Analysis

  • max time kernel
    141s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    08-01-2024 03:11

General

  • Target

    4a4bcdaa28697ca4538f95c8648664c0.html

  • Size

    3.5MB

  • MD5

    4a4bcdaa28697ca4538f95c8648664c0

  • SHA1

    ee658a25e750327607a2c9f357f604c56bd02abc

  • SHA256

    c7968cf8490d42b95e8b3d56abc402e8863dc72679fe996eb2781e8e69e62484

  • SHA512

    37a0bed98eed3a567ebad99fdfd94d7c02dd9718014cdc21a309c1457999db13b8e859b2964305631f044316c9f1f113055035fe7d5395ab73dd1263ef878382

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NAf:jvQjte4tT62f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4a4bcdaa28697ca4538f95c8648664c0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2072
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2072 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2448

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    687ed636bef40f56bae62f70b3eaccef

    SHA1

    d7d53b692444f5e2cf708845cfda7d95bf88e0ff

    SHA256

    e144cdc0b27eade98a25a5b6574a2ead6922080bce5f83c847e768a18c79d8fa

    SHA512

    243808a2f6ca42855e6664fa20a32f2b1a5efcb73d6aafad783c6d3e3a22160e53c51903caf5e0b04a67711139379e45f9a8554253ab52ed126be96ea7ea844a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88792f47644f4acfedcd3632fd080f87

    SHA1

    9514b270d077c87adc00ed4fa0430ef99b9678f3

    SHA256

    875dbe032ebdf99b2ea08429757706e6f01af61e0acfae75079d7b3caef4a5e8

    SHA512

    8c6ce34a568ba93b3d0c49f96dd4515052d8d32b528a1be39880e87c9b5148ebcd93cf6be771bb3f732a4868f62bdfb388974248697b8afc9005b7c242a2c5a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca5e94169a26e10060bda04160307fb5

    SHA1

    d4e75b2c7ed62e967a6bd9317b63cd60bb8e2424

    SHA256

    eeb0492c56af8756ebc9fdc7b59b83f7fa0e367d3d1994a5afef74ddf95fb8c5

    SHA512

    830a3ce0ac53336f8f086380bfb31134a4dbba5de568b5715d74367d4889fa0340875510fb4c7cb050a9bebc12b4cfc797e6deea5b02418270ed1882b2bafa39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    acb3433fbf6e773bc9b52d12f7c2a60b

    SHA1

    0f4db70e9692abe386d98e6cd4cfddd7c8eb2f5b

    SHA256

    6c96fe0e7600d18fc8a86464e86f80e6029df4ee859959514f971c773764a93c

    SHA512

    dbcf1e9c8ad483742f5d4ce669977a1cbf55ff2201a06f6b863324dcff47520b68ecef4012cb6be5463d89e67029a0caac182fd07962c925d5aa3ecadf93b9d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f458ad1c09c40d0764dfdfdcf18e53e

    SHA1

    e2ae0694195d3872648e491ab2569dee8502d05e

    SHA256

    e94960a1d5e287be58538284a3a7f586ba901de0ad6a26299473e3cc35f12ad6

    SHA512

    2e0b6b4fe322d7ad90b0b777eeb77e73001a9c5f01deee94352c21ee6b20d0b80093cbb584775830d6e48a3ac72ecd09427b02b532c75c45e821da2b2cf0314b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ad46b5b9f45bce3d92a98e6343f8c5e

    SHA1

    d79c1f863246cd544d9098b8d4bc246f6c06e935

    SHA256

    bbe8e13a0031d2e1a81e9382c58c32435682ba6d8549e1486bc3ae75742adef3

    SHA512

    3e5a85c01d80f662c42780861381fee8760d0525284217ea8a2a8ae713d16faf79b0df3d4b262aaf10a82efd3ce08f7aaf79cafc398d3fd2d03a60485977d35d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38690ce20ee7d266ce3efb8b00fd2c0d

    SHA1

    434d80e750c9b45204b27dbfb8e5e0280558cf81

    SHA256

    699d89dca549332c54033ce219f93e823f37dd1ed21ff87172692990e6224f85

    SHA512

    13c88cf3d213d22bf1dff9903da7a5dda848e247c572d766a8b459025aa7016f24f342444c1059ba7f8c4f9768f7d00f772260150fd1073056d2eda70aa9e76a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36ecce779edf544f60a060e9c2b7781a

    SHA1

    92e99c8d30ec84c023d23bd4cd2dc826b46eddae

    SHA256

    8f57d3617f0fb74dd9f9707e0423ee90a41f894daeb1944daa278675d8520a08

    SHA512

    9b93caa56d5d885cc36f8c68c2647e99c8b54634f02ffb2b8f100950e7eec21b1b4eb3dc4a719a65f82b99107b9914503404c6b56fa2fccc212558fa90258ba0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18c3525504c4f7858a997b9dba7b6a42

    SHA1

    95b68efb00a092e6139be53a280ca5b49cab78e2

    SHA256

    3a8ec40e0d99192f98c1b04a3a48e6887ebf8f3daf04df636774e07f82f59f13

    SHA512

    64599eb330ab03e82b213516627321f088d209c03bb571286dd84b9293497163b8f2fa446a3f512599c563b1bc43f847bbd4676689f86bdd2b6691774a0ddc3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e39d42bab83b25866aed3759b9a6e053

