Analysis

  • max time kernel
    136s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 00:30

General

  • Target

    520cb6c8bff95486fdd3994d4a2e0ef2.html

  • Size

    4.0MB

  • MD5

    520cb6c8bff95486fdd3994d4a2e0ef2

  • SHA1

    ab19ac15bb4737c653337a0d7abac316b61a888b

  • SHA256

    a2c297f5a3a0a752c54424a10299a8a52668ce2f51fa87bf222cde813402efab

  • SHA512

    8efaee7030676b9c21fce7bf0383e117bce8666b95b0162a26362f4c016d5a8f64b76665235f5401396bbbeadd19e089d1d3e03803ea61555a84d88375b396f2

  • SSDEEP

    12288:73Bssuvub+/4wXNXB0hoyCWDe+U2Yx9D/KcqbWaF0WPzlLWWfdF/:Wsg/X0hoFzP99qbDRiWj/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\520cb6c8bff95486fdd3994d4a2e0ef2.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2976
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2976 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2972

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4891c3b32c2c83dacd4a5b419d912fee

          SHA1

          310a5e87cfc336dc96ce667ae3f56a301eb4617d

          SHA256

          2892c7864c06e0452247cc0b02a9ca55ec3cdc79d3b453afdaa2c5d105070124

          SHA512

          9d89cbf1852dc5a3a10f4989cc02bc5f9daaf1153dcfc235e31b850e2d72ebd974d708cfc51120ac5972a09c047a435b99080aaa7ee83bc80d728833f624f6fc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2f586e03629703cdf306bd82a82b37e2

          SHA1

          c6b319b038466b3ab72682640b5d885cea73a2d1

          SHA256

          a552f103036948185c4411a9f3678bebd4f344ed9b5dec1eabf729ba3a5595cb

          SHA512

          f5b4485d76e03dfac14051ca4957634ce438c5aac15059508a2a5d0073d4e58d45f1eb96a4fc66c7b561b3373b3fcb328a6a03a8f73423cf9577f7ca557cc648

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2bbba27590b3cc816c39ea6f48f90573

          SHA1

          db0e2f1e3ec3a608169831411f7639f4e8c72f37

          SHA256

          03a90e6d176af4c3b9c5fecf733f3b0e85a6de4cab355fa97ffe3027db5d5c6d

          SHA512

          5f7451b4e602000f5cadc0f44b5fad40556e64fa9ec8d39ece5aa2394b83e910137fd1af8e3f3afadb7251887270a802ef8884bdee36d4101310c8f698fd03d2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6192674acb10717b1634a89f0b38818d

          SHA1

          54cfbf4d847ff37550c437ffa4080e0c0f70543f

          SHA256

          fae592162da8798c6c8b1904ce7cae8855febb7e15949ceea60ca76f173cf3c9

          SHA512

          e187650e5151e8150c262c49ab31dc98fc6e14eda42e754cfee8a26b089f47d28cf7ac10e9770a8f6dce600b0e7790d717591cea1376fa1cb9d639c48e69daaa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4fddd0cac44d3d954e1a0dcf1fc16195

          SHA1

          a30afd6dc4f47ee5d2343672b64b1dc81a58baf1

          SHA256

          77650a33edd99249a566d97bf4e3ddacb312446ee588219a5aa375e061cac485

          SHA512

          b342c5414ec1f7d5cc62d160680f23e7713a1a6fbfba9a4c72786265ce7ed495787307692f895bcd8d321e223673ebaf3751446aa2a59c75fb46c5701c007820

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          36e3a1cdc357faa009cf10065bbab300

          SHA1

          1230486099efe80dab5993c0e88a5326786b7340

          SHA256

          5bed01ee03364099fa1742b4a7c477950ec361f0d68ac957652c27f76537a46e

          SHA512

          cbfe06c9cc37038e167babe556a01d6838f11877bce900620bb16e9661e4ca7b9fa667ff44e9207d1cf7d40cfc164becdf0432db43ee95939dd32b383eba532a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          96e14625451c476fc76076dcad5647c0

          SHA1

          0f2bc3849e8fb2c8945525c42859eeb7d135b864

          SHA256

          dc5573c1c179d612e655832a5dbb0c405fe427acb42c1641a342712af10c40c5

          SHA512

          e48a467f9b25f65f07ff7913ea471bf2dc99a1aaf908629f2e42ef0a4b53ebc94158cf4db38930c3674ec5a2a3086a8c16832d3711c9f9dddaa66cd0962eb81e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          11e540b2516ba4f5f0c15d6ab9da5958

          SHA1

          9f46ef30c0778287ab27c052638c17e3d9d85af2

          SHA256

          c6d0b13b10270dcb7f23f6d1a0e05c3afd2cc0da384aa9fe0db55af2eb878446

          SHA512

          62b521e29715b5ed675054def4491f4b85ac4a1cbdfbfd78c41fd72ad613da8253d7cacae3cb5a2611516ee90308523b5858ff1f33212f4089b7ec8080bf5bfc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          027a0991daf3020b93e72b9c12fa9abf

          SHA1

          891e7ec98a85ad11aa45adb763eda67254ab0211

          SHA256

          0b63c1f623301e571a448d93b6986e2d33ee13ef4127e0525b4a4cb99d9362c2

          SHA512

          253e9abb0faafe5c9ad28fd596d20360c37596942fcafa472fdbefc9ddcef6aa13719bea032a23ecad3b3fa60002a54541b6b92559d1689c8e880b08278d218d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3da1b80ca892c0f285bf8d0ea7dc1515

