Analysis

  • max time kernel
    122s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 00:57

General

  • Target

    550d9a899ab8bf72a4e728d10a094fd9.html

  • Size

    3.5MB

  • MD5

    550d9a899ab8bf72a4e728d10a094fd9

  • SHA1

    f522cc37f041f4c6eb17eb665a68e2c5f0383ca1

  • SHA256

    f2f1a5ccfc5bbb9c71a34030dc2ff9c338f0a993ae9388bc34252cdf5dc5531c

  • SHA512

    f43c64dc1aeeed47641ceb12939beec541dfc58f2cdbe183bc8515116583b684497c0577e880ffc0a759366aa13121645ce39f4230a69232568fb0f6a6939006

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfD:ovpjte4tT6ND

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\550d9a899ab8bf72a4e728d10a094fd9.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2072
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2072 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2348

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f1bd6736c92fa69b28ea991ed25aa8b

    SHA1

    fb63a283d4a19232e8af91488f1295729e07256c

    SHA256

    cd2f07b805fdfba0d2cab5e1bd0c03e5771c6a005fb8450e90e87217bb67e382

    SHA512

    0693ac8d176d0b4a60e497b82f0835a08ea3f56ab50abd9d4b9e93a3d01cbdec79f0cc172d7d989ba94d76d00390cd23e1a884d212ac510e17f430a9a83ba0e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4eb33911544c2b746c0e9db517096164

    SHA1

    7e47232391e2ab6a79e9a13d03e8f73b180224fb

    SHA256

    fad94443ac43a15cb636f1e8a3d27d265a84be87e6b8a0471583ad672aaaa94b

    SHA512

    790efbc6b502748fa93c2a43921a820562aa76c72151d643042e42f8068b92fb0ad57d844fcc89e8b1142bd0adf2b180479a719990337069a26070ab45999bf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    399efeac4f8cc4764f5f5aa4ee0875dd

    SHA1

    4ae3cf4fdb56dabf0b85a448626e714305a12037

    SHA256

    12c02191095c808aaa9f4045fe5d96a8f3e30218acf1855f30399b7c0c5b38fd

    SHA512

    37c6b54a405a58035123d203e221962f2d31d03146a6ccd7275aaaa2d40f2c38bc2cd9b700091cc2d676089510c803204a64a7899fb6fdf4c53512df17b2c23b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    475a192a2b8bbad129c3ba43dbafa4ea

    SHA1

    4d15daf2988cef7cc4d16422a91982cd34221a6a

    SHA256

    cb06bac34d9b01c36f4b2596999a477ffecb738a76f1ed4858e69fe45aeb3121

    SHA512

    603f076006f87146e551473f2b4d61043c72de07f8fa8dfcbc15e97998b395afd664c76653e35b09feddda0f3900767ff8b1b31ecc9a9bcdeaefbdaa966ba173

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6006693c2bc356f1b1ed6f8cec5302c4

    SHA1

    1a2a8b81bd5f6d4b60451579a884ba6d3508aa21

    SHA256

    1defa71313527b424ce5928b57f54c38bdcafdc9a3f039879071f5bb224aba61

    SHA512

    749eb969f2b68619d1d0ff044253a220aefb61b06923069839c6da722353a7d54020c9c02465a4a8ac0f3b3c73a8f6d2cd385579b23d31feb5b5580988ff4cbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42bcc9787eaf00bac651165975cc64a2

    SHA1

    d0e5f6bc71320ec0d74a306c68189fa5a0eb101e

    SHA256

    1fcec3814bc693a942766cca60814daeb78a9cb32150e36204ad0ce7880c8d36

    SHA512

    5bea2e1fd5c0b2c3830d5408f05086d9a936f7e3ea90c0c90ab9e12c9f4834f93fef8014c10b549cd1ecc297a225f6cc2db08fce4f4fe0c36a0257107e347911

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    452b0aed5edaf56e53cf6ecba9bb5d99

    SHA1

    95d52c598d2a5c40991ec65b912a8a593a571692

    SHA256

    2eff22df6e6a1ad5ea6005bbaa972ca910b8b508bf1fd3521237eddf36599a1f

    SHA512

    378356101f333ae02372460b0afd65effc7927d98384c875e9bbef5e289e91fc707495340189d55834b87ecdcf55a4a65f7d98542062daa7767f79208ac31909

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b8ad28b3200c177bf2a013ee903dce0

    SHA1

    e9c5816c3e8bc284940306b60b933c6920efb2ca

    SHA256

    d91c0d623f43d8e9fd1495b6508f31b3f3f2f9eabad4b6f70e86c43bb644b3d2

    SHA512

    b9a548d1685e1e4d17e0704d8c261e962eedd8c3909681ef397d8b9ccb12a2e2f62c281800031765668f29d6fb48270d542647a7f6e1c0c593c059b58b961e44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46a06f4b49f924710377007ad506eaba

    SHA1

    2cf8a1e60417374f546c40c2f493a05ca9f3cdb3

    SHA256

    21b553f14735a3d1171b7764c3ec83a2c969e58e560bb4ecb5e902df0653d9d0

    SHA512

    ecbef4c9e4b7d06e4fbceb6662789e517a5618cdb29436592c15821c121ced3b56c8961c0eb746c9cd367ffdca9d142493b29371fdb9c355bf7d9afcc3a2465a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9edee400692cd6ad13172e1065641931

    SHA1

    ac0d6084d5d80e499b2492dd420c717515a77de4

    SHA256

    85ab3dfefd9b8e83bb86bfb77309518c328d2d50b5aae1c5d96dddcd76d55786

    SHA512

    394e86172cc30173bbb62f770a8160b291eebddd3b62bdc39f4f91b1882262bd3f7eed17d0185f2d2d199bc18f837086bf64918148a08ea916bde5c7ce0c10cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1eb748f1060810f06269874a9199832c

