Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 09:48

General

  • Target

    53300924b55764a7e78a173c73a22c1a.html

  • Size

    53KB

  • MD5

    53300924b55764a7e78a173c73a22c1a

  • SHA1

    60d208c82604f733d1af2fcf8228d3f953b893ed

  • SHA256

    dd335ff32ef02b09310d26edc8881a08fe44a17cac5fedc3bfef6c6c38453a9d

  • SHA512

    5c3d2dc8d1ac400ba055f5f3ad6f0890067dd4833767b14b8540a7c8f3dbf634f4f71887a5c1222d1e75d2d43d57f263ccafeccf09dafa2437d7e61038db3fd5

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUXrunlYj63Nj+q5VyvR0w2AzTICbbroI/t9M/dNwIUEDmDS:CkgUiIakTqGivi+PyUXrunlYj63Nj+q5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\53300924b55764a7e78a173c73a22c1a.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3048
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3048 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    daa7843e2b1fa34fb7dcac03ef8b9c07

    SHA1

    0bf659b11f00e3dfe502db9580aa54af7f2ec559

    SHA256

    239998927327ba2f8654fbc9678da72d73d4b73bae1b6ff47e86bbec77313d44

    SHA512

    e935caed9f7c0cf9a11b0e6a6467e5bfd5394b1d2f94b9ea3602568eabc1056acdc1f7aa1a8e65f921b6fbc5a81d9c7b6b86c2c5607017db272eed5103f03cf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfff9abead31510de2db4865e9da017f

    SHA1

    1c434c2ffc8e057b969a21d1dddd9d9a16b3513e

    SHA256

    6affd5362a6a6f2c334db80c047e8761909785746eeb8fba622c0b0407624011

    SHA512

    eba384e2beede969c05e51b9dabae8af8cd3393e011cb275df2c7e20b6e8dbe5e4282bcca2d66b19ffc6b18566a56f17024e1ce8e64a62c95496e4f8be69065b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a72502b23e6f9e089caa8147633da43f

    SHA1

    fab0e0b152f81636ae0b1f519664939c958a581f

    SHA256

    84b13f75fc048dddbd30b3e11c28fd57d8013bd9e981896111e519f0a89981d9

    SHA512

    37cb635758aff00b1bb2f452bec654f4eed59069b14d30468c719492e3110776e0bc93b1dad5d19976eba54e5de343b75ddf12f1778ceb910e3d963213ba03a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ae2ebb490b750698b808dc084139b99

    SHA1

    25bec25affcd6abbd0cba04ef4c7a736e0a6c01f

    SHA256

    17449717af446be77e9c13a51aee7edd21ace720246efece864851e66dc2f48e

    SHA512

    cabd9bc3b447fdc1e4e38ac9bf96fa9e342ad5d45f9c65e1b400598829f0b26f07aded09c4de2eff0f4e21d2283f19cafaa6e5a07a3ff1abbe8686adad8b6e28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d2a708034446dc6e623a16fb3469c58

    SHA1

    77b3887bdf5e79f1081c62b604d02efc43ebfd58

    SHA256

    8bfcc0abfc2c591d7f2bf48626f0e31dbea95e85256ab6614c3d4d449ff2eb8c

    SHA512

    11ae9573a6983a0c9e18c591e81684d3ad11df784a5ca84ebcbc43650ce1fa91461fc7c2f04c0ac9b33f1e83096f9575581cf59f407017c0a1a075b069c69798

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19bfb56efffb47aa7b5ad7ee8a9351d0

    SHA1

    df0c8a583b891029f7ea4c9f4d85b2f4b2d2ee36

    SHA256

    9e63a65656512fe218947251dcb0edfddcc12c78242bd7104b53b4eeac40065f

    SHA512

    a0e4c58233b3717a6cfb6d8741589d981454aaa5e4814f494d80ea501b7505fa25fa4b7ea125dc5caaf63c68ca30f600a23d877a3cbad1507bb1162723546ab8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e79f170ccf2b2a96ad7f66a5bdff3a9

    SHA1

    3b2e8a8a0238bdcfccff5994998eb74a6f2b1056

    SHA256

    4372cf27c9a05a24a9942649f89cecf71aa34b3dbdd09674a5db2eea4924e0e8

    SHA512

    596c57d5165fda2b18bfc95c886bb2dfadb37f380f474c273224c882927c5073c62fbb51ee1da0f03ef061dc255e9c42557e6b87b7bf50b99b018e2e7122c32d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d9315e6054f58946347291783f26af7

    SHA1

    091abcc729f951a80d487dbe9ef313b409f4a455

    SHA256

    1ec8d409f4ba07fad923aec78cfbdf62df7533b1c6a424868bac4e81be32cd82

    SHA512

    7a8a058ada5a2ac3c24b43375d41a088f11c14a4ca59d85ccdaca0ab5deb875a90f69b2f41358a7a1ce6125bd240429ee83e501e7424c27bed84db1eb5d816bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5723180e78b7c1d36922fbbffb285f7

