Analysis

  • max time kernel
    121s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    09/01/2024, 07:30

General

  • Target

    4db79cc490ceb822d2227baa68538da6.html

  • Size

    3.5MB

  • MD5

    4db79cc490ceb822d2227baa68538da6

  • SHA1

    9091d16fbf9f14316e24c1e14e4befda030649bb

  • SHA256

    8d846d9c64716653e263a2ef3e14bef3be374bc659b711ecaad508ed5b7d668c

  • SHA512

    e0e30480fa0e5b39d05a295a847e29f1dbc08e155dc3cc4ae541a8f0640b69fb24f6e7d25daff4c648a416931b64c3db0e23cbcf2ac6348abc530dab132f20a0

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6N1+:jvpjte4tT6z+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4db79cc490ceb822d2227baa68538da6.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2420
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2420 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2272

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d24b9f939cc35f233668dfce3d1089c4

    SHA1

    fd52ce8bc05cc7ae3c097a897f08216c0458749a

    SHA256

    4b4c27322007ad51b9d4c5aa265471559767bd166aec9b14d7a4f9a403d2b7f5

    SHA512

    1d10fdc92390316a18c1ec7d1995e65a8df74d64e477d0925a89c618a500effa7a102115c74c48a0e605f7a1d00f4fa308918a4ac6d8d4e4aa6a4ebcdfd45fc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c39cc00b75239d97a8fdb722292cca08

    SHA1

    394622d8c4c63972875c1438bb8aa3e11f790451

    SHA256

    fcf98c4c0389cd47ac05d416a63ce2ae0c7845d9ed8ddab0ad0d6116c570745e

    SHA512

    1b174506bd8517dd48d2164ff1c9db7fa2cce7ef3da0193043f57137f7b3728ec8e4cbb99b2ab04a4ddb4960008e96a9be715a65de125182842903da97c547c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a7dec0dbac887d0a6825cdfa719282d

    SHA1

    067c47347f297b48912b61cf103616a667bd8419

    SHA256

    5e2ec2f23147b702575bb8d24cfac3261c271e1bb6506f1e94018fca1cc73020

    SHA512

    260cb862b1f4adf5df9b0abd1fd1d9947a21673f0aea5f9933c4b5bd7763f47fb6b5f0bb3f3dc3d98629231ac0b215354baeba6ed1862322706f5865e0e548f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56286eff289ea1be1176eca09be352d9

    SHA1

    89e38669cfa9a241200177868bc5418cbcb21786

    SHA256

    b5f54745618e673e60b96fa69d558352582035e5791a1324452bac6fff0fb7e0

    SHA512

    b80c04cb12fbb7599aee80aa2f9490d7bbd9443213a2c024f14d7b95c5f593f7ca105c1dfcd79232e424afbc4bf48311495eead4aeee102ec797ce55df25386f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1ea28d81bd0a8cd13dde9bce60ec12d

    SHA1

    92fd14521f2ddc8eb647708d4e5b6a5f009797bc

    SHA256

    f4c6f46a2dfd316a6f758cde45e4f803d7f82256bf329ed372a551edb169758d

    SHA512

    36e654e7a20af9bebfacc6ae87aefecacbc766a1f0bf9d4f8336c5cf218b9f43464d611f871923014344f2daf41934bf13a707464807988fbf3a493037350a86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8ac5c0244ddd53e92d907b994fa43a5

    SHA1

    d586593625dec1a57ae7e7c40d0f7a161d031563

    SHA256

    7696e8004d0c297718a2eff557f1469c2679db0e97d33905ce2b0fe1ac98ce7c

    SHA512

    83672e6edfbdedb0c47fecec6b383e8bdcd99632cefdb60601c12044f0d4e9b1537126d345231239428d7629ccb8e77414353fb439b4fd357329e21b098deb0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bc762481bb6fcac0d25fa90263b81fa

    SHA1

    afa536ed2d025c7818fe7f3bc0fc0a0a1ff0d7b2

    SHA256

    26094903ea60e7480b6a11afcd55ce47401a1b6781e350ab444a7ccf0c274558

    SHA512

    c55c7b9989a8245892bbf6904db30f78507280d02c3eb967f7c5e34df29d01a860bf40f6eb26f7e5abcbbd1d44ea000305f2a1d428f379e768646b2c556fde46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36450c16414ba88368dde283be06ceb5

    SHA1

    b8b3d40d3cb9eacbefe36cb5c4b8b78e36f8ace3

    SHA256

    4b1e93a63c8788885f8500c208e834878ee32e44c4a39fbad86eaf93d995ee82

    SHA512

    8e3dbbe23131324c9b5e5283b7630c937511735ca26f86f5f33a9099831b137e77240e06f2a82d19f2841ed6ef3822aad907b6ac55f7344275f7d28e196778fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8701514654f397ca998bff9ad0a943f

    SHA1

    55a784a8fba7533ac7c7cf13f20022f00519371a

    SHA256

    4b9a388df79869e2663e2355a60f18649e2321b296be598c235ba79bc408bcbc

    SHA512

    2e3d68b95754d2bc6f49807c7358d2c00239c7cd34d025310e65621e5fc1b17e628ebacca5a1de854baf7c0d64d295408277d8a961c3aa7b9e8ff0f129bf393d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e130ba2aa0e5ce1e5e3afd4840e9019