    SHA1

    f39ead5e6b9b2696ca9efb67e6221e9271a371ec

    SHA256

    ff00e2eceef2beb3a484450bae555824e6e648595721da4c53dd9b188263b500

    SHA512

    43a13aa81fa43a57f9a2856b59d993edfd3dd4898dc4e03a9215fd9a3c2f6b89b7f8aebee4a07c28cece59e387cdfd59a70a7044a030f0b4aae1e8c9e01d2d60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a7b120067e66c8b17490f5d88a9c46d

    SHA1

    ac953d6f6ba3a929b29d834b5bb3ec6c4383444c

    SHA256

    c59f396a2869965cc79b45cd58f05de2cae1e3dc1637bfa7e292a6a969a3bc90

    SHA512

    77283de9b4327c493b3f50ab896874677aa57067dac58aec748ca9048adedddaf4e1792d96596b09de6253549feb13113ccb32e963112a1d2b5065a16f204593

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b90ae6f8de7a0a08aacb79d905e21db3

    SHA1

    f98c7d5bcfd585ec3e73e56a71f65a48d7548321

    SHA256

    df16c4b69e8bfe5558c52cf0c9d4dd40b81f7a6bda89c705804d042694316df0

    SHA512

    6820f5474cbba270953fe223b093bcbc421361d80f53cd6507608c863c0818d2efb1d613ebfa6ec5aeebfbf65b76bba9a749a9455d0d5d1cab07cc77926d9836

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18422d54ba18c6dfa1cca13de92273ac

    SHA1

    5b4569a3d04c389b3c5b8578e998cd570b72bb49

    SHA256

    4b1a4ccaa4831cd71bbc48d66598eb66d33b65ff940264abb45dedf520cf43df

    SHA512

    5ab86636ad6194fa3eee6ec19b80008e043afece839cff6e5530acfea4353293ce70e4d58622e25d2b3833cb0a0df7b3d2cb6753e9d1d56e749a12bacd6353c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f61f0dff175de67b46b18098c379305

    SHA1

    3f246eaf478aa764bd501640181a76a610c878b9

    SHA256

    2d63b2d45dc352e82723bc4da51021a3bc89b3b9050e5606fa1c15a9709b0728

    SHA512

    3b5f723a61724d1fee5e59be738d49064bea84d82be8dbaffa12a24e1fe0c0c61f6f4a5f9fe86925e3b9312855966ed6a94c3fd077fb0693f582c369a0501b00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a6e228ff321c90b33c911ebda9808f9

    SHA1

    1d7e93f1ebde3565c7ad8850771284f288101429

    SHA256

    9e0f02620efbacfe720dea391f1bfaa26658a81b1d493fe97c9c98b6211f377c

    SHA512

    11bdbb5ffbd33a14eda7d1031c251bbf167fa2070afe1770629d5c50c376c16f8aef9cb6a9843ec557d44cf3f82390ee28ffe9754ec9d99aba5de3e91ab7643b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca1f76156a134752c243cc846c81cc5e

    SHA1

    3f6a3d63f400f38aae2cc3ccdad0616b9a71a839

    SHA256

    48d9c8b4c5ac4458fbed787b7b37d6f664b540311a17ab5583f6f055506f1bd3

    SHA512

    923723a90fe5366175c50ec694677109dc75f7fc3adbf40f1d3471b59126647a609e753d5338cb857c7eeb53f2d2dc13da2864bf36127797a803867d8c5b8288

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    637821a931bb954508f911cfbd11519b

    SHA1

    728c9b3ebd51424dc921cb642e5d3c22a0c84917

    SHA256

    612536037405a482c14ed008cdd7c88ba6d2299a11f32ed3aac3ae9bc447f359

    SHA512

    41934eaf157cb3fdf2ff82dd3bfa37283931dc8797c216fe6f118edc35c117d8c0e400c7a5b19c82b9a0cac01c82a2d64a60a9e775cf75eb52e4f5c354398c24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c32aa34e3cea1022b16e5799e408eb4d

    SHA1

    0b06c75e759a6248c29c428080c7ff4aad80d619

    SHA256

    5dd3858c4a66afedf2aa60a6e4587aa2700b541b1b5badb7634812d0f728562f

    SHA512

    a0486b6ee5bcbce1f7247690f850cc13f8a7e6120f1ff5bd3ed921b1945eb488db7eb28e38c816a99b0d6d9d2eb03db8c055bf324e7e913ff4ec1d376bfd9c4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbdb93d73bcf4b2cefa5626ed88c754f

    SHA1

    e9e1285a13717d3e46f55bf9f012a55f197edd77

    SHA256

    f70b38aba252b53ac392d1fd00151ea280c2f4ca4e17867c4558413d9ce690b5

    SHA512

    7428259e75392a81075b3eb5f1913021641f4442009091cc67bf003d30c9b572cc86559edad2f89ca1d5fea4b695be96571e81f57a13ebef7f889ad14643b69c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E1CCB52I\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1J1BPYJ\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YV6H14B0\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Temp\Cab44CF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar457F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06