Analysis

  • max time kernel
    147s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12-01-2024 14:41

General

  • Target

    56bd1e8a4c422732a73bfe29d05016eb.html

  • Size

    3.5MB

  • MD5

    56bd1e8a4c422732a73bfe29d05016eb

  • SHA1

    9db692525ed7df261524925e944e9ffc0b3f752a

  • SHA256

    9e6568c2b24807e8b89602d97c819921b701b9a589630a970d834a87fcf2ca87

  • SHA512

    bf18c2099a8528a14dcee737e0c95edfe51fc33f726e9a9b8c02ecda7b4ac4f84a626fa972bf28440241cdb15a65a3ca1fbf5c64c7ac2f15d5dde932f4c8178f

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfT:ovpjte4tT6NT

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\56bd1e8a4c422732a73bfe29d05016eb.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2020 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    8f7d8065fb9386a18b3ad03226ec1a8d

    SHA1

    1a6bed56e6f626353df898be4c96d8c9d763ccc2

    SHA256

    4aee471243355282872d725a9e72edfe22fa2c8c0262bfd7dcb9b27238994f2c

    SHA512

    f042f342152e133d92715fc494e66f4dfbbb3cbc6debfe215070d151b68a3056ba597ff9fe79da8ff1afe946ca439a17e73d21710d006d7e16352c5924edbba9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b0854140099782f75df850bde981148

    SHA1

    1d2b2c04ec779128eb95ed2ab4804f1076ae13d7

    SHA256

    24d286cb52ac5d6552e241354c90dc50e667b721121c4bd2a49c187b81028563

    SHA512

    82c3e0563defff53f59c2883a8b9545b43c1f8ba039681f6e72e498e2ca890faf4de7a735646e515173643994f23d1e71ae88bf657d1ef912a41059a5d703efc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93b1b9eff2d8e1758108c383e68799cf

    SHA1

    bfc07a24fc6fe6e67a97c93f3cef7082c8cf51d5

    SHA256

    0241115cd3ca04cf82b438060650000fbbb9ffa7ca84c6674b30f21eb9f0b6e0

    SHA512

    6e050515769409b937f7a54e2ada5e477e58a9fcb610ff7ac2d2699e17d75fdf7fa678cf6e021eb2e8e71d14fcb82443b3bea080d05f06162b15cce7c2291cce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25fcea3cff8211d545a03ff0b476c98b

    SHA1

    98008ac553ca6794d4ac70861eaf08642eb0592f

    SHA256

    4f40f3797985f691a3a7b4b48bfd9d0584434430f003b5d290fb64f90c337638

    SHA512

    37f0522741b9110004c998d47717f9e89aaa20c67b65fceddf23a9d7cfbf2650e4678102778e19a09ae797cccaf21247b3ef52b7e83f9d6ba1987371c2961657

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c97d109cc977394d2e5cf69b5066c63

    SHA1

    715409f79c13a6a4e54f689f6c58a7dd349b3c82

    SHA256

    380e3db5bf0abf0d62c6b395793394b28b68cd8f14ff5350e47300150870fd04

    SHA512

    f989aa735f5d2cac64a7304137508f13e63992e3e955913e5fb2178219808a99d0887663cbef8aedea4e0c1aa0db35de7361bfd366b1e3ef5443413549e0a7e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94f7426bb4b12093cb13230bcdc7f67f

    SHA1

    bc1eb8f418ae050b728726fd648be5241462ba08

    SHA256

    3aa6831992a96f149fc748930012841220eb197fdcfc5263f655d4592938f212

    SHA512

    cb02ea45fb8d64c7f8082c35a596446cf21c86cc2985a1b6e29d678d70f5d80c3096216f3ef93ef390baea5c32d67712943cf84764e953445a4751832115c468

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04179649bcf3dba67bb0ee90851494dd

    SHA1

    4f7ae177710b01d0e99da633996201047977a0f2

    SHA256

    e459a7d9490b31783a5180f7d4cfb266512eb269d4e20b1c83208e09f434f7b0

    SHA512

    495cd93c81183fa20121bc20e85773985f6f5491d0661fa52a6a0abf5466e15fdc47301549690060a5c4e0731578299991ddfeca44a5df89cd53bd732feb36ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8340280fb9837445e664ad21f5288ad2

    SHA1

    74655aeb02039652484751eb22d2e65d1797d6bd

    SHA256

    6a6e69a57c74403fcbe6f1ae2c184723426114b448bc9f10536064ff6904bbc0

    SHA512

    38db1015ac3c59897fa38cd3552a2ca5987bdd5a3a43c44962ca6470a4bd3c7e2ec7ccea4e679bf6daa9ec82c4ae7e3a2741ec5f9248356bedc168ff3f0efdd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de54697eafbaece25c8936de07b8886e

    SHA1

    4b5d1782e3dd3ef5c7564eae357955d2b573250c

    SHA256

    3851a454ebe42d1ad28ae61acd317c236358cadbafceca910b3e4c61d7e5af39

    SHA512

    c309048bb087661a9a5cf3d2981b429411c172e066755c48032306f077b9e376b65c1f424ee777e4818ec97edf763d771adb9c89b7dadb0203b7b1f5b276bb5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c0b8583bd1af55857765d9bd45cb726

    SHA1

    872f6b3453ee1cd42bd5ab469b2bfd53412ada0a

    SHA256

    42c5831c564a24822b014c20fd05bbb8f53855b43bbe069129cdcdc514a4e44a

    SHA512

    ac04b6a1c8d394619fa8923e026318f2089da92dbc1d067d87e69656a91aa8b98f6df681347c8c0ea5e63cb233a9b2ad2c874063b2c7594426387023a81e43d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c0905b14b9e591f347df38ca236e917e

    SHA1

    a7e7f527e0222941ec5ddeab72c1a4cb0adf8d2f

    SHA256

    bafe92521e5c1b2ac90f5dff87252c88c46b507d5f0077a03cf1dadb5572fcd9

    SHA512

    7cbe7f095906625874120db85dfde3aacfe8076989e11a7efe508f39f1a58cd47a3bfbb0d3f80a6e17bcc416e993ea83af4be5ef26580b6cc9e58766d511e73f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    9c033b35b02ed794c5392ef60107f309

    SHA1

    61ccf8fdeaa060619c489444ee4adf7c0dd6ad3d

    SHA256

    9518eae91c55ea8324fa913a24105a89a7768241ce10117fb6fb6f219577f8d8

    SHA512

    8f82ef2cb70259b8e96dcca8d09af68428e74171588d8e1aa64d89a3b819b7f91579a1bcfff4e19e458c875ed979ffc2e1d1cb89171e7ac5fc1adaf79b8a0f84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\19KJ3FMM\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E7PYGFSI\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L8NIENCV\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Tar284D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06