Analysis

  • max time kernel
    119s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11-01-2024 02:20

General

  • Target

    52459490219d447e1504466cb34e936d.html

  • Size

    3.5MB

  • MD5

    52459490219d447e1504466cb34e936d

  • SHA1

    231ae5e598520fef4907dbf2e3fd009685a65b7b

  • SHA256

    284c189f8fbb805f635b2b1e541ede9ef3f25f5fa4f901c1a3a2f974bfbb2dcb

  • SHA512

    2a92fda2c57275fbc2fe2bd4913b5726b7ba0808407cac96067295e688012fbcd829dd0837d64cb722cde9c5f24b590d906718dc51e4a1e2a3f738b75a9f9e21

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NSp:jvpjte4tT64p

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\52459490219d447e1504466cb34e936d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2448
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2448 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2652

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c393157bb8a1e83cb40fe423c9e166cd

    SHA1

    eb049f3e3154a1a06ef3aae3b2503dea78f5f030

    SHA256

    05afacb2039a78d6a6ac655e09c997018878197780b2579dd40442b1afb076fa

    SHA512

    28fee2347fd46e8d4e637d29a25fbef745c8029116905dadd339e7f66b9eb10ca3aae00ade0976e6588dd25fab9eac69d419d7dfdaeac993a52defcefbd0d642

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19f14b8b976c0c0a228f1dcb22456e49

    SHA1

    75873711e0f107b9c61f145cc2a18b520bd9d94c

    SHA256

    3c14849bd62d9fe0b0c28320e2a5cf021b72dc10b0d945bcb9e90867481032a1

    SHA512

    7f68f5d828b737c11364e46c004ec1da5e81a2f37133f8812ed70bd0b9d6deeb11626205286db82de56b5112c4a991a38cee8e6c0694bbd96021b4381e07927c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e480c1d97613e880e816183ba8599851

    SHA1

    d3b8b50bd93b1c595efe91f4cd6b734cf70b03c0

    SHA256

    a31b15e9607660a4a2e489c199b4070c987e9de030f28fbf68af894eef502536

    SHA512

    50147734f6f059968f39b6fc8893c2e4464d6461b588fa6715ef701bee5a90d4d334cbf3fae3cd48a9738c4aad4c5e5c7cd0013c323ec3d3e34a9bc7b4332554

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6835912563439168561bfd44198712ab

    SHA1

    7892abee3eea0cb2d158ec5cab2016aacb10f8a2

    SHA256

    2c8622a74051fe5ea1bc3c4fd3fcaf5be2e6623b8e9ea3471c19b8cfc89398d3

    SHA512

    f69155b6bc5e30845f2df04b4091267c94968699809a64ce739a9c112865d1ad221af62a0f03243ae717081bbd9376b102c356f1f07faea154fe147f9d4af2e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03741dfa1aceb85d49f041c48e8e4852

    SHA1

    dfc56ec3d775cf3faadb93b03f2aac506d70ddac

    SHA256

    dd1df1141d2a1c863f0a7423c43ddb5afd5a5244911879b9f9d775b5d5fc3afb

    SHA512

    520f51c938dfe8f06fc58904f692a95c8a3ed8a102ed6ef5b312b6df548ae92dcc07f523c00ab0592a80410ceba07a7af00dd3f51682843f59e6ee8ad94d1bdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ecf49840d0a17b3f2c3658ed2267e60

    SHA1

    1a0deb13368fd2da02783d7eb22b0208f104f4ec

    SHA256

    2061cc3fc4ce74089b3dcd80cb102fc8f190a2faf07dfc89c824c5f4cc5e045c

    SHA512

    0ab1ea7d660fd5709f5c98fc600c8acceb9941c2a9204352e3cb5bd1a73f280551941873bd8cd6477195f79b2adac38435c9f4afece74f9a5e2e8dafe944f485

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d031e4c8d02446743112dd05c18d34d6

    SHA1

    1595011fca4114dc567fdbd5a4c578a7a40dca6e

    SHA256

    a346ecf7c4df85b844cfc7c4059b241c6b58da7028c888ed720f5baf4768164d

    SHA512

    8ffe2c217453e14e0a521929658fe7f764c1c1bec229dbb335afa7ec3c5703137315b2416c0f05b5a3be759634e8483a4a884e8e3e86b77c8aecd2ce77aa3884

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78d34b6eea78cf10f049a313930cc8d9

    SHA1

    c6f03dbcc0cf13031e5f45a712e48c63ce6c2e08

    SHA256

    4b096c8a11954aaf803f58d23b6d748501aa4d167a7d026aa9e445d18d4dddd5

    SHA512

    4cac9843e3b0cc64ba28fc777a1bdf1b83e12d482512b44a0870cce9d465b55b9bbaae45dd828a8fe84a7b618c903c941d00a78cc7090c4a8b929301716a350e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f267361214cb071fe76e10f659c2e418

    SHA1

    aa2dde2f8bea964f130b47b3b1fe0de5964ee919

    SHA256

    b3247da91c2810e0858f44b0f9e2e1cab8653e29171d6d0ef3534784a146059f

    SHA512

    9ff49fd06c26046d93c20a04b95f2efcf3e76ef9de86d72381f2fa8a71ebed222ef6b4ef2c58dc5132512f065be2d1bcc5e77cb81626388bf172771394577316

