Analysis

  • max time kernel
    141s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 03:51

General

  • Target

    5275378283b43692f3f805ea8b6d2d55.html

  • Size

    3.5MB

  • MD5

    5275378283b43692f3f805ea8b6d2d55

  • SHA1

    2ca58c8a5e1b95c974aa9fb11054bafe9716050f

  • SHA256

    b1dd4d8514a545e7ac8be92d20e94f779a8372d09c8fdd459841d9ce3c3f9f9f

  • SHA512

    df336f288fb93bc270ba61d40bfa8238791995d247dfb68216059cc3386344eeae20c4f88bcdc8641961d0de094fac1b77251ad06810f92fe0615eae1a0a46f6

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NA7:jvQjte4tT627

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5275378283b43692f3f805ea8b6d2d55.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2824
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2824 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2936

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          914B

          MD5

          e4a68ac854ac5242460afd72481b2a44

          SHA1

          df3c24f9bfd666761b268073fe06d1cc8d4f82a4

          SHA256

          cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

          SHA512

          5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          1KB

          MD5

          a266bb7dcc38a562631361bbf61dd11b

          SHA1

          3b1efd3a66ea28b16697394703a72ca340a05bd5

          SHA256

          df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

          SHA512

          0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          252B

          MD5

          1381eaae478cc340244bc4c06efad5b6

          SHA1

          12ad3e236392e1afa7fa9febba939539e4abd219

          SHA256

          ce0bda175e869dcc34c6dc68899ba35fe238b8f76098aa81b17f6f8cb4e208db

          SHA512

          802fc67fc7912ff683fbf10f84dc37e9a859d85d2c0de42267f4d76b51d6b88240c863033ac0fc4aac42705c175030012017a88bbddd4b42ca9ee9216d7de1d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3dad624ed845fbe871ff5e148ce6cc2b

          SHA1

          f5f3b08395360aa7a0761e4120cde3e33be03782

          SHA256

          ec679e5278b76ae7357d72d6f01ed3e3caee4bafc253f9b672abe561f4ce155a

          SHA512

          6ff1ffe6fa38e8d6553840dbc324e569a72fba1d1b549d0715d079ffa7e28b2924d5be53e80a9b760d42cf0438a1d0c909b797809525195b361161daeb0bd548

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6046b079d75448779548ab3cf7fa94b0

          SHA1

          18c496d06513aac739eb4b8811396b8af0835bcb

          SHA256

          11942ff3e7761fe7dafe739e20a6b57a2990b6ed5181a883028d519e01bdd1c0

          SHA512

          b89f57f791a23cb201959e31cd3d3ec685bd9a7b52bcaf460491ba66face92ef5d64257a853b9e276d6132fb268369bd3eb228b9fe78692d89bed6f23e579e62

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a88ea47059e2a0f713e79b754f0080e2

          SHA1

          6335ca708a69db64878a7ca3a44e0fb257a02cb7

          SHA256

          728cd4cac960fab8ac86ffac75ac7422485f702085ca30486a141e18fa224f53

          SHA512

          aac29c243f0f04ed70ebab4730667caf712af17adb12cb2454008153da24071b8ba2d6ee540a0757ea629d720cda9174cff8b27ac290b1f5aedc64fb8d1650d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          89087fdb303798727420c80189c2e8e5

          SHA1

          48d091d221e36ffdf13f355f2142f79f8a4382a3

          SHA256

          066dd2213a0cb8b0566cb7c22d35de295dc05df9f53e1252d2cb8d6a9aae4a35

          SHA512

          89f01a02982d8e440df17bd0830e5b80bf5536ca148b761a345af978ecf29285fd0b41d0baf37f5dbeb83b214841ce62755f6b726405ad2a7094b7ae7ab580db

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bc7e58ff1edbcdd10bdab2ba92bc0807

          SHA1

          b0da9275915b38e6b2bd4ae1f76c856b25d39835

          SHA256

          3f4f66e044a77305127e202196c7faedfb03c12d5a3d1e852affa4135f696cc8

          SHA512

          66e3c31c7e0ed4af3064097ec87528201820934e51098399dfeb71d1186686320d3aa0acddff7a4277ac34bf6948d35873aad79b234bf3fedc21263abcf239a9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3a3571b87d018bf3089c8b83b1ff6a3d

          SHA1

          d8f2459acbf54ae7f7f64c5cb57e57fd7f96d4f6

          SHA256

          296ec174d5a67b0f4010d5163bc18d1507fdedfa3915b9994a6e0a90406636fe

          SHA512

          fc67138409d096c058949fd5a6d6b62e2966460013f66136b6e406358a985ccc25f3955fa7f8a0a0300d879296192e41cf5defb3a7bdbe9c5fe1f1e0a8116d09

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dd8815769b406eb70f2692c2f280c80d

