Analysis

  • max time kernel
    120s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    09/01/2024, 13:18

General

  • Target

    4e67b9302329ed38b42b628821275526.html

  • Size

    3.5MB

  • MD5

    4e67b9302329ed38b42b628821275526

  • SHA1

    e38874bf5b5b8c4e5a2bde7cc8310daf9f193ace

  • SHA256

    a34b41bf9a62fcf10b7efe0482c972b7ca57adc8923ad318fd98cbbb73399c18

  • SHA512

    2788f17b6ea9f1533f3b7d1848a44dd062233b0bbcdf83d0024fead330dbb4598f085f0580d59d2e9b8cbd6fcc077bf2492713fa86a3a92955a41338576da77e

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NId:jvpjte4tT6ed

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4e67b9302329ed38b42b628821275526.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1704
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1704 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2376

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b51fdfb29b2fdea13a5986e27c0eccf6

    SHA1

    cdc8c39c8c2b93ea9625b23cdecd093328fd16d0

    SHA256

    85c7546d1e48adf16c85b6f5e3f4cc2afd62926eb2d461c37a7f31b8266b2962

    SHA512

    bf805a9914e854eae7fcc57dea303f20cd3ed53c8976e47a016133e8d7f670cf549a0c47595736618de12c32dafb05e01db1464a9d0c39b3137d0ee1b46e2058

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    595d76d1fb67d88ce3ac0d4bf116e2c3

    SHA1

    fc530d5c7ac1a741d4d5400f69aa331f5cfeedeb

    SHA256

    ae47bce66ee0cd8036de63b47aeda9dc231018f14d046bbdf8f161fc163108c9

    SHA512

    9752a71defaa6d2d8e8c61250ccfc548e51f283279e64a034bd2a6e0fc00cb489b9b56e7ee7afc9f3625f776ea6ea0b0b18961cad06f352e9e8efa502b5b1884

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5ce39856c7dc77e69b165450c04d78e

    SHA1

    aa537fbb4808a281b5a4e8cc39ea4b00002d61fd

    SHA256

    f93798ab893cf35843d449673480bd16095d81578bebba6c67345e16f9759249

    SHA512

    0274da7d30dab87fca6cffcbc0fb3ed56aa4da42cb96752b87031d399df47a3ed2d1bc180a46cef9f3ce0abc36c099751f5322031ff8144862a70605d530c07b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    117812aacb9f17de7e6c34d6025cc061

    SHA1

    e9697b40b1d508167f0ef3c581586134ca78ec65

    SHA256

    24baeaebd9f82571438effd66875d2d1ec6475de857a7a8a58a37d87366b5cbf

    SHA512

    6e6c4f0d7fdd0c1ce0287d4e64bf6d82cfae7bf6f4df81e6f6ef0f75390b2e5832a2836bf99efbb8f4ce6fd7d4641db4c26e980cdc36fb503439686627b9c913

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd37facd324e4bb352788bb8d9e1311c

    SHA1

    04ea4ea5f945512f05d9dfa3319d11e9a1d84035

    SHA256

    4c98892b42db1fb65464d22bc7ad8fb0dae127cfecb0a2005cb64b88d6b3bd2f

    SHA512

    efb2f71090610ce544615c7276d6fa854ed22473288fec4de0f5c883d29804f7a4f8f704312d078b1546f9876068baaa6652ba5b5ea3acf454b173ef5d429530

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed970737c9b95b2450e5c049b5fdf53f

    SHA1

    5718838cd8463421033338e75e23603a3a8bccec

    SHA256

    71df0cc0aed2d18993e063805208d7eb019e38bca271ea2489c4cfd09bccec42

    SHA512

    9d0613ec3c84836e5ed9178cc9ed6e343492766f3537b04cf8406e85c7dca9427ca6ffcaa90c4c6dc6b427b818c4159d169164f10a2813d273e4f57e2b14e1a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    862958619730b3f30303f58a4e2f6905

    SHA1

    6cb2fdc3e2d24ef7018f8dd849f28c0eac261b72

    SHA256

    e5e5f3a371426212e7d217e822144eb97d9ae99488a945b15a46224815b7bb4a

    SHA512

    ad16c35aebb065ec9a30d602c6fc0e4c1884b836480d4ed38d1f8af6e65849a5384db8d8d483ab31b5fa20070336a521620db0e577e1f3f401d3f3297161ff1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    265f89e73a00492bdea2c6cd716ad6ed

    SHA1

    7eb53ed191bdfe643ded3be1a163fb5c28ff7f45

    SHA256

    a13968c3a39ad333227f3f8b828cde64e738f7deb1c2e7621d0b8863c7ed5f18

    SHA512

    21a06c3d17c34fc6e772431d0806868c55c7ff2c97efbbcef652af02f9ccfd3e4ee3775ffe64b715f7886114662bb76b71f3d97633d1a47cfc6cd36e2aa7efaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b924c13fd21113f56a733b7241702916

