Analysis

  • max time kernel
    146s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    08-01-2024 10:27

General

  • Target

    4b3102d8bfd4ccff2a6aab0e625d33b7.html

  • Size

    18KB

  • MD5

    4b3102d8bfd4ccff2a6aab0e625d33b7

  • SHA1

    aef4d4df21bfa87dd74d4db653c68fd9758abc17

  • SHA256

    dd362f5d137881c88c9d5c9fe014f6e010a87ba83f4006d06a45c341ab6f7a3e

  • SHA512

    986f8183449394163a22d51563cd23725b234ed0af2a2d6e09bdc547ed44ff2e2d97f3c3eb06acddd1802004a0641326935381c3ebe128546a9992705708c14b

  • SSDEEP

    384:fJrdHHOLEo5jKQtkmv0YPJ8dlKhOuIq9d/S3E6iBtJ3wwA6+5rZg9Eu0XaMPGv1I:byKtsikQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4b3102d8bfd4ccff2a6aab0e625d33b7.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1948
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1948 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2472

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d561ccc9f7c3449cbef6e087b8711e46

    SHA1

    c7c5e47d7b19b40b3a145077c5390246b9558494

    SHA256

    83976d20e9a02ba435357f2e6012100ab4ee0933cd2ea6376eabdd649eda0620

    SHA512

    4643d2a6f954130221ff8238ecb12763dbea404504dbe73b3e87a4f5131954cc1329f8a5ab61ebfbcdb2d032017fcb42561b6e8e7ecc3cf78d3534775965e615

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5fbc20e5f56f3843740b32198418b9c

    SHA1

    f21392448fe8db2bd7239faa4f5bf01a897dc42f

    SHA256

    c53b98c83546c1f3ca8c60a5959799209b50ca7612e3ec641972d2296831378c

    SHA512

    5cb48239339426fd02c8abea0e941388f1a01f71f9149178a98be3313b786faaf8c62742c7342a65bafffe9f938032f3c4f6f13c4be93b4b8d702b77e11322e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    afc6d8be4cf9342df4c4c5c9afb2d407

    SHA1

    0b79886d5a59dfd400c15ed13ec80f1b32119726

    SHA256

    4477768e47916abf5b225a98622bc4f43c68d54b1946c57ddc3d63f4dd8d0553

    SHA512

    6eb3a0b8b7e0fd73b6e32b3157fbfb4e335ac1c9b7d1441b554a972f5bee14770311c031811cec03c8d7f3a8aa195330b53ba1b497fef32cad9c20058e68cc8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3678fac9f5e2fef8b28cc79954bcb464

    SHA1

    bf971e69e5fe57f712dc258f2db05233cdb90281

    SHA256

    3ffb87f7fdde261ea93a3297e0cca6391da54d847b32781ea72d479af46435a7

    SHA512

    849678f546a2a82e1aa9d916dedbc0fc6ebea5fe624cf936a09143235be9212143f3a8c423bb80310272b83e988455814f5991c465c4756c9e0b4752530c742d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    952b0588edff2f8efed9cac36c6474fc

    SHA1

    7274045cd58026ca2a7fe4f8804f03d2bae5d9eb

    SHA256

    edcaf6c30f4d57e9a63681c4c22ce87830e5fa504d7103c9b9d460312f2edf7b

    SHA512

    7cd05281efebd6dfd3b86487747c1a67328acac890f8a58b4a2c72611ecf17dc40d2795fad2c65a0fdddd9d5d8845e244bb3111faacb7bfbcbc17c19fedc922f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b63f288cc0b73ca6223de0455cf0a93e

    SHA1

    e76a63ee5d4f8c365eb94f7db78cb39f4893e744

    SHA256

    a145696a0c4685e0d7cb3dd4c453de890a61d06a9b0fc6f7d95e18e475c548c6

    SHA512

    e8011502676acb3061bbfdcc7c48960545e35ef00a07e00b3ef5fb220073028a48a22aeb27d6e1a90a697347cee5d1017f4c577b5baa9a6473916f40e21311fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d14f7d6769eb43b981ef0d8601a56a8d

    SHA1

    6895a245217529cc517f0cd7e412e913036c8f32

    SHA256

    c0791934d3950628b0000b1cea72e26c936f431265969c3368627a1d45793b69

    SHA512

    d1e111406d42b53bb630f63a612fdfdec093fb94cd9bcfb1a8095641bd8fe21276096dde5a3d3d1da122679df5197522c2da8b40d5ae075925d12be92d64c7d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ad7c94cac8d5a0e8d748f6db33f21ff

    SHA1

    675bd44dc2fdfe2058b0193543d722b759a50d64

    SHA256

    5f0ac8e8a4ce90274e86fb6b508540a7fe47799404b4faabe625e75487af7cfc

    SHA512

    d901bb857e4bc0f593b2757143472da2fb696accf1aa64f85ee8b1dcddacb1736d03b933124d6860139ba9d4eb983359603bab402aade70eeedef7fcffef1149

