2b13b0f59cd10370b335164d1ded9c15e7929

    SHA512

    78f831574af8c59292f74f6565b37c40fbb7a66585e7392b357cef40e4366743ec260483b192dc595297e343a611dc526411fba1599a68b7f96d7e96cfb21c20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcba35031a354e8679bb5805a1ce8266

    SHA1

    2c00e551b3b8b7d11d260765a8db8c36201bfa28

    SHA256

    91dd366df97051b47fe549995a1a9db6412f88066a89d4e40fa4de05bd7e45ad

    SHA512

    9f1036d0831595faeaa4f538873ef4fdcfd6a8ecee081d863138db516caa5c681b58fb969943f6dac11aa8ab8c8eb8b258d6b31d831bfed872a3bf8ee4fff8f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9c44e22dbc3e5f2ddca878f488a017c

    SHA1

    5679067d5b0092a88dc6dde03ee9c5d77de3f367

    SHA256

    8c01074722ab00cec94dc6b6c72a14b44e4fdd15d1aec5b8497dc061f6e6bcdd

    SHA512

    822298835ed780278874d69edd2f1693423cc645e464457a4608a134a4023ee0cf9f7dc5a437e05d4010c5e3133e0affd12bda0e425538d1abbf842ea778b24c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5b597349534a819ba2cc6ceeecbdaa2

    SHA1

    c166956e98f61e832d8e6268887284268467775a

    SHA256

    334bf979ca0275e7a32841bb2588fc66d1fab4ce9f02b3b17e675f02918cea3d

    SHA512

    637786204de02a44a615bfbf12258a3c4d5d7419535bdb52314cc63a51793b0278a33e85bc894783890fbe5e21506fc1921e9dfc7e8c93e6eaf2f0c99ec8e534

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    972b98d0f7258c94a31058b36b0abae5

    SHA1

    73f39702a6ee4814c177ed20328005e4d1041fa9

    SHA256

    8fae076d963c31dfbc65beca03a4dc975c5f42166ae98525d27d083b488575ae

    SHA512

    820f414e63567eced3381b1409a2dea9f80d4d887af9a8b18699ace1238d5458a3121c25d8455d414771219a3474a384b3656eb79c8a8efe7f94be25969a9b88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93acc62fd25490170eee22f9f5f50fb4

    SHA1

    2d70ec4fe1687fdabc9084f34459baf99b43ad2f

    SHA256

    ee0587e54743c715c053eb4613049525d7bbcffca551271038c3811bc220bd70

    SHA512

    d28ef15874cea881add8436ebbc4adc7e882695b3cf6014db2558112019927e79b7d904ff23656e295acbe1b4e9b9affb70bf536864cf5485048fd81007a1c51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54be41937fb7e1effdc1f3dd6ce6c748

    SHA1

    ff4fe2f3d85399b4d5618b5fddeea64a64b51534

    SHA256

    ed8bafd543581beba25e745f5edd15512ef1d18b469d1d28cf2241dfe9df2c29

    SHA512

    01c471a96d4390beb78fba1673b4de0091e2350d88a70bab3133835568bb66ccc9c398ab18fd7a04d229fcd4ed5d4885506dd589ea63dcb46e70838683a36f0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d92be2db10ff6171ff719fae8e0d20c5

    SHA1

    79eb026018d27c4d9a3303761cc6c3304e1867bb

    SHA256

    d755c5b280720902e8e54a00afc2e0091e41bcff8c591d15ef03f2f9b8481705

    SHA512

    b50655b37171e91f491acb0e3186d767395d076950867f20a6959d6e549d5774b6d73f5336dabb770c59922f81dbe89082ad472d6f859daaccd6530b30ca4394

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43341de6400a74f621f22f674842073c