    SHA1

    c62a5671fae596e42c5be2af5915008fefa973c4

    SHA256

    6753443923264d68834775525c87693d2d082d78344de5247ef34f6a22a3110c

    SHA512

    f9a80d71bc2584924f157de10f99a215aa557f3f061c2bb55ecf326a7748c9f137340ca7151f8e9cd89fc1a404d746e95e81ae6c6ddaddecbb47b6ea44ab443a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7e7d67371740bbd23a14b3bf91c8818

    SHA1

    a17fcfd41d1411da1f7512132cd281dab93f2a45

    SHA256

    931ebf3f8f405e4ea02b13aad59ef5480b5fb8427aa246bb8497f85e454230f1

    SHA512

    652aa70feb1887b1241c1a96aad72de793c9bea45d5da98ed192014a677f2a794aec63e915bca6cff949a3ad6bed02a9d995620c4c9c2abb7ecedd6cccb494ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4d4263e3492bf8bfc25dd6d97886c57

    SHA1

    e5f4cdd3b1021e5c8893a725dc6de8635942a2d7

    SHA256

    87d3e47a66dc39e93edbb1c977704088bc1d1e70e020c7cc25685676444a7b62

    SHA512

    2759a34dd8a76f3be87c53f22ed91d60088b6d97c82accdafd5b9696d3d050d1122404d80981232c5ee746fde015c8f4371d810b66611d02af3bc9bafb47df3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72b6f4d4d04c5289485ee8943856f204

    SHA1

    482cd56f6b3f9641ebe500b4b84707f618f1f311

    SHA256

    059c14812ac579c25451ffa1aacff67c557291d55490ff22fb41f52aa8463b8a

    SHA512

    dcc42434342eebfff13dfb64e4b271d4642e7097d1a74e1cf8dc6057bab2ee62c082db8a10d3601f87509eb5d5836bd03e458c5c0ba903b21126bd5ad1f7923a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f52a9c1834b210a92579d0c463a48ba

    SHA1

    390cf47cddecee46a35a1d46aeef0dc5305a0656

    SHA256

    afb43dd0e8b6a2ff7f54be9953abd8adcbcfad1a7214f1e8af8b28720cc3902a

    SHA512

    ee812f86094827ae5c182e8910c972b9325d6f8953571ec7b5cf60c3bf265bc3a6b63d26b17fbd40b8f800addfafc8f4cfa6cf220e6f0dcbbf1ff1d3535a3a47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61445dc14ccdd650cdff790a3e5a0550

    SHA1

    d337da5a450b7b91abee631b188b8c1b3225cc78

    SHA256

    4766c85b82edbf504e65244dd77b8613e1f3a379ddd3ad8757c0f3a54db54c69

    SHA512

    e8393db233c1b2199094e3fc9bedac2eeb3de748fad125e307a800aa994ea2f1301dca6a6a4f73c7ad3cbeb760f9d19ebcc305c0743b4971247fc8682c075412

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62276fe63a64254567866ae36453dfc6

    SHA1

    492389447f52d6fd3ad0dca8c127add2a57eaf58

    SHA256

    b0e05e11f47945b2819e71b57abf61d4c10f33a707df250d0467dc5e7d0c8ab7

    SHA512

    ec5a52ee87062fc5f4d8549623d79ada7766781c7d67f47b68c44ed62cac672cf77cf76777e92f7c0ef2c0582c342caddbadf1ab50867bdc011da592e19548a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6a2a8daa63cb4877eca6fbf534cd4bb

    SHA1

    53361e06e041fcfeea5d6666166fbb48f4a16254

    SHA256

    977649ff7a0900b4c1f7dab79eb25a51057b0a6647e5976d0e752790104b7d48

    SHA512

    418f6f1c2e766a21dc7ba943d308b40772c7e2974ea4445076b6adc1c139647911c0bb188475d1db764baed99960e32ff1eb9b6a3530b0dca000fba0ed490360

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdec070b55060b219d7eff0917780bad

    SHA1

    6054217f4b65b88e0781010e97aa0c6381dcf298

    SHA256

    9f6abb383efdd40587bad94791eee4a1b7d5a1629e32f9f7e90b29a74268af71

    SHA512

    2f636ea5e16d52686a931e10bfc46c65e714c0cceb78507dc416069c8f16a8bd070cacbcc56baae86b0d196f17e2893031ac39f88dbdabf85452a76812c0ffe7

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R90HQQX\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E25VF8N4\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YT4IJQ91\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab826B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar829D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06