Analysis

  • max time kernel
    36s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 17:32

General

  • Target

    512d1e8ad2883614cb49a9705943819e.html

  • Size

    3.5MB

  • MD5

    512d1e8ad2883614cb49a9705943819e

  • SHA1

    2c8b4c48e41b23859f27a826c02dd2a89c4af5d8

  • SHA256

    d48045d3bf2a41ac72a3900a5727faccd82bd792b4a5e8a34639d81d5f5cc3af

  • SHA512

    eb56391e923cae03ee3ebdebd248c85403110933d7018455d98ad456a33f09ea3d682a59dda56dcd734bdb4aebaad8182c206784f4c1110bbe2c9c14ecf71fd6

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nfh:ovpjte4tT6Nh

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 24 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\512d1e8ad2883614cb49a9705943819e.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2612
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2612 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2636

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5118c286c69c9f4822e7e3036d142cbd

          SHA1

          0dfa4377115d03efa50714c7259c67b45e3cd531

          SHA256

          6c47b58718a61adeb454b1b3c7381acd4ad1f7f6ae42c6a5c5fd4aa089f76e1c

          SHA512

          d7effb0b938549fec52840853ac67aa0cedd00a4495cddad77d55cb576507cccc85bd64901788ffb82137dc1833c57f46300d60e960ae9f43833c226ed263380

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          89f63c19f73d577fb24ca7490e0b0580

          SHA1

          66248ec8424f81513da9548d633a678e26713343

          SHA256

          e472b2c33389029ed2b290c8c248c06ff7ad3a79e1d5ee98041080fbc2b19cf1

          SHA512

          85ee2c81cbd68428da10a2a43eb1c240659d6283af1ceeeb3b9ba6b5cb2ff69b7b926ab6e38f15c2a27ef8261c2738cd79a088330846b5fd88d716c4af7d30d7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          519ecc8c42d83b7afb7c70cd467f1a34

          SHA1

          ffa08db620c5905cfa129716e144571686ef42a5

          SHA256

          70ca80cf976d1a9d41dfbfc7584b887dfcb161ca1b0cd777ca98ecad02af9c5f

          SHA512

          f9bf3884c8e11725d8fa8842f82bb0fd1df8ba29f46d65c36d3d116fb1ea1b82bf2234252d559448e44ee7c8f1970defc6bebf6fc1a2c4c4f630811dcc1326a1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          68f9b02e759835d88879ff40eddfe882

          SHA1

          a60c97adf5a5456fac2bdfe776a9096001ec7011

          SHA256

          d51bb2e32420948d6ca93cffb88e24a368a282e66576e2891b61c81aae7786de

          SHA512

          f42241bb42fc2af4abc1f18d826ecd31053497dd44cadd71df0f9ba1ad328d315fe91ba45d06d2724a4667990964ff1eb259b23ad44cc1505f2c29f0538ff2ae

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e9793fc083ddc9f62eedb86b40c71746

          SHA1

          c087f2ac8f2f2e5fb4edea1bd7c8b84d76fbcb77

          SHA256

          c2a7a938501309ab665535bbd82ee0445427d4a9c3e2148ce50ccacf0e9e872d

          SHA512

          e946ae69f2814f036708d81fb6e8237bd455455f1acdda6c068f88700eb23b1a9041243be9e8685ece60b14c9b2d8e304231cd274006e5c988ab6f6b9f23aa36

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5179ec89c6c0c718a452c6adbb9f5957

          SHA1

          32f6ef6974c982445f71b714f0eff37b712a4b1b

          SHA256

          dcef3235f0d90d7cf5c7960ddcca9b47fbcb6afba1136cbbcc8a719d84bc7aeb

          SHA512

          86e2cab8e7c9454559bb8028e43384ce4b4878a26cc5cf83fcc6c8e29b3d8d0aea2715c19760041657b6a950fad9022841bfaed1060f63f0a0a34b2b6fa5ad95

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          adbec104058d6c667e3e4868acf85751

          SHA1

          3d8d4a143e8c2c606ea5e540b43deb4a087b75e8

          SHA256

          d2ef2894be060d1baef7662769fccf25d2b9c325e75608198111b965c8ae3a48

          SHA512

          1d6602ddb46eca541a7a2784ee98100a4306c5f52b512ed694db51c31e11ace7d60633c5a89553a01d679145c9eeeb1407d3c5e13c05323bee882a68d0524b5c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1277709401a6b8beb467b0df7008f221