          SHA1

          10f3543f7994dcd00a030fdb5bea2333ff9d05de

          SHA256

          ce39c8255291b24c5c925a29e998346ab41e72c899941a781185d86199efe0bb

          SHA512

          42475e1849a4cadb76c56dfa2a1a34edf6bd2eb074f70d5d4de4ed4f856267040224dcbcbf47e636f98e3a5f5be061f6f17ecbb39be4dc606c4ae8aaddbfefec

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1da51350e023fea5ec483d88655aa7d5

          SHA1

          75a116bb2b5472670582d4d191789db3d73e8b4b

          SHA256

          64b8790c8a456db2ff858318ba2b690dfe52b22958f74d32656fa69a7d22ee36

          SHA512

          7767462c1147f66ea26be405f68b989019712293da161e7acbac3f1c035f30f277c2d39bffd1fc6e61a6a3ec7b19179553dffe1985dee03805b85a1286856d05

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3e34f0cba0344d6ff15cbfcc9b61432d

          SHA1

          8010c54564fe0c5809370c298f203620f7ee09f5

          SHA256

          6937f5f9d639360c60f3c794d712f91b732480336b6218ace70506554ef67719

          SHA512

          d99ecec5c5e1e1410117b8996ec1c8d040f5f0317b514deffed5521c3de923a4593be1228cadb81eea34fb83fe0330378ca72080dd47137f91f468d0b8379a92

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          922ac15b46fbba2f8d98d2f13ae4a65e

          SHA1

          f6ca64f0a36480e119b9af9c92d32f6c0f8925a3

          SHA256

          6828b97755e72dbdc5347990e20b0a95cf3c45f25cfcbbe389f0d4bb847ff81c

          SHA512

          d6ea2cbdbc9f21144538c3d19323e8b05a98d88e9fab071829ed22dde21d1050e60230405b2f59922d758c292276658e9ab7ecfea9b4e02f537f238ee9a7f9c5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c4c5a593d26e78ad7e534d35adeb046e

          SHA1

          826938c2d628d16898866816c2fe2d21e7f9fffe

          SHA256

          349630f092f67c429bce0115d224b26a0986574f8a657c9a20783a44565bc1b7

          SHA512

          4ff50ec3d89c662777723d5289e2f5e758084bbb3c60950cb68eeff6e8e5bc5450533d4579a64d772a0a98460637b69ae4265c117aeb3f72b8a3cbc3215ed74c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5f97f08f3b3cbbfb750a72e3edc64781

          SHA1

          6e70c3c133f378c5b86be208fd27304f073757b4

          SHA256

          f16695b16f2f56044b4e84dd5d72eb8ccd6b40ff094662b1652db20d4362a52c

          SHA512

          8b7e79c2fd3d0d5f470a91126460bf7315d3a51cc3b30934c65a354fc01c380c4cb944a205ef582f00ab5b423273a66a26b451126340ea2507f29b35190a64a8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bcae82ea6021d4149b77f89c18f18d14

          SHA1

          a365dcd76d52c233c31c415b883e27c8154f2baf

          SHA256

          de9c2a28d062706b52745977562b40d86fa38dcf52a72b7d624a4bf610362396

          SHA512

          205232a07bf6e80559dd5c49efd1164acc0a3eddbab8ec944023509a277ab32f7ce2062eff82c0e57008f850e6de0e8c6814d2f84d0718872ba24ac5119d0b5a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1a284f64a83f1344afa1f662186a3877

          SHA1

          f66c66bedbae703c1146cc112e949a8fcd6990ae

          SHA256

          0bb7418fac20cd1cb00cbc4889f1886a2c7b885552a5241d1c0fa485bc7c257e

          SHA512

          68c17d3dabc7f30d3f8576c81a4a04fdcca5d028675c895e0f2ee7fbacd9b63d409657497c1657f19e995335fb36e729ebc8262b5a29ae4b011a187830678ee9

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R90HQQX\jquery.min[1].js

          Filesize

          83KB

          MD5

          2f6b11a7e914718e0290410e85366fe9

          SHA1

          69bb69e25ca7d5ef0935317584e6153f3fd9a88c

          SHA256

          05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

          SHA512

          0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6WEH2YLI\jquery-3.3.1[1].js

          Filesize

          265KB

          MD5

          6a07da9fae934baf3f749e876bbfdd96

          SHA1

          46a436eba01c79acdb225757ed80bf54bad6416b

          SHA256

          d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad

          SHA512

          e525248b09a6fb4022244682892e67bbf64a3e875eb889db43b0a24ab4a75077b5d5d26943ca382750d4febc3883193f3be581a4660065b6fc7b5ec20c4a044b

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E25VF8N4\beacon.min[1].js

          Filesize

          19KB

          MD5

          dd1d068fdb5fe90b6c05a5b3940e088c

          SHA1

          0d96f9df8772633a9df4c81cf323a4ef8998ba59

          SHA256

          6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

          SHA512

          7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YT4IJQ91\jquery-3.1.1.min[1].js

          Filesize

          84KB

          MD5

          e071abda8fe61194711cfc2ab99fe104

          SHA1

          f647a6d37dc4ca055ced3cf64bbc1f490070acba

          SHA256

          85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

          SHA512

          53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

        • C:\Users\Admin\AppData\Local\Temp\Cab4684.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar4713.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06