Analysis

  • max time kernel
    141s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 19:11

General

  • Target

    515f39b055a66e712db35e14f8846560.html

  • Size

    83KB

  • MD5

    515f39b055a66e712db35e14f8846560

  • SHA1

    496d67fefc066e96cbbfcb9ad052efae187c88d6

  • SHA256

    c58567536f21aa31fd1949a63d915829c93f86f52617bc429b557f30600d1b5c

  • SHA512

    217771e71e0d283534a09aa5fa11a4de55209f519cf20e415435ca40ed27deabeba2e03264168092fe44c3694f7794bde97fe76ee6f4b447eccd431397a58b41

  • SSDEEP

    768:jS3F/pCEXPEo95XqMC+1rIdioImc2VyMbblPeK0pN:WrCE/ELd+1rsioImc2VyMbblmK0pN

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\515f39b055a66e712db35e14f8846560.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2288
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2288 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3068

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          90b818deb26870d75d52a71d50c4ca04

          SHA1

          e1212a5a61aa3f56d1f0f64d5d0ab07867dfa4cc

          SHA256

          25d901b6081939711b7319a805f2437581867a9f5e84dff52a6c6eea5cf47ba8

          SHA512

          825c27049917c6c96c8a94ebf016dbf85400d47a7864d68adf400f227dace2ecafe5d160fec6054a0ddd8e8d8a00add3ad889f363e6b30324280d0137e49965a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e5907c53ef796aca296cea9462d86dee

          SHA1

          1ff01f9b3eb5818dc11d3205674a923a8b6e70e8

          SHA256

          ce20bfacad82367c2b59ab25690bdea4cbbb1c0963f3e35eba3a33e216983915

          SHA512

          6f5adfd2e523aac81290f00f0bd4bccfe2aa7ede42fefeb2e957bba7a2b926425fddfaa0cea2ebdd6420988efbaec28a7cd3a619903dfef291e769f786ce7cc5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4ff45919720a21200a4ce0c24ff9ba18

          SHA1

          75573ae3e9fe22069bbf51617c254769bd85469f

          SHA256

          3db00b3105d86b492916850cc2970539f69cf711091ae4f798bb53adf05e56ac

          SHA512

          042b57ab614888e582ef1458f8214645aa93ff74cb3140b0cf3053245449a342d758679d1ff2091644525e7d3a08bec51fcbe07d935f97acba4dc8fd2637ca98

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dd4d94bfb6424b4e08884d347c4ed17b

          SHA1

          eef950e2ef761460742545406033a73c00e4172a

          SHA256

          a20fea6d0ec161a868ee9eba7486294c8fae43767b866e9ad0e0728e4ce34dd1

          SHA512

          a33c372b0d27656e16866a8b0c1e8f4b4eb75a2daa806dd037b1656db4b52dc87e6f4ade702763d222361d63dc392a092fb74fb33b9681c5f026f54615b4418d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a33bd7bea11024cb5c3e6481d735ea78

          SHA1

          68d345d7d7e064a66932efaddb50c1a17edc2f19

          SHA256

          9ada1411a8e821d82d14d688253c3b9ef98c01e6cbffa56b25a5c26239b8f734

          SHA512

          6544c0e0230e61c157998ca341d3fe3405d6d5491c987741739a7c194116180d589aad78ced3c66bbfffe68fd6eb821f6b9381659f82f81149b58235ce3d1dec

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d77275141a9c68e0285b6d74bfa9d467

          SHA1

          48574f1078382d448ab371637667a473ee356842

          SHA256

          eace3d6d6038ab3817ab71f5b6655fa392d88249ca8369f811c4639468869266

          SHA512

          79c929f8c523a0a27d5bf065adf354c09e0debc9749038c649fc5e8f19ec2bf393a069dc6adb69e27f75635ef229f3262ea1f2a53f2b29811fc67c2f5c93d591

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ee1b5bd2f2a856bb8020d968bd5d451b

          SHA1

          ed840ff05bfed11feaa4ff2f0625e58bfd1d17c6

          SHA256

          c43f5e751c0e59dd9e53dbb51ca80e24b0a4b650038f5e50eaff8b406b2937b0

          SHA512

          41b01986c4f8cd22260dee2748fb80d90229194a64189f64eb9b102e92afa6d42ceae4b1f7fef0441b6bee3467b310d384178ae24929b9240dbaecc149918781

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8a5723d4686b84229c51ea63466a1f2b

          SHA1

          99f9296a110c5b7b5ed52e1590b7ec2245310e74

          SHA256

          9fdc83d6cbf2e3827a6dcc973e8b74a5dc939bf5a8d83073ef9c2af2a923e4fb

          SHA512

          4c7867493a955fb91467d4a4face8716cb3b67cf9e50fee127221f89480dd04e9668e3320d03cbc9a5d704e4d42148b1ed0753b9e09812395941f1130f9ff97c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          78b56107299e08fd1d7f490a534b3b93

          SHA1

          1d89a93cc42214a2099bb42aac689aff9c9da545

          SHA256

          db0840b4fd9f1e2ea84dc1376aeca55dbd90f0b7e1a1e0d2fd04cecef09b5d50

          SHA512

          ef30c331135ebf088cf06c4c169ca63da128c9f25d35c457659c347461ccf6f2f22a79d51860ee8ea641480fcbcc9fca7b2273b2c2aae0e5eb2863b0f1bc9dcf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c4c4693ca5b058bf399ff6c2e4983d0c