          SHA1

          cb881f113c576686d010651066b30621d3905083

          SHA256

          536a831c3bf537b3f547b9cbd0be340d4c12cc9b5a4c672008d5a745c985f908

          SHA512

          69b2dbd408e53078414c1dc50f61aa75c2ea300b00e3391808baaaba89866a8a0accc616015614525b3458b04e59f269c89ac60a63eff168afe246dec5b5d758

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          98cdbed4530a381bcf000cba9f69ee99

          SHA1

          3953751ce48bb5bc1a926bf63cbf79901affdd7d

          SHA256

          dbecf56038076e7a8dc63e84ecdbd9a217c0572e5bd60d87e5f88952ac1289b3

          SHA512

          35c987b43c46b2f5a4b799840cacdcf320c01f56e2e42964a56db3fa8a0f22d86f3c360f9d3b7556530dba262e0a62cac093aa3230a400d2a527657891b9f9b2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6ad6cfd40f1b1975e2d3e4472c26aa16

          SHA1

          1e223e74fb134243497cfd02a4a10808edf1c140

          SHA256

          984261ececf849165d249816a6fe2dbb02f92fc283649b95be812efcefaa7109

          SHA512

          ea078b871c25d6e6aa563c78dfe283965080f9685a628773b9dc8b1158f40ca55b6255bbb06cd85a0111b66c2399b7e60491c9ead8b1a9aed2ad10ce502f4b71

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c71c4b225c90f946440e1c6c2016ba0b

          SHA1

          6c26784c97be24bb2d536b738e0753d570ca6cea

          SHA256

          3fc985dca35dbd493d6061b58c088bdf9ee396f5f822e61aee65e9f24ed9d0cf

          SHA512

          000fdf662cbe2cd2e87909c40cce6888f65b1c615d416f95792d8af076d2569b392040b2a5eb4fe6072b424b7ddda102158ef19380b6656886a9272cd42d7273

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6398dfaa58c3caf0decb6e6b4c7e692a

          SHA1

          3feae7afadd8c98bfded3a9d9246f36da70daee9

          SHA256

          1102185bc00b8963064085a79572463f2f8cbbdcc4089a1e40df6d2c1fcc5d4e

          SHA512

          d59f6a0af4bc5fd47bba74f92dc1610f133de656400f0f9d69465c7a4ebe003ff74aff0bf04ec732b2ec647005d3177553604d0ff49251ccaac321f729bfe79c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d70e55b830823409d8a46149eebe975c

          SHA1

          3ad57bfdfaf5cfe4254ccbb848e500b6fbc53e50

          SHA256

          7d25e6da2f2c0d3a51ac470973938af4da6bbe78b03ffbeaccd467e0ad467cbd

          SHA512

          1436045bc56a862f13207ab9507dfd30c8fecff03b93ff4e4b7a587f3ac2532065fa7bd834668e440ca4b7189d0c0a8fd42ae6e688a286c678e0d4b75cbf6e34

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b24c55963aa3ed1908b3b047ddddee48

          SHA1

          e10998d596028d9a10d589956403b4e5260c9004

          SHA256

          f858f69a956842ef34dfcbf064eef157e83dde480603eaa748abea7918d7528a

          SHA512

          b33bc96419254205159ac7e147a1e196e4b86eab8597f95ba131b27e9c6efdaa4c80dab1989976a26be4e34dd875cbd77dd7570e3501048a0c05804ddfa84a91

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0d97dd078b11f77131a15ba2028eac32

          SHA1

          ff3feda93f5118f80a35c557ec27d08cdb2970c6

          SHA256

          58fce9b97ab8f5832e8bfc474ca487d06722b2fada5bf08cf557df37349c1443

          SHA512

          f7ed3493d4714d68bd17d9b54a38efd4ee38232a2d64299e790b57e2afb4f76be9e5484a8413942f8feb9b76e7529c0157ca2b3ed5a3a8dc3305df829bced7cc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6bd8f9741713a7f57aa4415836897da1

          SHA1

          73d60e450080b5c55f90d6d491224b7d88347b53

          SHA256

          3f422444a442113418dde89b54fc0ba6c76088a6b4a458310d9a4eb219f48eda

          SHA512

          5c5b230fa392877ddedf6e03ac7456967e25174420202cfd9e8d026724fb3dbb81bd32ffec761fbec9222a6a0de7ec4bdf73b6d436d2d9b9572e43c57f76aa18

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c896860ba145e73ca3f6e5d33539966d

