Analysis

  • max time kernel
    139s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 01:30

General

  • Target

    551eb88ff0125a3134a3df27bc278811.html

  • Size

    3.5MB

  • MD5

    551eb88ff0125a3134a3df27bc278811

  • SHA1

    0abbb4f9a15aca1bb95c2d4945975261034fc27c

  • SHA256

    6b51610316020b237e3b0b1ee14cbba626bcf99e452628e2d25b4f9dccf3f515

  • SHA512

    b863bc761e61dc5b448d9ddb31ee0a7e688babb5030a1453dd9846534efcee5942e431954e5e20af7f85c43c82fa1e0c866dd60298bd1ad3534fffed7f0fc8ff

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NbM:jvpjte4tT6BM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1720 CREDAT:275457 /prefetch:2
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:2180
  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\551eb88ff0125a3134a3df27bc278811.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1720

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          83c4877bcb3f26440f93191a2e363f85

          SHA1

          1b22a4e7c0c5b87093cdd68863c46fab40f7a6ce

          SHA256

          048af4136226a7352a9341931c1171fed62c0a6bed1ad5fc8471a3e38b72a543

          SHA512

          4d6d1f8f36bf1d3ef30124d8357c9ccd75a7c55516e059c6ee4d1863266a51561a2d9917b792e34578985a28544bb4b3bee39e7112049a55caf8422933da8acb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dc5d77ec03f2b85a47d8ac96ba0037da

          SHA1

          5af4c8e5ae97068bf470eec82e277c15696875fd

          SHA256

          95aa062f9ea89b003b88a06b5b0ebf50b1d395dd10976e468d3833656eba0855

          SHA512

          469502cf35ed9114f22d3bc18c4d65b46b24592d06e53e1e43ba9d024aeb05dc574101467ccf3acb767e5a86acbbd8be956c92160fce7d34fc15157fddf9e8f6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0a5bc52d23d970f30b4374e622e50078

          SHA1

          b435cc9b1ee70c4ed982c20132f926bae04febab

          SHA256

          13853dc9dae620f0561d86ef0aef3e18660e3daf7455c48fb0e92f9237abf1e8

          SHA512

          2f4c19ad8408eef4d1049ec6286bc548b67afd2d8a8fcf6dba495b7cf6594626ba881d6aa570fe4f4750b7b551cb96b5cbf1eafe4f23a07a775c015c46028a98

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          565b3ebdbba88e0c9b25205463546955

          SHA1

          7ad499a5ccf6be07d5e3f64e972c993df53c2704

          SHA256

          b32b67a99df9c349330a08a22eeb84c214265dbd1c4cb9fd7839fd6f9263aea8

          SHA512

          a6e1b740ff7ccdb4f5a19ff134307dcefcfd6fb8bb5556c1e62e00f6bd1ce5fc76a5eb43c2be671d49b8b5c7bf7279499a82e9fdddfd97eda32928c5adb92e19

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ceba7f4287a7c4ae44e7027da4dc6c76

          SHA1

          e1a258e43cd1d8bc3b25311d9f9f40708395a29b

          SHA256

          d840aa90d51bfcd3fad4e9375f38a909c54a32123d461e241efa86762c58acd7

          SHA512

          571f9b492656b9f8723507799f2040f130ca47c69280af73c704e358d907a8291638d03d99c8063d3b97d349678b5891ee2416d00d7b68804e728ab7822cc1b3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c2d4141d07963383426e25b1af0412db

          SHA1

          375ef39073b08114155c2cf078877e884b8099a6

          SHA256

          d6fb3800ca61675f8b830b3266462505718cd135fcef7d9e2bbebcccaf056d47

          SHA512

          82f79426f6518d76874ab7cf9f46e62c35fb75dcd3ea79f1487da8f5055bcfbc9285a0c63661c01d722a13f4f65960911f5955f5c43b285aca9bbba541535d8e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0e3ba616cbc3575bd5776e8578582cf7

          SHA1

          00cf1ffd9cd056b0245ca9e1da3d94b27383bc83

          SHA256

          9618e332d302f9e626a956053b0872b91b8bb28cdccfe173204b86958a1e8988

          SHA512

          fba9f645a2a3b20cd1f19e89191f9610809576b41c7f198778f7f5ea74f34ec2eed2b2071fc6faa5c586145e31bf9267b418d6a555f3bf60c41a40abd9a18064

