Analysis

  • max time kernel
    122s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10-01-2024 14:20

General

  • Target

    50c94a9ae541f5cb09073925872ba8a4.html

  • Size

    3.5MB

  • MD5

    50c94a9ae541f5cb09073925872ba8a4

  • SHA1

    1b647b17d454912870b9b04cdd7e5e8ed3874511

  • SHA256

    a3b63c5b1cd1df49f1babe89df62940b93871228c9a24b00d8558325755d2425

  • SHA512

    67fc5918a76593af915f60a9046c2b9c773bdfb2404b72fdcb36f61d773d63d817d242484674c76903bf84560a9ddc90f5871521b9a63f56f2cc87171964c961

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NS0:jvpjte4tT640

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\50c94a9ae541f5cb09073925872ba8a4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2016 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cde1b0b5f89d8528abd4b49bb96080aa

    SHA1

    6264eafe8b964c088a5d2cf84efe09f2d723938d

    SHA256

    a5da18f0856e82c1ed232ce3aca033ac337a5e846acd77206d175041a99a6f65

    SHA512

    a5bd032a9834e58a4023518dbd462bbf3c69ce0a488e84bbd720c230efb87a08b7286795801fe13b3f039ad3c8a4923e2717c81ee1219b6391e5db932bfe2eb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e4258dc3c5579af2a1a475460496939

    SHA1

    676e25647df09373d0bdbad7626801a40925bc56

    SHA256

    863d4db11844fea636fcdc3b7620bd613781ac520cc553daefa213ce0d035fb4

    SHA512

    1d70ec83e4542e88cd9dcb47baec383e13088b2bb2ce1fa11fdd31c4e9d9b74c111135c68b82730035fbce4bde0ec75b4da173ec82993d6fc10d9b81e8072eea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e20501ec73784329956ba9571f6668d

    SHA1

    874e82fb463f9d5d1e78546b58dd61d2229acc0c

    SHA256

    d4f6960c7b5b719154e62ad19573eef53a5c1347cb587493a13689eb93774bb3

    SHA512

    51da7501475c0d38b9781c98f644c393de13c1d86352b89844d3d9586354768c3e3e4d508caa365975c301feccf6af99d4c95581909cc8957d1a68c55ad184f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f127b7e8f62eb2d986ccba21eef0e4cf

    SHA1

    23f03dba6db87aa12df316d00f996ddffa283814

    SHA256

    f118d1605c94e3516693b067b9a5591db567936a695814f82d62362cf2b44285

    SHA512

    aa5e0f71664e4b50f659c1f4391208a8182e75e89e89d626a874ea8ac02ff0de9b75aae78ac2f4a52528f10611514a7e6686cb6bafaf626e52b9af5f62f8e9e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    041159b6f2041848651ac61713cab2d9

    SHA1

    983d8272c264448ed3ea93d7929daf5a556ec958

    SHA256

    64f958404e3c9395b76f1f1a0a665a9f20871554550d0aa894a7fb2688bc7ac1

    SHA512

    01cd1219fa062e9a5a9b2c8060ae2e1b64297d474b81783c5948d70a81d189f227d1ff9c7c73cf07594e2196a694d7680c7cbd8eaa1efe75865c2d4aa5084b5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4d04b52e15ac481591e29d439db0251

    SHA1

    f4c68f6e0d2fe0c13239e8ad7d934e913278d3ff

    SHA256

    d30f30780686af657bdda3f82d4d5a079568a2af3d146d43b274a9034e71704f

    SHA512

    7c0a2c72b57f6d9a76e2a95f9f77891eb162bbd3a5df9169ec0ce6ae7a3c2320298a1a8dc6416a733d531ecd83213c5c457af5e5bd371acb6bb0a84704edfaa3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0f60fab34790d362ceef927eae91dfe

    SHA1

    fe54d9cacaff0768bbf577dac78dcfe511f6be42

    SHA256

    f39e79cdadd9242e05dc825b758ec24892557d4eee626da6d4ff79e84fd3fda7

    SHA512

    a945dd6935556b9bcaee22e0ae0d87e3030abaa934797ce29b625ff49b51efe52d783f1e139adb7599514c723a2c1c2bfa2213457aa5d89e39d5086e37ebe4a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76ed632c55857156d69dfb575507d25d

    SHA1

    efcf20acf03fc96e1b1142ef3797840a92540243

    SHA256

    40c448478c6c96cfa8056d944ca1e9fb7afb7d7c61e55dee19678e832b92b24a

    SHA512

    60a6a14dad4cf266fe5629bfeddb85194ecd3aa00887f1c3458338cf359a91116c7fa925aae632ad86448ec2d1c6a7d21155ee954aba4d77974900b4b8e3060a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6e3439549862f4f570e8ef24a1d4dc0

    SHA1

    028e7b80c30d8f7b3029526c89f5dfea65bd41e8

    SHA256

    cc5535a112abc86c3426907279e2d56eb905d8e862f0da5f9a9f1a5f4c1f60c2

    SHA512

    a947306cf82fa1b4f65208458a23ebafdd7d477003cc8fca7576f3ab0293e1ef168d6cdaa9c0af9ecbb277281e8a4f866de29adb2404cbd842f2802e3818daa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f809a7c8b5201e5af4246f74a599068

