Analysis

  • max time kernel
    119s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 03:06

General

  • Target

    525deadcd8126637ea308762c955762d.html

  • Size

    11KB

  • MD5

    525deadcd8126637ea308762c955762d

  • SHA1

    52d087778f32ec1871d938c0422c26a5f4d60b6e

  • SHA256

    be5de8abf4c93d20151884a1a88011fe28d162e489a2ef5dad8bf21ff029cf14

  • SHA512

    a8c8a100c17a583ad345015c093ac110b71334d3d0069efd5cabe6d61c3f0d504822a9093c098eb26915fd0aac4ea5267cca753d5fe957001d95c7a6f6fc8f18

  • SSDEEP

    192:Hy4sMRsMq5K5tPPg/b4p7B7T7kKs7kKa27T7kK+B75Kx7RKJ7sKZLn7VKL1h7MKh:S4T85Kwo7B7T7kKs7kKh7T7kKo75Kx7f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\525deadcd8126637ea308762c955762d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2004
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2004 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2436

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          44c72e21fb14b464fb68ebdac3ebe7ae

          SHA1

          129293d4a61fa68013f51d97022b17ec66a3321e

          SHA256

          31eb6e82ad5ee71713024df3bf6c2d7971fbc39686f13d24b74f84daeb542612

          SHA512

          be940bf50b7dc828287ff47a57904be7a5d4a940e985c4f8556fbc572c37db436238f7e78a055457afa3b27e636e76f7099eaef6ed0241f953198614fda865f8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d88ad4288ea8de0c1b43cd8d058d5d50

          SHA1

          95041d2c2c66473386bf44d8f112caee96de4f9b

          SHA256

          34e82f4e2e0738cb0fc89d9cfd67d78ad82462e592caab6717951c48e8862a5e

          SHA512

          78c7855cf8adefbb2de1af27a14ba0e1c25a87bcf77907fc683caf251d86781c1072946919cb18d60f8b7937900ad0d946ea25b88c849cd565aa470cc6ea9a70

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ee9cfe1a0bab0f306feeedc843d1faad

          SHA1

          445e629ef65ce561c230776b6c58f094f38011fc

          SHA256

          021f8dc6851ad25044193f10981abd3f5eeb34cdbf487e336cee7f64f33da02d

          SHA512

          f52d4a590817f30035a8c8abd0d4b83190daadf13cd19e4d100c6b0cf02b3fd8864042fbec5a5db8beb8713571e09c0e4c7129a00b44fde7e1d44061f75afdeb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7e9d755c3f20624448a469275f41b2cd

          SHA1

          92c18427ffc69e24e5c09b0eadbc3d31407f272e

          SHA256

          b13bc289b3bc21704138d45bb3b6d46548bd3c39aa139596000843f437c7bc95

          SHA512

          34af94df7ba08453ea3cffacb47c17c9b7cb1a8f574aa8e291be7633bd9dd90d9cad56f0fdbe4e22ebdaf1c39c5979d56857d2414259b9d75749e7dcfd38a5a1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cd446c32e0edfab2f90322758169daa4

          SHA1

          de8218e483bd7c34329ec1a0b5900614f20de684

          SHA256

          528cc521ea05edd11a3f310e0796b33b37490304a50218c2e974dbf2f408120a

          SHA512

          7f0cacb8e4c6c9ba73fbf20b73c495201cb94d62712f2c0169d0ec39c32be742d4fe9fbd3b778ecc24b57a2e0b61b9b687fe3e9a649ce4360191ba24187b72a8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5a28e7dcf95443d2e0604c7afb4be211

          SHA1

          f5b07bb6886fc702945c5f64c0a4e60676cc2fbe

          SHA256

          d468fe62d2b2cb54dd96b22cb2e26ae9a1b2e84bc7ac71d71b935468d04a7f37

          SHA512

          ea17968c8614460592ed833455caf2f340145ed51804423b97d7b736b3894d9caa21f85defca6f079d0a21a4fddb225d0d6478e09273a030214395a74f7a9a7c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          babd2f2c0e86c99d2d6f238873fddd09

          SHA1

          07412ce508fe339a2f8ee952ef79ed1103bf3192

          SHA256

          715bf4e5cad9b650e5bcda6e841c6c77659c428bd10624813ca9e685a75578f9

          SHA512

          8fb75df1afb6a0c75baebfb5e13e3cec4ef61449134a8cbc6c1f1dd4462634e14bfa4efca0f21795a2e9e046584fb3a2053ba470b99b62ad7c6222bfa9547583

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fa4858b67136e37524ddb43e458b81b2

          SHA1

          b970a5bb170bd685cc2cc28679bb318212b95066

          SHA256

          7cfc874b6f1cd6891ee5f4294671cee9028962307f9f51898c017cf9a5e5a49d

          SHA512

          c2a59c15b3b0c8e7041cb844d024a64293d643a2135a4eabe444be2d198a64326644e3f04af9139b4c9159a5c0c85c7963b1e2980d578f4d621190003cbafb2b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          06430cc2cb4f53c629fdaa300de44fb8