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13dc6763f2124aaa023336a9442fb827

    SHA1

    b4e7c82758de340228ee5ceb3043d56c8f264cdc

    SHA256

    397a947ceef8c63fb1e04d374f99d7fd18b6c5594ad953a4b58873ed385ed1bb

    SHA512

    859edf3e3e2e2e7c2f4d2c34caed8ad2da86d3c0782d3fbce1de0bd2ecc524244e5f28f907480337ed383d84b62d977e29c0255882ea131d29a1e27308e2a722

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8508606154787a3f38e5ad3adfdbf65d

    SHA1

    838d32d01480f5ff13bedeafd5ea782db1a397c6

    SHA256

    b4eed04c9d787a7abe6a16c08f0870d996837c50c16536449bda57b48d4738e1

    SHA512

    6fef77d184abddcaf61fce3f96a6a547b2da6295b1a388f33431bb678d82810ad59150f4b7fe4b8ecb03444a9cd6076aa5402f574f63defb38be0308b6e507cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ebbf330e687b5863255c56b3b2456c3

    SHA1

    e8e4145da18ad7f1639c3b3cb336c473e4023e13

    SHA256

    22d5b616d90081de197b69581da3e0171c7e1b4ae8140df81c84fd8683bc10a8

    SHA512

    da37495c95014f0f0d0474abea0da8c6e95f035b216ad12f1bf1fe3990924cee4b3c16aec4904011824a6858e4adf330d17ccaa87daa5d591d303360e689c8c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3030bc0edcc50eebaf959ff39df70f8b

    SHA1

    2d1fd4ee1f798a6911997a14003569d106b818f7

    SHA256

    cf26a0bf98bde7657e224a504c7a29aaf2206ea39e6e9b0b29adfab8a52f3851

    SHA512

    b78c5362dffa6f4c8a8c3563db463fe7f52afb41f89eda8b90e59d286c5e86293dbe7de2b1a6cacea2f90e8ccf457f3b3729ff5c567bad91f89d2f4aa33995f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc38704ad22ac3c64a53dd5a7ffb700b

    SHA1

    428b87911af6639ec97697db90f6a0d99b80f83a

    SHA256

    29e64bb7edb4487c79d983f574622bd60c0e28d145b4699e56f7da873d788f5e

    SHA512

    0c6a739b0c7a9524fcca93662a97a313b345a7a4465eb14c7e1dc1daa2c828c2f9dcdcf9019d589e5a84a7ea0a995eb7d85dcb96e9f8e78e50bf4271a891c1c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c42bb22ef71c35b901f7a34cf84f24bf

    SHA1

    032d90a9edc2261b4b9fd9e8963f8deaeb5af8bc

    SHA256

    8ddab95e313e0d82fc906025866305bc059a1e715dd083564feca0bab4fb9a20

    SHA512

    26b1ef35547567e3c368c98f657a1e524f4881952536ad5173140777a3eb4aab092000280553cd1036eda0272936b5bbaf43f004cede881f2d763d279405569b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ed5cf6cf73c455a94f693dbf2171327

    SHA1

    3d4e82635017479346dde3578f2a2175ab657762

    SHA256

    caad210b0161821357c170aa0ea7e7a8bbee9f52ff93d02698e7bc25a0466d29

    SHA512

    899ebd87b33aa2d28049343aca23a6967039135813f3c254925cdc0129c3fcfabed3eb9989212eddf10dab51fe5ac2c8b99b5d8bdc3ee62b873769b6b9e30e3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a64a35510d2562d1bf00eb478fa88fb2

    SHA1

    f69115eceb40dedb6f7a29f76f07b6e8d980f265

    SHA256

    244f3349265a83496ac63ad9967e851fdcaca3036ec2805fc1fc6f8cef28cb4e

    SHA512

    a8e4185535156434afd0441c71c683deeb5fb188eebd48192a85674cf40a272176f31253ae4f27fd7c91b4aa750c43a63cd2a06d94ee1fea4c3dd327350aef9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc72cf8616d18e77bfc3d227dc180764

    SHA1

    48ae108cfd246a7693dfc41ef29bee7bb36836eb

    SHA256

    2bbcc3fe970b7f5cc040456bd0db0be2335f4cba3a0aff394973a78991d001f1

    SHA512

    274dc4e8189c11a8340dedf3273e4ec22e4e7f192d76fb9af0bbe574fdd5fc1b32c14ed9400be510b60bbc4d2a43382706f0366fcf4aee809b60da265b474e3f

  • C:\Users\Admin\AppData\Local\Temp\Cab409.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar489.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06