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9929f5444ae26471c038b044574c521

    SHA1

    62f09109d17d17cdfe3778d3912e54b9a885faec

    SHA256

    22b742efb6c8d45fd6cb635d7fb5dc61ad9713b6f78cb776f9363a13dd870dc5

    SHA512

    dbd068eed77b99124c16fb095de65cf3cbc9095ee26e86ec744249ace5cd32538f183bdd9a1f568c016b7a85c729f462d145d188750de56413440aefe59a4334

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    919343c98f2f3baac9e9673ae36ee7ae

    SHA1

    f37e8e0b7a511225f80d3538f0a171edca74e99e

    SHA256

    5af35f9dc4433ef9a3df4fc42545550db13878fbd3af6a57cd73335409642c03

    SHA512

    e4238eae388ca3150749774f58dbe4d2590c00ed92f9e27c0e0bff4ffe32528be656b4c4191864f27b10ee48d7d91887f8d2ce8b9d78654287bfe7a4ffa47d63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7399d574a05f68a8e12f97d7664f586

    SHA1

    443e48209327b0eca919086a09275b58e66be284

    SHA256

    66996b69558e886d1d071f37a0cdc22b7fea982f4b125d53b3685e4bcab1d628

    SHA512

    7aef9a8a42f4286dc7cc9a77e20a72a99174ae3841e5f94c302ba17689413567010264ec451173eb16a9d68dcf6759ec708a487537bc9c59eef6c60808cf6ee6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef4e4b2401f84dc6e7102250a1c5f36f

    SHA1

    5857ddb920490e592858089b5d7da41a5f787193

    SHA256

    5e08ae4b3e06d29b05590797632478860955b4a9f467cee72711c41883a969db

    SHA512

    5d93594e825fab32d4434c4e6cc785f4c7773a07bba0d6bf6e6fc8e3c5a8fb8ea787ed736829f9d7501bda3949d2b938c8a54c735acb0e0080d47e2990bdfcf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ecc5bfd903325e6751cfa9057b44c31

    SHA1

    d8fc92cc5cee9c592af697b5cf99e33de813b1a9

    SHA256

    a062950b23114dae3985e76afcf887bf4f831eebba11c231c4bfd1060ae373cb

    SHA512

    470679498249f7cfa9d76bead64e80106388d6423f88ffe1b191535d5f9481604f441cbdec4c00ea5b2ca19890314352dc500710b7317f71edf02e490268ca9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    937ad5b6799829cb260bc7da682b04cd

    SHA1

    e592918377173c0b307acfd3e570ab9d72b23bdd

    SHA256

    450798753d4748ae24b5487b7086bae1dc387b1ac9702da08850011b00adc848

    SHA512

    4fe888f7eeec636bcadb518cc65d95658fe40c1d699306005c2a5f70e5ca901c4ba561568f2aa2842cccbcf54f57051c50143533c8b0c1f1cf12eb45294f1638

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ef7fc1f84a89328a0e696a7090be871

    SHA1

    66d72dc942d0f7eeca77ec72aa8a55d64b1c84cc

    SHA256

    8484a6d0e7bf516750ecea01ae3039cbed15279a5a81658a165b6847750f07b1

    SHA512

    1d3ba8c5eab8f90584693ef6cdb6adf2735f675c596834cf7d3ec5926024438c88a5d0a3ddae4629582cafb53f392132cfc421ecfcd8022cccb319eefc1c69a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e25a82a525a949f0bf8a604cf9e80930

    SHA1

    512861216d651fbc14e9f2d131846203dc4f57f4

    SHA256

    27faa7d675713b263a768f8d6784a3fd9de0a2b11a91462a9394d7903b35b18b

    SHA512

    b1745d32e7adc2b6c588fd4f9bfee95980545e60d213cfe0714350c4ae40431fe7545a3a58fe2595ec17a1d982169cf5e34bb0f116b67360286ee4c6a9490686

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77b2eec123a3f6701668c688a56d648d

    SHA1

    f83ee2d2c6aad7b1e8fe34173879337f688769a7

    SHA256

    47a86c32c6902fed0c32928fe936b6e964889b516934205af10eced5df141c89

    SHA512

    02f4533a5470ac26eac85f4ad3f0b5be16ad586ee87bc89a113c306988f95fbb8df58aa8b217f287cab616d4cfd781ce63e413e2905c878bc49809c13b92d00e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fc2f3edfdba512c404a38c003a64791

    SHA1

    c1d3c4cda5e3da149f357368289dc755b9c5c986

    SHA256

    1a8e6c22da8b33cc3b8dcae8f797f73df1f1e071a0fe8a64cdec28d071e523c2

    SHA512

    3f6ce77d9e7365b744b8a144fba9b2187f0c605187363a51b546f9420a80b10f29cbfd245f202a658e5eb72dd33bd444d57a59bb345591863daea2c9b8a21561

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W79VKSP8\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab825B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8339.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06