          SHA1

          a2adb73214fe3c1fa18dccde35d6c383e71903ef

          SHA256

          fbc68850716bbe71bb515d7031b31010d94c557f4b4432108fa21aab61eda9a8

          SHA512

          6306cf7e80cb147da52671e31706399eccc964f1c2a6a58b151961d84503261e705d8b591013d2b88341d7dced752fe4527c7cfa8d34958ead164bb2a6280cfb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          15a8e7c59a557fc5fe642ca77803a6f6

          SHA1

          29e1d469ddd343589f3e234cdeb26310b756356f

          SHA256

          ed01838de807d37aa2463ed8577b29cc72fa0da1d2957ab3642d25e3a84e9960

          SHA512

          ffb68b8275ddc3944234a3d84cbbd9ab89449b9d56cf9594693932ac1c96f0fabb6007a5b8798e9160f639d76e9c02ca465f5947c46825a8292657f099fdea86

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7a94cc9c93c9ae38852690274ad4fb9d

          SHA1

          32d2084061290794704e9fc0423994771641e872

          SHA256

          9f45c1ea6d00c6da10ffb812374d21e4e007d11a07186e41abd4b5ae2539a054

          SHA512

          31e7899faa327f523de6bf38cec0cfba253bbe13f898939539505ea9f5d29caecd50e4975ab74db199c57991185c9625d6ad5eed5ae3898d0b674efe13c9af87

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ec98c318f7e947d1e0b257fdd679ba7d

          SHA1

          d420c80133dd0821f5ee6f9d14fec1c923d4084c

          SHA256

          c9b724075a0386a13d39e1e1412fde719d3373baf8284b9a6eb7ccee9730cc34

          SHA512

          68f7e7326ada434e11da085f24e0297cc64a1f87bebdb9bdfaf9e59926967b40f3f4fac6b471ff18d914dab8e3f1ad31355eacdd12aab28f5c76de594607208a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          61172d951b680d34c1ec1b2b45678153

          SHA1

          a84fb04ed30a1e43765f0839e1af35f8d54e9025

          SHA256

          b86a5783a4605d7d8a606b7f79cf6162be30053ef37b97cd0d256616d094638e

          SHA512

          5dd886427740475dc1c3772310e21ce164a1932e49cef429f1b07f794fe9609ac4edee69a6c1f0ac761c4278870cb437f4b7e7ab3bcedc7e6cbd121cec8922f7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          88c1455e5c2864c157a2372131b7bcdb

          SHA1

          4b536b8a97243c8c44cff7d251f9d69b5ef18fa5

          SHA256

          1924c9f44a23c616cd0c7761dcfe8401f575891c21b2fe9cfb0be85bd4f8aa60

          SHA512

          2389122d8028908edbf886a326058c6613b60caf5d5ca5f7e861aeebdcde374649108cbb464316df17866c8814fec76208b410ebf1ad1ef1cc1bedd3d1ee7f14

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          57ea258eccfd0ab45955d616fdccccaf

          SHA1

          5fb27b2bc041c62aca9aead0767a7c3ba6579ff4

          SHA256

          d49418edcfe76227839bc03d060974db655f90db9f950e0fee2cfb091ff0626f

          SHA512

          bb255570eca0849bebe8322ca847b7a3be8867a301da214be5eff39a6be89dbfa8b6e9203463a89d7a9d648e85ad4a11d86cc39b1de22fa2be2c63f86089200e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ccdf3ef6de3f025cc03ca16493e8a47c

          SHA1

          8e4240cc63c65739f9b75cc04722d028bf2b1e54

          SHA256

          ee3ea7f6c867fdc8b832d08d431a86f3bff914e9ef5b9ae9cb0500e0dfc66214

          SHA512

          87af6c812d51a3b5b6329076c0c69eb947b0b3eddff812f1c5d1f516c02e9d0eb2b756bbaa220b9201b63892fa2c5313817a163505b641fe9935efd84ccc3c2b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          103776101e37d3643ae610e55eabc456

          SHA1

          455ce5d113f3024a75934e0eefd09807c245c810

          SHA256

          da0546241f140cd54996eb3701238568b6c7c49c9db888425b0dad3fc508513e

          SHA512

          1a2cd0ccdae5e0095eb999af385553cdcef0d1e08645ed2ea430d017d4975fe400cbaf2461c8bad1678baadd94fa85b27f90b087dff319248aa1dcbbd8c16f92

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0d383314908e0f538dd6d1f2d3ee70f9

          SHA1

          d3f332e44f9ba29cb83b3ac2227156e993560622

          SHA256

          fa023bb0e13504f367f2bdeb974d254d03ef0704c42f8dcac9dd3f9690d3fa3d

          SHA512

          3318b0191a1866b07f2455266d4a1c6eabbc1ea7e7ac9fd719cc8166b9d80ce27c2c520c1de1dc1b134855c8b3315b43db3e9abb54007eb7cffeee0e14a1f5ea

        • C:\Users\Admin\AppData\Local\Temp\Cab1BCD.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar1C9D.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06