    SHA1

    b9ac4a072c7f3edaa98cc66f0cf0ddb56171f089

    SHA256

    7ef214e8ea99929508d6ea55e78104e6100fb6fa581db1094d698090aa4d5d96

    SHA512

    8e15a3bf464587279702ac4a5374a773792474394adf4180527fcf90ed2fd0071d582242ae1a67e884cb9647c0b334d3a696468ff52c5e18081ae9a938602f12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    176b06531e6b2efe47a3b3361895fab9

    SHA1

    eda7f2ab5fbf7abb3ddc125619ddf059b19db9c1

    SHA256

    f1c6edeb3cb47b6d7ccc72c451ea2daba1ca7e3e0e4e554cac2f862b307664a1

    SHA512

    848f5f0403a8faadc72ce5742930a335860ad34283972b57a188cedf15e171d1fda0a02b9c9c6bb7b3195a1705acb741d96639f3076a94f3c3a937e983ad269b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4870edd8619d8d0637594a30a1733425

    SHA1

    546935339f4d295d6c834b19b8e65d98aef8c1b0

    SHA256

    5f3688166c4cfccd8aac2b7215b2e31b228447bd0225fc77f0ac7747fbc6232b

    SHA512

    1b58a76582ff4cc575d5ef7af8c8004f257dd16549e56711a8828b224fdfc77f5886e7b3f65b8ed82689f7282d24d5ab8bd15c05c1f5f5d60c8863bf39e8a1bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6aa24b26f0323a04a6894d467c389b56

    SHA1

    9c7365e8f3de27bf3b11f9ba18495cf9cc6372b6

    SHA256

    b41ea7eec9a54502a7fa05f9c237bd3439d930a942861b75e81f6ea18777619d

    SHA512

    3edea13f68a083fe5a1a8c4034691e4fb8a2f340b83715387a840933cb0774d90011e816e78ea181e55d9d320e64ee94dca14e7bf5814bb95c847d31b0bd66dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a0c639491c487ab48f899efbe0438b4

    SHA1

    df7225e46850e02e959a9851624fe6820dae56ec

    SHA256

    4ac6d834da55e0dbd925297ab5a34872dd069397485080a3f85dcebdc7998c3e

    SHA512

    d4dc36911ecc7844076621529821b988cb6bcd7eaef6ca48ff94fb895dd001df79f73b6636d2eede0b63c8a11f0417bdba02ebe8c5894107b8e598c0f7872574

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b83bcb593028051e096fb689e234342

    SHA1

    4c74424d9adf6d9b8d486cb3989cf60670c7dce8

    SHA256

    664c654a07a7637c01ba0dca63edc443e3a85290d4dfd604450b8f19279a97b1

    SHA512

    e91579f49b69de5cb51ed0edca2cea0e414abe492ee06c6e1e675ae98682a17fa30d28ed9fd801cab1cf580aecf4ac752421840085757b0e14861de9d605f5e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f034407e8a1258277b850b3946a728f

    SHA1

    830afc3dd72e571836b8f8223411c9297e9c8e80

    SHA256

    7f5b38a1e87533214c763eb91af81f336b5ba31a1516d3bb244dc60a4c30eaaf

    SHA512

    d70ab2aa490e4db758ce18f27a2bc43b814c058f0c6df2738db9df3227c5872da9a396a508368657503dd6176c165969d210c827b9b4c459549929ef6294e11c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8953b0076de21778e89f031a8a23953

    SHA1

    c92bf0b2eb1aa2efa05b1d45a0d5ffc9a4ea797a

    SHA256

    8cfcc96553251a2a8ac25e529f192e7f16463e21ff5ca122f5d8c5949f47447e

    SHA512

    d72eea892c2de663203140cca89e3c53b71c9ce795d160eabcd6f95805cff1958da57c92715b09c3624addc885bc11a19e23e9bbb8af65ceac1c8f28aec326bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da6ef57c39ab4b0eca1a73e5227810c4

    SHA1

    cbc6bd4bfacccb8c308d7d8689f9e94b25e2de68

    SHA256

    213e1460a9fc905f6e79bc6ecd3b7c8bc6e1a33a85e19dcd935b936298957e2e

    SHA512

    6d9cd7a710c139b70d411ad18be869f3234c052366f4c9f4506f74b1c461c94dd71710ccf7d09631da05ac492b12c7bcb9e999ba56669499a6e77b1c7414182a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    227caca9e9ea4508e162aff67872be2f

    SHA1

    1604a956741e515f20213011c83c10debbd29292

    SHA256

    fd5f863f292ca2a83c4cb88a03d130b8f2c9177ecf26249f86a72f0e6b14b32c

    SHA512

    ef18ff82703b7a5f8f933e34dc11ddec202051744c0f463c1c0c9b70fb732a8bc23ce68648107641ebda97d736dd813e43949325f6929f2b52d645bd94d74389

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R90HQQX\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E25VF8N4\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab60C9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar60CB.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06