Analysis

  • max time kernel
    140s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12-01-2024 12:25

General

  • Target

    5674a66666bba3ffbcf3eb05f85b7c21.html

  • Size

    3.5MB

  • MD5

    5674a66666bba3ffbcf3eb05f85b7c21

  • SHA1

    1a38b2837d8c90358354b0512e7111eae45cbf46

  • SHA256

    d62baa26ad4ab68e91a54f61db3a34eba29738ab0ba66baefb11a2ddd962cd06

  • SHA512

    3e69851e221a6e74eed4d19da39875ba48ab0acac7e0b7c5a0e5a92df4f4c9db97c32bc885033bede48c677b2c09263f2f938e431bc1144b619bb43d36c8a3ac

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nux:jvpjte4tT6sx

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5674a66666bba3ffbcf3eb05f85b7c21.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1936 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2016

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    646a43ffb4aa75ebcacc6ff39319c85d

    SHA1

    6009705871275fb887ee2ed15d7bc6c094aed035

    SHA256

    f6923e9e23f6a91fe652f5475e4af3582254826fc02847114151c4542c3cb689

    SHA512

    4e9a4cdfd33d8e39db8127c530dbb2cca78445163009edd2ddff5198ac8714a3cdb784a341417533ea28798697ab589711e8d1e393d532d6e8c63c3344eea164

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b173846cf3fec4f3c628b0a83987270

    SHA1

    016c2653f40a6c57ee34912547bf46f3f3527d25

    SHA256

    adda26bc0e28b11a8b104b157bfda2e3a821d1f6eab9f74abc8786a02fe95324

    SHA512

    a682e6cb2afde832570e708f964c1e37d0373959ad295b668d031dab1d5fc6bf8df3e69d6c2737b0a0ae4e349172e3ca6d2c8107dfb6ed20d25226c507b48262

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46675f4a04a6bb61a4eaa83f904d9eb2

    SHA1

    beeef2fd77c6c9606c0ddb2aa9fed0ac474dbd2a

    SHA256

    d6bd8a79e9aabe18239d71b0564f970db6f10f2926ed1e2dc94e8f8df87613a7

    SHA512

    135e80e1761d45f214c4d35770c4867b9cca34405a66485cf56d86cb890b7de3aafb1551817b33d181e7d837f91530e36289ee61b8ce22fcd135562b9ee78c14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe55ffdc2e9b61c443e6eeb7c5e56174

    SHA1

    84ee71a2c5bb1e164d3d75b85d1957c14c9b07ac

    SHA256

    5c567186decbfc3464f05bb5bf79fca446a3f7c8dced214ca2d6d161f5d3782f

    SHA512

    5867eae0c5eab7f8c2cad3f5bbdf2938aeb4b33b6d4032c6b1811896c3b4f330d5323824a626b8c0e90341b0fa782e39baa84fe4c6055b5eafed2c387d39b220

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c97ccfe7a5161404ccb923b0b557cd1b

    SHA1

    4763b21259c777ab23f66f85449c5c857f36e7e5

    SHA256

    2b747957087e7d44d83ed4d4c25180efb73cf2055c0bd3fa9585bde5274bb932

    SHA512

    34c062c70a1423bb1751fbb1f5d220cfe5a8b4beca1a298c7b26b17cb3e55beb37dc06e6e3107b04207437a2ccb3b0c388ae21a756fff968e382e5cb136e822c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4eeb94653851a7441c4798d2b930f188

    SHA1

    5bc7e128f61ed8d600db409aa4810f6a3075f252

    SHA256

    72af650ea0e407a82be982fdccc3a6b7f480766af5c63a337e86d2e1e940d256

    SHA512

    495aebd3922f28ef642c5a7e1b2f59320a6095877c3ab65583ca2c9607914a8661cc28c35a3d08d6472734a1b436b928479bb8993788797f7b2bfd6eaee3c76a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    025cddc0c155360685157c314a8f119d

    SHA1

    db28df237aa6fd90a2c6fb174c2cbbbdb6ca323e

    SHA256

    fc6dbfe6f00bcf741aca1910957ec38e5ca6526f030ddbb374024eb754f4cf29

    SHA512

    ea6592b02d1bf01c7da95190267fc05dbb562fe4cb44a6d07dbe1b5c031a270d66f4a19cace463281ce6fd82437ef1ce637e3fd98f051c50b5169d9754981dd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ad21c95da602905be40924c413fe1dd

    SHA1

    c2a6d2d71c7c56de8f00f8eb60775086d5b47cf6

    SHA256

    a1c3544c64b5d3c84494a2bfe1413c00c36053b942df563310f1c3e7324f694b

    SHA512

    2674adefbe158e85ea15484cc3a6c1d99f69910d3f641b77f4997229b432ead3a0c7c90e3e70e933afb31f0dc627719caa4ced175b6827d40971497a71220467

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5f6264d0babcf468cd1fc3d90012a91

    SHA1

    4e5e85f7087d9abdad147fd0ce4b3e67d116ba63

    SHA256

    87549ac3aa54f1ec25c43194249936b3d0ac85d1dd671adf3d7e9a88723070dc

    SHA512

    087ba426f38ae8dc06d77983181cd9b363a9e98ed14d3234cadf43ad8ed495a5924ea435c85237bd178e719c1578694414428dd73079522d26ec2225c5359eba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3505f300c517da9108073d5ad792d00