    SHA1

    37ae8cf91e47c598546e7a9dafa3f0e14a0bf020

    SHA256

    65cca43b21f083723979a0b38b1cd3f6347831d70bc323b2b4e06d97a549d036

    SHA512

    38448181f2fe213bb941a1f05d1342623fd9ce2c3b4fe2862bcfda2bc96d2352b3eed2a5382c4aa5cd810af7c71f0dc7442b822c06443168eaaf16bf654e9530

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e3a40d927918328cbb41dfc665289aa

    SHA1

    c9b7f0cf7233f123dbf4f9ba936a9fd97d64360c

    SHA256

    f59b07e86ed0685a5287029a5740627947017f6fa4eaeb8c63b8521a7cf81377

    SHA512

    9e95096c820e9cd1ddfea156d6f57709a3e3fca39852afbf6ef79ca6387a20596cf3f3ce3bdfa728b3d2da8ccff63e949b6779d9671aaa9a0424d32e5fbac078

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38762250fd4b4b9a41a4d54e0e705e44

    SHA1

    713ed04e7bddfbe71b76ced042e408e5303f31d6

    SHA256

    239654c30820e67baece335cdc3de8b979dd3d32c180c13cf8e8aeb1a4a2ef67

    SHA512

    5d1ce8fc2c05786492059b26a43fde45342162c23f259a7df837e322f40e95388acbdb4dff19a68591b12f1f5e9d24bb1fe94849ed08c7ca56549e3f9739259b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55d8e3d3d20081ced11b10fa7a51d2d8

    SHA1

    faedc94336c52f113b9f7f2f0558ef049986114e

    SHA256

    5549deffe58ed88316c084d09b69cf64504512b4abf23b65d419cd95415026a0

    SHA512

    41195fb91e70788eaae8232965e54e550eeb1ee7176363f13c7e37121a13269aab1d7b3834a9972fefc5a3f0465fd1904076b9854e58014d2835aec9fa3eab3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0d452592d790b1fe80ae2d0eed8beda

    SHA1

    9c62551837069966cc18b2a4d168b4970e5a1a9b

    SHA256

    8dcf4267ff694c40b5173e9d070d63daedb2219bf90af1b946300e9d1b872f9a

    SHA512

    452c67dc122d797275d023dd41bc47024495d88e888e518155bbd14e32e84992d58040904d8ef2ebd76c11430154e3eb4952cb0f82ce4d8edea2882d507ae85d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4ebc918e9994d1a33b7488c0732eec0

    SHA1

    1f0bbbf45524f9fbd1dcb8edcacfad11eaac6d4e

    SHA256

    eba0ac761a3b27de820cf97fbd50c8636d2917ce32d246d1ac1b38d3481c1156

    SHA512

    5c95bb61d855a5d94bf233c1032f3483a15dacf2d0b13edb4c9c801d2dfc1f7bee87c34b8b77cf727aa6ca4fcb460f5bde748b134a477520dd4f0bf93610760e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6522aa4e47cf53965688817f357960f

    SHA1

    c06e883c5c8344b2d79cbd2018f1d749e0155a24

    SHA256

    649e07db2a9f04961d120afee83ba2f139b02722960b7338f1eebf902885dcd5

    SHA512

    5790a7a58d8bd35a856c19fd0d2313c50cf08c84888acb76a91e00a1df7727aaef59dd0335269e6d398ebbfb18aae859b17bb4102aac01a91a890b7c0118afa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ec5639b9cc1b8d16063f116c816c0b4

    SHA1

    a76e122e885fd874b8a2280cda0ea1ede594242b

    SHA256

    cf7b86df3f94044a265b56f862eb04a2faa1fa9d1169a690c58d6bb39f64b513

    SHA512

    776209f985b67d36451580f055ef65e4639f13501f964fdd5637a3d8ce1567be4a6166e3382bb5ba079a992cb47f5b956a86d69c10bf1a46d2850e1476de3172

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6cf46f302dede0633870b91f86b28326