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8996ec8c097fce3f3dba7b827f6ebb76

          SHA1

          7be23123965ff1dc0a9f1936f7ef32eb3704d0c6

          SHA256

          6c256f033773017f4fad43c559da1d540b77d37e842cdca79cdf0ffd34fa09c4

          SHA512

          91b1d429e09578d5efa64505fe40f79db54c16d9ed6880481bd4072c0abfa25aef5b2ea883c86e30387a50936f4ad629a7802b43aedcb1c498189fd4861e6a08

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1436ac235f578d59d7ae9b6ad72b3e17

          SHA1

          4a29d588b7dc438beef89932ff1d56b7c8661c0d

          SHA256

          956b6e543ea61ebde7f903889b0b698b4422abdb76c73773eb43475e868fbcb9

          SHA512

          62f710d823d3c9fc8927e3464088db34656357e10bf0623b555cd3cd4dc8c7c0b27416edea9298fb3969ac429d1efe47cab2f82ae97d892007ab8b551ae1e6d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3e0f47ca8ad6a68ce84c7e34964fcf07

          SHA1

          419dfd3846f4929f9ee73cc223ce20ad887112af

          SHA256

          40354d64713804473022a2f90174189521edd033887d2079ac9fa04d7cdaf435

          SHA512

          5c29f4363dfba2ef6e981333b74e7f10abe5349b350d511a872fa74016b9742c127e597806837c960f8d129cca43a9e400fa432f7fe89767b21c3ee788e5d6c5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          25c9aeef5788d5c44c583f9d62777fff

          SHA1

          ec6169d6f5902f8d0aea7b92490c99a9b67b3c5b

          SHA256

          4076726ca2228d7b22f8a9265835854c1fa3951587acc9a072fa55a05e52ee3f

          SHA512

          b03b301ad607d8a1ab8690c28a24472cc6e0486dcc8a518cf5f1120631788e908fe080c17d7da46bea7423f16230d926a0c53f91cbcbd8f6a3213889b29bff17

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          841de718c8d7104a9e9432c809020420

          SHA1

          a70a6f8d2a81f94610d55efa309d0044cf509311

          SHA256

          bba7db2a878b81c7ae0ca2ef83aaa50990aa4221713fb9a815c7308b0241b3bc

          SHA512

          1df60b6b864d92d549b5766b9545b9a16ba94b8ec3c2e4bb3724c0f1a2b0f2efafdac2d01723b29581f2076320bf05e3312a788b24cc705f015b21dc05944233

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7ffacc1ac2a93add0c984a85d59085a4

          SHA1

          31ed4dc6ce128b91772d63b90b23ecc16832e3cf

          SHA256

          9c88762a70cdb4742cf06d259606ff6000c5b318212ae2a7077d497f7b80b38a

          SHA512

          2bc451f9e22713d9c96ec9eb9608b502155fd564114d48066320a5236ae2fc4fa22642b283e5e79cb60631b68170751aec40311ff38150cab6ac311fa58e3467

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c95c56b70d290379ab0555e4e31e0a25

          SHA1

          aa0da8e35012921faa7fdf0c1a1f878e5a3f8bb8

          SHA256

          22ab41a44090bcb5254cc0d7dea5c0ef32364c9f549740eb57108a9a9a10e9f5

          SHA512

          b0f3c62f987badcc1e0db9d12e40d6a370866456d7365125b166f6752bab091744242f59bcecee9fe05bbc216cbf6d3f27ad681057e50c3ae1da0aa490390b14

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          69f9b18e492912150683d65cbe24f293

          SHA1

          5f8e5ed74382c7321c1c5894f401ca312df3ba0e

          SHA256

          4140459ca29fbe345d855b1f6ba20aaf492250b0588eee53036d1c58c25f36e8

          SHA512

          3850ca34972f233e60780b2119d8d2056a5c2650324c1207f6265fd12c7d41a07eb8429f2c6bb43c7d5f94f165f23e3e4e658b3139fc965900c261512b3ad296