    SHA1

    2aac0b5c5d76db898809d98c41295c5091638ed6

    SHA256

    2f9ca7d36d1d8bd0a419f9dca4b1cd14509736c92726372c4ded2e4d7b52dd09

    SHA512

    d6d7a27056edfa40f34aa84825ae02c2d0799c75efbe668242dba056ad13a31a35d1e0db9d544a53d8bb1fdcd8b57d202dd6bafc272aa388335b64e523c3232c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30a4d8d573b0f5b7c2ef958d5ae92a5d

    SHA1

    8b72d794c4da0edc8981e9bf12419b3018a0aee6

    SHA256

    6cd37f9aa79c3359f4a155280a6688376dbfcc138a0ea84b328efe5643a7c993

    SHA512

    a581619d668bb216ee87ebd20560a7d7a8407e727deee7ca29ea4af2cb180d5a6a79eab4ecf49d37e1d63c5fa69f2d5183f4af9a820c8f7b3aa65ecd35106c24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6777385270ee2cac6949bafa069341b9

    SHA1

    743657c706a8cf8f9aa7d0fd13382506f9e047fe

    SHA256

    1b95c0f5170da7a6dda2e9f3cbd80215eae0d9c7c2c7d7af4a8b71c68e68e5f7

    SHA512

    af5ece620a0adf1cc9d73df2b344c5615061dead81e32396b5e62c6f88d9b9cb243d7132fa8a307fc8ca0c9df0ac592f0546622299c47beb0e76806e0f8139c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da93440cac162839c670c782d7c9bf89

    SHA1

    b50b632cb1532119d56ab192e8dab9b9b7471850

    SHA256

    318917f0404dd13df03453c3398217f9c0e24465c6ba91ed5636ea685238fb95

    SHA512

    9e21693129a812fe6636994c41d48f09f337b124a5604d3fe0b46d7c8f645ffb6d99e904ad1accb79031e36105e010c932ce1322b7f332cf4ab3c62624c34f9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0fd1b89902090c974d58621db8cced78

    SHA1

    8c0d33488f347ee74d9cc8592ff58e7e776771be

    SHA256

    3cc925ed7928cc1e7f9119b452dd990cbfe841045697323bdcf233d65744cc1f

    SHA512

    42e2303283e413218113bcb76e693f32f765f9a6f493e918788879cd703176c9a513821ad58104c243b8e2fab4c3095098afa6dca71a708fbc3d66de19cc43b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fde8aaf7f0f4a8515abc8d308fa9a650

    SHA1

    e774755fd3cf326587049ef6ac6c3cbce560f3d0

    SHA256

    d9a049172278da34dfa5f23bb5539b87037e56add439b5f1319af9b4488034fe

    SHA512

    56cbd109da48e61367b528cb74f4294207c315a7c969f9f4c7d8646afc53323d1e764b2fce19949c7b123d982732797061120569e1813bf186a14e2b082baf57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5951d8059673884a678efec2f45db3ab

    SHA1

    3d4e8024b31e8b7a1f5b10851bc872d6d86d0f71

    SHA256

    c644dbe5a6e6e6a2ec228daac3c9b1bad8b687a5dcbb16b29733bd3e3f78d18e

    SHA512

    1d41c428ffd0a709432b3c67978941429266a05b5d548dd1030e475ef1090e13d838f652066d5d5f9a4b1f2de66a4dcdde5ecd852c0b06317a943fed9f38b552

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3aae6a39ba8ad1f182b73d52cf454fc2

    SHA1

    d08e66b002520b2f786f30127f3a6210f703482f

    SHA256

    8b1dad8381ff0d1e71861ab859cfc08a739c6fe1d646fb8b9ec67278cc2e6edb

    SHA512

    00ef7d2c0b8e6aff0ba297b71484270a8b5644b8cabe03c4243eb091c962f19f05ba5ce0a5428e5329db0efc808bdf42b67e66d80a35bdda7afe295164246fe9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdd59b18d26f5922b80daa452a5b8ba6

    SHA1

    94fb17642aaaf6eb33a703fbb4fe5a53b541d982

    SHA256

    e062f81e892c7f28f9c2ea64f9e7901deeb069b430b4a2ddf71dbcce0c1b0bec

    SHA512

    5043806825c64e0b9d3100a89e4791aeadd7528b310e7f7fd8f7128cdf9f4d678aa8da8fff61fc140e85d99df38c943331aef9b303f848f3997a45015fe682fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3313fba9dcdca9876de454d69f9976a6

    SHA1

    0eb6b976c41523e199c9fff154f555503d12e784

    SHA256

    786b6fd21aa9326fac32c46d5985daf5f5c784b4570ae936858c204383cf6421

    SHA512

    3ad83209c41ae873e095003a815565f12d0c80d8b2dc8a825c7b2b357e2273ae386df23431f3d8f9d78e8266033c9f850123bbe99cddd3afcab6548bb163e303

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E1CCB52I\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U1J1BPYJ\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YV6H14B0\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab4A0D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4E83.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06