          SHA1

          82896a28c98661fc4c4233345278376e59266197

          SHA256

          4ce7acbe807a6905c2dde406dffa4ff6b99e7f6112ef08ee24f6da70c6a9ccba

          SHA512

          f65928fcfe0279307a63392844701f3ccc92878b4fb848ba59eaee460be9cf79a66ada6d8997d2d6444cc15e0e19e19697b6f4b25b12222f82a57654ad32c238

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          13e5af2edcc3c3a85719de28a9514633

          SHA1

          3425aceb983f829dc8175484fe7d45c6705f98ee

          SHA256

          9313ebbb6effa279881fbcee26f0e9754caeed102739ba9f5a0f4e2ecdbb8ba3

          SHA512

          1db7a18972493c57a1c9cffaf8960b627bbf04055dfa00c52814ccde53a1c8a428068884b482de68af42a6f91c17d6be3e33b2d91b177b3198af2b6da23b21ea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cb11cc599f4f018526b61978c34b330c

          SHA1

          8ebedf0d163c079cf500b90111865d42d8d838b0

          SHA256

          067e927207ff427b88392124bdafdcae7a2d8c704976275044a42641715d1b05

          SHA512

          77c2fd67084b44fd66ba890ab0eb70711fb40875ac126684ab97bd5134f23ba7842c6693693ccabfd9f7a0c5e579682f4a65df4467b0922b7ebc26c9cfe3b976

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f6205ee3fcf076910ad7ce58621f67aa

          SHA1

          251f94ad478155e334a67c398bf3a4d573c81e60

          SHA256

          8f399fee38ddf13ec79f5b69f050a7fb5fdd8d490a78cff46bf8cca4968c90a1

          SHA512

          9595898cb34c2e6682117307a663d17edbd436871c3d2c2ab9c3ec882c90fa07f6107afbef540f075d8bd72891484c8176515b2633ffc36e42e3c2e166650d8e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          291ead094291a24db28f73c9f37f436d

          SHA1

          fc253351d6b9a434d7a5f58f87e2f2d220ad2749

          SHA256

          33eb9905638c5b0fd8f3bdcc954b8bb7a13a9c637750700bfe073bb89ac7a3b3

          SHA512

          eb875a225b5fa1c1a50b21cdd7ecaf8b49f08ec0c4a518df4342010b29a93df62bb8b42e1953bf8ff1622b25a8740b3bfd1c0f7af7cfeb6b79c7838223b732d8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          93b5f4a34dea4da5927e46889cbe279f

          SHA1

          58fa8a40160977b8a74e5efe8bfcfa8539fe49df

          SHA256

          3666ed534049866771e15ff9f2ce3a40128a398a44a2d8809bd23732f29d7277

          SHA512

          f1c419ba6c414295df1312a8185095ab0b229baf0bf9ef066fa0d108e4fafb978c7e8a58fbea32a4e0bb42fef63abd3d4c624a1f949f50d4f0ef45a0ab8b65d3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2e0454713aa010f6f574baea940a1cbf

          SHA1

          1f749fd2d0f2fd96be16b28e10a8580125b98794

          SHA256

          325b096974a9917e9960ca7981f942a292c912908c7cd16e11bbcade3926399a

          SHA512

          0c59bf3a61462fb18e79f77182e228a5eb303627479c7118ab75d0ec8c109cd3766859c247c4a5099c763ab60dd6a6c7c8ca7656aa73bd6dfe539179523dbeaa

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R90HQQX\jquery.min[1].js

          Filesize

          60KB

          MD5

          5fe4d2971caaf89bc01399d112efc755

          SHA1

          83f4872762eb78a97385499d5627b202dc9401f6

          SHA256

          9af20e3d4c01742e4a34d23fcf95b5638878144d9ea96c49a007399487e38663

          SHA512

          b85f93672226375f6fca91b70dcf298b8d032c31a02b0260b14e1bc085c9387b7bdfbb115a334e2fc8730a19e0accd90ce089b7eeffdac24c046ab50378789a5

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E25VF8N4\beacon.min[1].js

          Filesize

          19KB

          MD5

          dd1d068fdb5fe90b6c05a5b3940e088c

          SHA1

          0d96f9df8772633a9df4c81cf323a4ef8998ba59

          SHA256

          6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

          SHA512

          7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YT4IJQ91\jquery-3.1.1.min[1].js

          Filesize

          84KB

          MD5

          e071abda8fe61194711cfc2ab99fe104

          SHA1

          f647a6d37dc4ca055ced3cf64bbc1f490070acba

          SHA256

          85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

          SHA512

          53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

        • C:\Users\Admin\AppData\Local\Temp\Cab62F7.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar653E.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06