          SHA1

          45c85b7d005aa7081555f93fafe89907d9fbeab5

          SHA256

          35cf94b738b6be8fe549e10e78db5d5c76e584bef0e29b3f4639ae6bbde0ff19

          SHA512

          1954758bc6b8b0708dfbff36b133963303aceec90bb513ccea37e52d5cd31c42b0cfba6279a267abc8a0af0a958c956dc3296936ae23b25f5a9389c4c9f20a58

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          81b6af2f2144bfce9635e5acec4b5407

          SHA1

          82dd1976ce086b77290691a3f439d0d0d5cecf86

          SHA256

          414b2c7155e50ba5e9598f5dbb3b67214f628f92cf2d687724453c41608fbb68

          SHA512

          6cdc1f1404f347da0c285a1c4baf8cada16ea985e58985614f75aaa65762d3dc38553c14f4e3caeeb2f5983cf1db1a060598abe7f37d97584885a8c94ff64599

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          abf2f8c5637b60ef7835277a34ead465

          SHA1

          de4fde49b3c28ea8e26ef44a05f8c5119687bf12

          SHA256

          cbad9fb622c76ae4cb04c8d6826d404b3358f64d6b25ad3352b41ee0d242f597

          SHA512

          94ecad4e03154fb363dd1c0fa6ac9260df1a98638c3b1a0e2b517bf38e411f77d8d38ff46109c7647223420f3106baeb7f9946bb236b8e3792710e9d4a951e67

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a2929e2a57d22fe248e8b699e0bd3629

          SHA1

          12b5d7adb6e35932646c8e8bf96961ba56c8a190

          SHA256

          7615a9e5336ac01668a28f5021909dbdd410efc190c5796d35fbb6dbd698ba73

          SHA512

          7a39c577212f691a63221b879dc823a77de7b6fa8c6cfdfb6edcf62c80f1266b9e68ed326957ce1d81e0394bd3266504ea57ff1f17d1efafe92bb17d38c94df8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f86952abe82faa688d6976e84c117a53

          SHA1

          6a7a37d7a319fbe9449da56ee46521ec087ca7e4

          SHA256

          82e31de0772d2d8461b1106baf9def8122aec9a885883598fc53796eecbcc3b7

          SHA512

          cf419df640211d82a84093eed53d231acb705e530dc44c9260a584ee74ca46db7db7c099d4b0b23a28dcdb93be18c18dae15e58f3780cf5c4478957348d8946b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          242B

          MD5

          7808dddd43325f14f9d2cf6ad057098f

          SHA1

          7447b336635201e6fb9b861bae785e04d0f1f739

          SHA256

          b5107cb2c258cb32302fb14e03f4ecf74111d7aedb5feefad2b8763233e4e861

          SHA512

          6f89bf19a39f395e1eaa0bdbdab97173acd0dd195ead3293d2a85836ba545cfca7638429d269679c8492f79308a6e0fde3d2cd0241502143be98431a2e6bff48

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          242B

          MD5

          7f6ecf0e931fc1111cc071553c8e65f8

          SHA1

          ed7be2b12a16e447b1ae51076b01379bb440a9ea

          SHA256

          3c627fdc9d7d739a235d7c273b482fb659cdf5637f399eb21913511b579d05b7

          SHA512

          836b68835e381704ae89935841a60c68de8ba79ac4b45313840a9c48759f689159f2c1bd28178f26d8a55ebf0fe9bcbfc0c40db1574210a9c6414232b79a6f85

        • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

          Filesize

          4KB

          MD5

          da597791be3b6e732f0bc8b20e38ee62

          SHA1

          1125c45d285c360542027d7554a5c442288974de

          SHA256

          5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

          SHA512

          d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NZH6J2G\beacon.min[1].js

          Filesize

          19KB

          MD5

          dd1d068fdb5fe90b6c05a5b3940e088c

          SHA1

          0d96f9df8772633a9df4c81cf323a4ef8998ba59

          SHA256

          6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

          SHA512

          7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\99SHBJK7\jquery.min[1].js

          Filesize

          52KB

          MD5

          08b91d7e872cd82afea73fe150326382

          SHA1

          09356b0490ffd059aa835bd2593b2de725582baf

          SHA256

          781e07aa726dc64c064c8897a989f4ec3f0eb0b46de3aaca9f0dd056fa8e906d

          SHA512

          6b4155a8755feda18dd415869fdd2378c7e3de7628853542a02ef9a3414c535359064796b0922e52aaef194d9d35c0081a60b14aeaa1763a6436a566aad6f722

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ILPW82KX\jquery-3.1.1.min[1].js

          Filesize

          84KB

          MD5

          e071abda8fe61194711cfc2ab99fe104

          SHA1

          f647a6d37dc4ca055ced3cf64bbc1f490070acba

          SHA256

          85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

          SHA512

          53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

        • C:\Users\Admin\AppData\Local\Temp\Tar1C6B.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06