    SHA1

    33bc300e8029630c74c5c554c06e99f94865c1af

    SHA256

    8aa470d57d37e541a1ef07da17950133cbea7e5344e4e806a23cd7e7ce41409e

    SHA512

    a2b3c644c4c010b5f98d10ae1ae47cb6489642439cefb13bd8f91fb351d5bc8bb7e7324d016d88a98e935da22e1f3d0c0c3a2bcf3bb93b33e38c7a4c4e89db14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b779aba9bf40316a93259be38b20457d

    SHA1

    88a664a3a56d5adcc3b70594033b24610e7574cc

    SHA256

    758518b0e8ab1becbe58e89b9b2b74379036bbd99e24c9ddea6522b2634485c1

    SHA512

    9d6839fd0c62b03b8c08dc27d0764aeaf89987013423e42fab4cfd4e0e0b10e6c3bd2dbdbfcdb33847cfa1a9554c0b01f169451afe0309be4a703ed24515eb5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a68775ab6553e3a268c47ad2e1322e4a

    SHA1

    796458bd4c4843cb7a3833f7bfb132197b3cc0ff

    SHA256

    7baa0e32d43109f277dee38d651cf57b341b9c2d98de846272c44632a12d4c9f

    SHA512

    ff5213670133fe5a659c4c9f0647a5bb8b64f26cceac96866c8557d07b6859b1759af7702434a932e1e93555b82669476694d08fe2c88eeba68e51d6c0b11483

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f786e79dc66f491e51e97610efca4bd7

    SHA1

    f1854d7290fc7704aa6ab55a53bef9c820b4aa38

    SHA256

    e8e57e2d996c06cab653071eccf6620aadc02bb7ef2e0ae5a95966d46b4847ad

    SHA512

    da0f3fa2db08eea963c898661f84bb1cc7e78599b513b77bbcf0554f9a4143fb804258d219c2fcd6ca5036d732c42e90bfcd83349e1efabd6cae71a70b4c02c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b75365c5e0c985f869d19a7e2b182402

    SHA1

    81ba45db43d6e9008af280a2349d83bb4771a790

    SHA256

    25b683cb379b69d3164c3aace0ec637487b0be12aab23965e5864ac56a9b44c5

    SHA512

    291330bf5e0d8caeb96f8c212d6794363cc8e7b015772f13c4907432f926218b98be26c15a710e8c20b1143579c6f631f5308d47d032720a63f0df06173222e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a813baebf2d0596a0023a84883bcfa47

    SHA1

    721279af9ce86254298c181b3aaa79b6457729c0

    SHA256

    667b1d720790a06bd54bdd6b534a09c2d6a4025154b66a978017f2bef2d95791

    SHA512

    21132fe538decd9db95559fa6639bc686d1410c69676c25dc29abba0b8aa0ebba4fc27fd1859115ac383f57badfe6fe6d0f1b6b3dcd378a2ddd477d6a85feaf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9027b910ffd1f4db234a75dc7ea7bbe

    SHA1

    b5ea894506ebe460885f38a1b7e51e15402fc9f9

    SHA256

    ff9dfb8afdfc2efc5ad69bc76306cd0618dd4df533cced6ef4941819f2a34f32

    SHA512

    b229af49811b8e1ef7ac305f1b033d2334fb54904d84ab28d699c20f518baec38c44e4f1c194c476fbb9732e20d6c2d46f10835959ce69266369ddd3295286c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4d91b4f5c4ee088cba40b65ff0060b0

    SHA1

    a7dffc706e61b23500a12d7eb26041cbf7943a1d

    SHA256

    2b06e610f707e5c8351fb6df1a3e5cf8090efaf4d869c63ca378e8b43a27120c

    SHA512

    1f87817e07ece5f51d32ee78deb360b4dc75f343d59ead41cb372a7bab405068305018e2899172fc8e23daf1dbc2508ec1d2e445388dfcb4e19e6c0b2d43bf68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d9af2cb57c82c2fadb936fba9f26778

    SHA1

    ad15bf368231600208f86e96000af32f91da4e61

    SHA256

    226a935554d0502ae24d5cd276c7ee932a63a38698ac29d79f3eec1c91cfd5a0

    SHA512

    99f853d4b19108beac8419af0603fca7b02d249accf1041e43465a076f12be122d12649cdecc3b620849d0f1c137e29083572d52db04d385b8fcbb482cb75e5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c15d31c43c588ccf4fbed34682e4f8ae

    SHA1

    563d93280c0747ab22b1b294ff2457ad005d35b6

    SHA256

    61f8e3d81da7f896e98056f1b2006fc25c8ac1dd68e87e8d3b50ba14dbf89902

    SHA512

    5b84eaf8a5f887a49d4c57f4b5cb0e23d3e4500f41807b8d7abb8bdc4cfe17fc89179902151aefa9c5c29c4e95886f207729b2fcd8c0472a69d9b272b048633a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64078aff6fd1e78fe5c679a187633432

    SHA1

    ce484ad710b6dba2fbfc9626f6df2cfbcdd18eb2

    SHA256

    cfb60afd2e024266e6bf04284ca2b895c58cf95588729417d7369f6b2fd73fea

    SHA512

    b564bb0e7e876da0df0c73aa46998a4df73ef792dc7236ad71c7d60485571df56615681346f649fdb9f2008186a0efce8217fb37f55fd732f9dd6f52a5a17b19

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E1CCB52I\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1J1BPYJ\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YV6H14B0\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab5717.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5891.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06