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d57eb6afd428db39a813b4071d2ca297

          SHA1

          a099e4763349dafae7e114da5da6f57fd5f17368

          SHA256

          866aee340c677c9a1d4c49439e55ef0412d2947d03a20584d5557d0cc3d8e4e5

          SHA512

          b451547e11e32ec1a354d7d841f14b5d07f8309373471e2a20bfa758643d5ce62237840c8e60711ff9f9c2b7342011804939e51e6c7b95b517ffdf1f73ba7c46

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          85fc0b3c345b234557eca1cc06d7e7eb

          SHA1

          3d1df6a7a7d0a94c6810b17f8f56c0860c64bbad

          SHA256

          ecf72ebb0a17356192b3ce34df5a1a384f305b44873f71da16daaaa5f66e3490

          SHA512

          f3b09ebb56e79547ef29273ad91485069949c8a9d3dd40c69dee5e145170ba07d36e54df39e48537eb5933771beb7a1e5c2122bb322e756fc70367dd2e5378c5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bb3b3e63e309f398f2edc402daf67cf7

          SHA1

          c4a28640fc80ebd1d5f5aa7dfcc5108364767e8f

          SHA256

          30fc0ace6c5398e7a6ade61bf30070900d8404402129f35e49e1700e60ea43da

          SHA512

          be7dc341cc03eb0507c3cfee610fc841c8f535a656d52606aa30941571ebe030cc0a90291c0cc2e7ef88224b3ca3651f68f4a1527dc8734a178b557ab8f609ca

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4ffcd566921ebee06e448c18ae35ae11

          SHA1

          0ac786716799520dac8caebebf3088d4c1e771b3

          SHA256

          ae80c16677df07ae4395a68942651911fc43853f153c5167c22797a8ffb90cc8

          SHA512

          fc45de005b080709b62e18ccb183ecd21c75a8870850f92b79459a6c3c78e2818d0cf08501a355183348a8753caf3a343d44cfbad131579b64b35bbfb3481f1e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7d9009eb89ee3686c21fb2c15973466a

          SHA1

          2ee8abdacc03fbdf8fc614c6589fbf47ffb3bbe8

          SHA256

          5dfd398f953b2dde771fb78e70d38088be4494963a87ee5ab21259a252e7be17

          SHA512

          4f7a9c4a2253394d322c3dd8e00d6ab15dbfaebb2db6a11edb5837c2dce042540cdbbde37c9fac58af8e312ca35d8d880fbd20da53c85698707fd66a3cb5b58e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f3d323f0655127265124ee1b13b10972

          SHA1

          bde8b7421d724c010ca89094b98c86f45ced03d4

          SHA256

          95cc289f252b458ee969bcbd030fd82a1431a0981fcbb64062ba6a3f0d397fa6

          SHA512

          476e16abf4767755dc2af99227d1d26b989bd94edfdcf31d27a11e39e97f9e3cc447009a0018e485844172cbc114c44992cf72600c47c55981fd5894e431768c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d2f12b9f102ac7147df33800b1951f25

          SHA1

          9438752da16777f3001b1035e36d98a76004e202

          SHA256

          29b157191d608aecda1c8f66337db8c3d2a76324c0666f1049a956477892d64d

          SHA512

          2875696b75c08df5aed39b99a33dcbac4864ec8cb1d50c9dc0507e5ff4d047e52471f2b606401593e1e15905c17141f5de4564a3e8f086c1e0b633509bdb598f

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HVBRC7A9\jquery-3.1.1.min[1].js

          Filesize

          84KB

          MD5

          e071abda8fe61194711cfc2ab99fe104

          SHA1

          f647a6d37dc4ca055ced3cf64bbc1f490070acba

          SHA256

          85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

          SHA512

          53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JIH1AB02\jquery.min[1].js

          Filesize

          83KB

          MD5

          2f6b11a7e914718e0290410e85366fe9

          SHA1

          69bb69e25ca7d5ef0935317584e6153f3fd9a88c

          SHA256

          05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

          SHA512

          0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

        • C:\Users\Admin\AppData\Local\Temp\Cab1FC2.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar1FD5.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06