Analysis

  • max time kernel
    141s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    08/01/2024, 04:14

General

  • Target

    4a6942b672616600921e656dc71c33a2.html

  • Size

    9KB

  • MD5

    4a6942b672616600921e656dc71c33a2

  • SHA1

    544367afc9b4a7f29cacaf4611035f4f385036fe

  • SHA256

    ddbf5393ca613b3d935b2e65059a1c1c04f606bb8cbce464aba8e793f0e98b1e

  • SHA512

    ee5039a4b3e305365c2ac30faec89aae8c257cdbf6ce9a2fb4749264773b48e27aa3e8ef88cf57987ab7c13541261312e1d92e57ac643187ffecbc39abf5b801

  • SSDEEP

    96:uzVs+ux7rdLLY1k9o84d12ef7CSTUaGT/kPs7pUlVHcEZ7ru7f:csz7rdAYS/HuUPHb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4a6942b672616600921e656dc71c33a2.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:860
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:860 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:808

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8a9f2c9feb94cffcc2b89241b408d2c8

          SHA1

          f05273875182fad99c3456c12df5b431a7a221ea

          SHA256

          61340c0b7ca582b67a6d97f98adad554be48269b1419dbead2d2e7336482a643

          SHA512

          2ccb8c1b8e016842c763b4276c134a056f3941714de2a2635fb1354aa2f6347e74fb7275af987160c24165aed01cf2accec52c31b33e2215b769ec9cce586497

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          595e635bedb2b9ad1df81983f37a2dbb

          SHA1

          41602e0e7941b6e459f5f7aa8ca51890bc9d7e1c

          SHA256

          0374a81f0361aff4d4354387925107af793014cf1dafd1ed77f14d5ccd290118

          SHA512

          64cd978b49ffd2c5f64b668a4ac9815f8dde49ca5067b88beafc5e2ee1eaa6c16e7400caa132b3af7823018b0367f5061dc568186a39563aee682b231bb0b019

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2c12cd34ca28aeb966016b99dc552cc3

          SHA1

          c8154c69e75913c90cd636d1ff8ce89c0dbb9b05

          SHA256

          ad5bc2eced4cce3899317a91f6c8d073bce35957cc53f872566fc8f4b3940a50

          SHA512

          6b5e05b9b9875ed48d8bc69d58e608e692dc07f3d6b656f6d23b4f97ff979cbf2ac66d4d442e6904585d612030ab50e0dcfb01c6c9ef31ed02b99d524fbeff2c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c913ac838add514438bbb65f6c44f5e2

          SHA1

          c4e381c35fc3593a73803567c451071b33d1e885

          SHA256

          619b5843920df24ded639685306edfc160ad7cc9611ff098013e043dce2b26d1

          SHA512

          ed072b82e84c692804d8b7d4fbe1786ebeac9063c75106b76aabf7ed2b946b413c8414d17a79027340058b32aadafb3da7043169ac5063229b43f93b5012ebe7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4dd6e4c6014ff383dd31a17577a3b56d

          SHA1

          087ca974684e95f3a622c414e7c9818762709d21

          SHA256

          0c65abb6cae93ac9ce16aa332038275ad2f54989a7806dd118e85f38adec1854

          SHA512

          339f1c7d5885407fbadf7f01c945cf29da3d871dd6c948f8ff8906c15bf197488b3a443ecbac5abf8102243e3141555b5f19b0691c645f98fda1ef2e659bf50a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b14322068e84dc841c1d4b4affbbd959

          SHA1

          e8c6a06e2f37e2084cd7be6b61ce3e74a7e45a98

          SHA256

          4039503a764e000ecd936566172e422268d1404d7a3bfb0e4cb20375e9f0602e

          SHA512

          85eb2b47d07c87fe5482cd37c397160cb9eb2156bfcccf8efe85b885534321ab3eaab3de561b4195ad25343d00ee72f1bfa2a700df9e7104efe270019c8a47a0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4e76dfbfd8ddb9ad6f7212ff8bd66856

          SHA1

          f875d5ab217ca06b97473e4936d9642373f9abae

          SHA256

          befebe0b80dea8f49a324c19c4d3f194d74555121ab8fdcd7096c284f3aea25a

          SHA512

          a2c627ad37c970528ce5a56f2486a432e3baaf3c8ffc4338640bd961b968279201628bf544407a234bab42f6ee54b9c45cc65c8141fd83c1cb0ef79b5a9f8936

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3cea24e54dbcaf9520cac105e5aa5362

          SHA1

          ecf2c5ea3ce05b00ce547efeda8202c3d81d71d1

          SHA256

          93f1666b2ad6aaa6343811b29c11029715cc2f4306d8cd41590efabfb9666ffc

          SHA512

          d620dd47d016aabcd0fdb10227301851b41afa09059b84a9022c6cae6424c45bcacba26aef98633a20ad82aae674488b0474dddba3d3e4a2725dc6a79b1698f7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a166651d4f628315c7df227a38221c6d

          SHA1

          3c491da91c513a91b7f1bb5d85e79c3d956d8600

          SHA256

          e4eede7a6fdea6a6890a1bbf3b75ce3f5456ce559acbd1781e924490592bf83f

          SHA512

          b4895e91b38bd455a7e12940478400984b37308b84b65214c2505046b81ed7bf14573d8f0609935580f5afeb817da198de682d41d193f00112b335282c6875b3

        • C:\Users\Admin\AppData\Local\Temp\Cab4FB7.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar546D.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06