    SHA1

    e08b01bae743c2ef1ebc8c9b238ea43c92bd2c04

    SHA256

    a19f803fa7bdb3fb05e679237d230b120d61da04a79d50da42a1a8396cfdbcbf

    SHA512

    22ef526f7250ce584e072e31981af42641fb0870b7693d3b2de96666a541f687434ac48cb9069aa1ab587539e0ac8c2797d557470465660b0aa486754182396e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    993a6246a32b27fb5d871532026f3864

    SHA1

    134062eaa9ad7e9309cfc0e3c065a26dbc673229

    SHA256

    982dc341e1d335a079764499df36f0db873d3656ea4a051caa853f4e1b43712f

    SHA512

    3e16e4ec4d7514af4d9ed1407d5f806e58ff096aaf548aab5d48898b1cd90649ae3a07bbf5c8fed9f3b7071cd0e954cfb12124c14887a03ec0ce303043148aae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cea81a4dba68427277926f5f4ecff0cc

    SHA1

    f067890505e05e61a16f9470426c968d9874e2c7

    SHA256

    2c32fd6d0ce4acaf842a20b4a4cdc03d5ea5dd4360919ac6d35a97c7e90ce3eb

    SHA512

    e13dd4f01314d845a283dd725901587cae3cfac01e4a21575df6df351855b8c99b8a5df3271b157cb855d96ac0642755287982f0aa01e71cbbb6637ddc37833e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65646e8aa2aaf9691fb08ad125dc30d6

    SHA1

    0b48a31f1894ac151333358e0b6d2d0506b845d8

    SHA256

    a34e0ae69a6d3f45c6bb149ec2ef36914f4b887679c3d95f6245f7459d64714d

    SHA512

    a7b080ab1fe9569683104447563c5e57b6717f8ea895b884575cce0939bc67fe1423cf047d65c9e6c55e1b49b066655afd719513b215ff92f2537a9a7724578e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c044264f02cdda68580b27b4621a8e06

    SHA1

    8cb13e40398a8f0754d7a89831ae406cf88f35a1

    SHA256

    42e0d57f5fc925aa0925e053e34abc93e196fb0a08f818609677659e4e76f8d8

    SHA512

    98791bac673939e4380dada465b6e7811c3b3db59a64da51f61552df45b693a6618b1f7c0468f3b91f192b541835aa6e25820478166a2ed23c96c12509accad1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc69db23e9f06f511c7e88b93467811d

    SHA1

    c52d93805cf697f2473fb261b6f925cf2fc1e43c

    SHA256

    ab3792a7652e99ed05d9b4c75b332c70ce5a0260eff3ed5f39c4b19ee2c843ef

    SHA512

    877893ef1f057c1c0398a2f417ff47d591d47cc8fbf9d964e7abb5d77e420410aeaf54aa2a49d9496318a97220a1e2ebc463dbed118509d8a5efa39a7880d86b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbabc6344e8d103701144c1ce69cdc50

    SHA1

    d9032d5acfee6e63b5c8a85d5a0dae13d015ce87

    SHA256

    1f62581e22aab312a7294dda6ea07204db5b854ae0796fb7f4b4420dc445b91d

    SHA512

    0055779d6708952a7bb528c613b0384050ea23538eb0e72cb816cc19875b3987ab14e3fc5e186850da139201d14bdbf1cf14a47d621d0ec76613c6dd25f25434

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86d46da937b36e072303fd67862916bf

    SHA1

    6f8327b02ac030ba7a4612159aafcc0cf1a57e5e

    SHA256

    2021cb994c2ebe845d7c4989481da4725d54aca79ed503334c214995140cd38a

    SHA512

    5b0768fbfeb3e1591f1bad882c201185f36b4c7242283a323177d84ef76bed9c786e973d501c20a1aadf58d666f4f0791f3325780a6a1295d302bf8fe21bec30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6afba266f7e2480e32ef792cf07284d

    SHA1

    1b9de8700390b8be06a0012d39e94f9908966f55

    SHA256

    a640b63ae04189605315cc87a471a9708960a525e1c7ca84e829a10affb97beb

    SHA512

    fc82e38767c7f250168a87ec5338afb047b4cd64b1273966ca04e3c2240b3fdac7ce7f77a3999accd2bbdc51bdb06ae829e228d824b67d6ec37bdff831264453

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cde1fcd517db8d32c9d2592d3f046b28

    SHA1

    bdee6b7a465175aa62dfcb5660d847135c55eef6

    SHA256

    18f099d2dfe0074930b3a219233a3dce63d0a991859b0a413c447c0cde703761

    SHA512

    c43f69915363a2e5ca16a8bb069326e5069565cab167ceb3ab71956d63b91eee63ec0166d2946e088bf7a21da0bbdcae9af61e249e8166d6aaaca1ca9c1d81f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2e3725df06b880a0250a0684b60f2b7

    SHA1

    03d45bff7368de694bba054a35a4e6b76e10872a

    SHA256

    1c22dc6e4e00edf8a5e57c52b630ce6645bc53f368568ee7959f9af1248a294f

    SHA512

    6a3970f08318f0cdff419d466f72f8d9dcd8691fa7c982ae33300cb86b03a9b5d4c3bb2d57f0cd83bd4d466c99b426b70a8a2386282b4ef077620e4a62ad5f58

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JIH1AB02\upshrink[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab542B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar54DA.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06