    SHA1

    a6df4c38e1f753548feeeda8e25b7819b6bc350d

    SHA256

    765728e3bebee02828f45a92f31f53c27b95cdc353b89f1857c85054e2033274

    SHA512

    67bcf91045e13cf4e8f1e76e84a5a07a2d981df534595357051dee02b4fa81edb0153e5af4564d679812dd5231446c1921cd62d0dda3ada8894f361fd20c63a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    953d1733de9ee68bf641dcaa8b8d5c96

    SHA1

    ad85c5248dd00fc96268ba77ec6f4c5fad5d4b67

    SHA256

    d1d00f322fdbe8ea553faf70d5046153f169cf271112afbc9bdcfc34b87a062f

    SHA512

    493721c4f866902c5c069add7025fbf8555a1830ac47cd046c8b70765873963601f5b8be95f713c1fc045ef5917fff0d2339f7ca49505eddf7ca84c036a5a5f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edebb5add9411eece9cc475083289198

    SHA1

    8df57a9d649d3c687c1ee3f47d875115e53d2db5

    SHA256

    a37a5a222a83f00099f9d1e2632b699e512e22e4d5f33fb4fdbceba45f396e06

    SHA512

    fa70cbd8941bcd50b22a66073f16befb3af1a6a8498a099d811b62a559415b628410e2012f38060536e7c745cec98d21b86b6ec2e5240f2f00fd9fd875c59d04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4348af6cefb21f67aad9ef276902cef

    SHA1

    5832a5eab371e947880ccd238d73e68f15b3f917

    SHA256

    efbec1b1684bc5055cbc3dbac7fa9cc17d2909be9026c4b8ff18f1a5daafbaca

    SHA512

    932c933e5642d09407ef79d0b77b2a712cecb5c930d895939a5fc11fa6ae0649178375e709ac1879226817cf304fdf964918fa78578337199f350be05f672b5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01ee55e512b3cad1883ae528fdf24131

    SHA1

    c726241e7b92a40d078cf555176c43a386a17e14

    SHA256

    e0b369a3ebae4d9a276d80182f6447395cfce159a4df0345052b3ea472ded174

    SHA512

    85ee7d27995e2efdf4515c6001c8074e85d299d92d4a34768438514badbea42e005c39f5af1e762a5e833f881124cca5c0bb0552bd8e20c439b8740862ebe133

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0d91e13f2344af4204d07e284a6d653

    SHA1

    050182fcb3edc67b0e823d33bcf6840aa7dfda87

    SHA256

    bb7b11869b13dc5f9bbbc79e3b9053036000aa4e1ab0fec1111ac62204f76c93

    SHA512

    630a478fa8862036be49e6f14bafccd728a20e795f43ab9c481be22575d9624d238efa01ef35ba9fc4211c5c414007d8c918639d97587ebbaa0a8ff05e0250d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5c565fec5c131e69c34607a132e5aa5

    SHA1

    7b79d5074db38a22138667a92b0666b2294c9af9

    SHA256

    2345ebc4426da784f5e6e9a81f95c1df1d2cc95e8d2f3b40260f5e4ad6700212

    SHA512

    dc849c41cf925b3343b22443534925cffafa368f29554ffc6ef9bd4234ce9eb8571d038e8bdf8110c73565751385b940b03a7ef35b49adde63365678f8dbee06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56d45d72417bc533b34ddfcd22fd67aa

    SHA1

    a36a68ec180b5d37b6d504424b13a816df00adb5

    SHA256

    a3a6e72f1d64b47bd303c6964fa4aebea1d17a7d40f2fd8ebc1f0cc9bafc116f

    SHA512

    1d18fed6e18574d496c344ac3a4dfd2b087ac660b87fabfad649658cc38a8d52b8519bd0bab4c06efac2678ffbe278b52bfbd92aaf60210bffc6cef511e540e3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFLWQ602\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFTKP12M\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab287B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar287A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06