    SHA1

    6903f45d794cabedca5d3bc728c52a9e833a0b20

    SHA256

    854f09d7f506900ae36db32c6b2aaf885c9c2e8373ecbdd274b289fbabca308e

    SHA512

    3757e1deeb8a39025d61036b8f89252855ab5d2851f501fffbe03816b1b13bcfe670c32e97bd4b2fd17973741f9f0850142c5281915fbafa14e5e5fedc65b6b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46a2322c3cc3a856ee5a958cabcfabdc

    SHA1

    b41fc3470e41cfd7230c871fedc2525d3588a2e2

    SHA256

    d43be9111e6b3e9c3c61c20407807e963735c4a4c55d862db3494f2bc96d35dc

    SHA512

    762a621c25706de333abfb84695b5c8df01c65de91a44a8f321376870e7e85e497e613878a59b0a6582dc6d04473777fb1384ee761ff99eec09fc9a27e9b72ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    464fdb8989696b0c35fc8e56f27eedb0

    SHA1

    7b13cde490b9633993e2b2a86cf5504574f52c0a

    SHA256

    2106ca90fe9715335e6e94d4eeb5da74f0479ff02b3742fa4e1b5dce29df6a06

    SHA512

    96b4a4fe87aef3f85babbaa8afd1d1b84758fdf8132b89be6161b510a32209d1571d8ba91350d3d16d816d3ba355527ce3b234dbcdec617df98a6edb4766e102

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2d621f2df4b7b949f55b39a9b1fda47

    SHA1

    a8ebfa82c3a5f81b3f405733bd9a67e97984d9da

    SHA256

    d5b9a1b5a983d046b5a9b3354f54d3e995b6fb0bde59b8226d3d637a258f8d40

    SHA512

    1561647dcd97832ae7df01d2ed48371bd29bc2983f88d11f1919510151165a9cf2680af5d1e9520447790813abda8900c200844f653d626c627eac5c4ee8a00c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38670946eaa26f9fb9ad11e95a3ba7d0

    SHA1

    b9d502e2dfdf8f03c2fe1704172fbe86cc2f711a

    SHA256

    5b19be94e7ad0b309466d2699eeb16b777d630abc59572cb383fb9c52bf3a111

    SHA512

    1a735d96d5ce4d0ef42a64e174e79f3f78a08de29f28af808daefdf5f8ec5fdd74b338174373ab29ec9e3b3547bc5552bba264d130cfebf6792a42a9233d4eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94eb06c90d47331e97fea226648d55f6

    SHA1

    71b42e759beb8e2664882eb0f8c152a2453cb1a4

    SHA256

    45dff466aeb29c25fc03c3922b22586205b12d65d3d0ab68ac4d0b166e95505c

    SHA512

    9de6e43e34a5b1a3bafd7c832e0db2f64b14d33cb86b51fb2c59243de298b71c7804bf6827071020f0f48353afd4fd79f70fb6c59f077afa730f1b5d621d156d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fcc360306aee6c5c0f0cb0ada1623cc

    SHA1

    c61733cba6421ec398298504819be0cfbaa42ad5

    SHA256

    e001be4f4d87f59ad64d75444967a377cfef977d4025a01d949aa191e351a6ba

    SHA512

    216bc0001ccfcdc1893ded3f9baa6a3905da4ad70060128996dfa786c16150568ce8f62ffada0598f97fcd538f95ffe2900542099b344861de68fbad20372ac0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4509505fbb0a23f687763c1249d1d527

    SHA1

    78020eae676cf99746f556ae6fb554a365914efc

    SHA256

    4db628a4059cd4be87d69fb88eb170f9689510bb4e0997efb2efe6256997c508

    SHA512

    aafda2f55f208b02f3c127500c9a0202c34e23121183c9d6df1152e64471b2a7c40dcdbd82ec9a810d510ddf285edcd53c4b06d95885c9d7180f7a63d422cac6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bef5ba240b98eca4930443267215b4df

    SHA1

    cf8ddc493fd373354753003528f88ff20faff9f3

    SHA256

    829756a71dcca5768c4f8afe8e5174890267efb4c05793af76dab463c67de54b

    SHA512

    4dab93c0bf992471f47c565892409f5806f438270110fcc79b39458e115b272dcf0f12da1e10306ef8569a35dd1980441b9f0307a830957ca042433353973987

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d676da04fd6b864d7d8f6942e956d601

    SHA1

    d475b8e4b701bc65de1279d785d6216a75e370bb

    SHA256

    bd6a2eaaeba6838162fe9ba290846d6265840666585de16691884f933b3a2e67

    SHA512

    f3aceb2a4f30dc398511ff62a19d901def73b08ce2072458adb58dd48c7d776c0f0bacdc8890bd880f3d7d03d51b909d63b38e1b4a218f8728a063c33258b53b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E3F2LH07\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HVBRC7A9\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JIH1AB02\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab1AE3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1AE5.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06