          SHA1

          fd17dc3fa3809e0b1514701fdc7e4fc2ef9ed05e

          SHA256

          81151365905291ab12316ee38ce1cfbdb03e2bcf75d271104d3c596aa5a869e2

          SHA512

          1dd19cdbdd502ec6aeb68827f5862d125cb962ee297f94875cd886bd7af5d2b6b2d20565e3d6edc687ec1eef9c46f55228d2aeb0399ad37e1b03e8231d715228

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1ef4ba79e3e1dbe893da2b45ab966c8a

          SHA1

          b9a8d588285038748f8b4b0472a36b5a6f00d165

          SHA256

          4d968f1a30d60b6ea633cbef843c456568df45a732ca75aba7da95b26b9bef58

          SHA512

          63f8b20d18c3c4b9b085fb3a3b5f4bca30b100508eb3ebef683987b8838d5856ce73aeb053c7ed2dc43993a958ffe673784524150c644a0eab0304240bd119c4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fd1191e74a14c5e5f8f5edc3327c93d0

          SHA1

          bdefb1cf8bb7077d4e9bc44f01af26ef4a1ec7b2

          SHA256

          fb7d1ba7a0dd233c57690de4086b25eec990c976e5b36c40aef0ef1c0c52536c

          SHA512

          22ee39655cd6cc2bbedacc85119b707b1cc2b398d9eee4490cd467b9f3515bc27e284a62b7972084ad7604c3f743eb6275b10c8a26dacd55ab9bc96bc467e5c1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dbbe0c15d41215500b05b0741677d47e

          SHA1

          476b831e98b9b5b103cb47320d86afb73e318377

          SHA256

          f4311b26a1548233dca95d7f8d180eed2ece8581105f8254e1733f16d066d066

          SHA512

          8d7ece465044eba111ddd574099eb5d6a3393244728d1e624a50e5f113f2cf3a3cf6f44b98fa65b9b5b4c2e5227c2143139d05ca65aa39c7afc3c042c0601487

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          00d5d891b176566a95d9ebaa5c3ad81b

          SHA1

          4956f7c31a31bedd99b8263411b483e52aca6564

          SHA256

          193c502d6af22a8e8f878a83b712b3bb39d172a24f87e6a09b8de6a7a870d9ed

          SHA512

          4e2607a607eaefc26c84a0400a4027bce886880c133d49060c3cb247f12ae1eb9ae0160b47faac95308f43cb86cdd463a5fbe480c060aee0a980afa4ef0893d9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b86fa70356835e22efd6c5e477ba7f2b

          SHA1

          c4edabea9e9394844b6d22e7137fc74b9f78b0a5

          SHA256

          eb2267d0308c9ba0b80149c4c9222873ae574d3086c5d1bbacc94de8ddb8daf5

          SHA512

          8bfcc24f1fa36b68b8e9dc87a8f12f374c07dcfd74115ae3368d7d1f1c4162e5db027fe0ba81d5c98f2d66a4c7a30697d38529d81e1b5d1f6e11e2ca801e4386

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a1db1661c3206acd8b59aa0d208ed2de

          SHA1

          c4aa332fbc7ed764302b59867769c7892cd55e0e

          SHA256

          455ecf5bd470da76e05f7009fbdede5f58956c27724efe5022b71246ef1fe46f

          SHA512

          5396e7c56f350d3108150e114030de73384c5d092a18a46611494fb36bd12831e086e9ea677bae2fdfe7745106d039577bb2e81ccb7bc7466c651a203fbcff09

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d3c7c38903d88998ee4f5a28ee45a1e7

          SHA1

          f878ebb57f2b77983f5dd91bf2053b158ae7362e

          SHA256

          b67c91dcb07a1a9cc774e2ec402213d51d63c2a36de944175428c26b26437859

          SHA512

          ca172a0f3f58b6fceb7a305ac957a23464661454805151578b343dd9ece3ff25e26a39ae5024d151fcaa96124a892eb24081b9f125c1f47a5a3c69b04b262a74

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ea950421354da5723f10d242dc89adc4

          SHA1

          7f1f87c563ec3ab3eae24ae8c3940f9ed39758ae

          SHA256

          c82afa5489b517c1a81304a81bfaec5235f470d6d4e8c1f27fe82677db4ea38a

          SHA512

          9ab5bc93b525cc401d240b36cfd829521bb0e0408f99e129cfc4d99251be5025d29dfd2b17b5e8f73c3d43b8bfefcc7715b4e5600fe9aa5ccd904ce468619d37

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          54f3e6009b2306bf40c93caddf51a599

          SHA1

          d94503795331680c3ea11a517671866241660001

          SHA256

          1ac686271b929718ad58285604e20c3dec37bc56c6fbd4334c3a6c4075020423

          SHA512

          6db7862ed82d556649d392f9213c09e25dba37f92e854a02e5fbb74f386d9fad005c4b538542b6c2e537632ca659da0a0d48cbb22d970d6ef380e3770d3f4e3f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          04c097fab10cc5522418d75c769b9fb4

          SHA1

          be2042b4f6246dbdd10e787cf7e3735f0557978e

          SHA256

          5ebbe8883f3a6e39baeed68f7a745a9ec009552e5c4088ce27f1c71e57013b15

          SHA512

          f15f159c7c2a9d9216b7c8c022082ff24806607d31487851eed67f40160be537deb14fd38da90bf8962634ca8a02abd55078d9a7dc95caa04f85c67e67e8b37f

        • C:\Users\Admin\AppData\Local\Temp\CabA565.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarA643.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06