Analysis

  • max time kernel
    135s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 07:41

General

  • Target

    64d88c299be14e814cd6f5339847ca0c.html

  • Size

    53KB

  • MD5

    64d88c299be14e814cd6f5339847ca0c

  • SHA1

    7b01cabbfe0819150e4373a66122e1d681afce78

  • SHA256

    e0d338e6917a56124aab565ed7cd8ae3ee7a03f34e1ae62602dede53c235e831

  • SHA512

    a0b3be1002d79fcc06e9b69b9d608e7cb1c0f7ef8a6c63c120e87c335afe22806c8c1f8c7fa0055dd21a5794bbfdc27a3c9b38e9790242b290ae6e59e29eb06a

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUArunlYr63Nj+q5VyvR0w2AzTICbbXo4/t9M/dNwIUTDmDr:CkgUiIakTqGivi+PyUArunlYr63Nj+qR

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\64d88c299be14e814cd6f5339847ca0c.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2224
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2224 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2840

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12064484e0af5999d4459d76d0fd4667

    SHA1

    8a1ae388284e5be5305ca5699c3c4ff6ee1ad55a

    SHA256

    26daf85f40dae5a834fb775172d20e4daf1b43253a69fa009dbf4be75dcc0efa

    SHA512

    7d35b13ac9912c6c7ffa17b8cc38054082289d55f1d662ab5e6a616e183c6704e289871b5a920a0e38382df42f1727f9f19250c80d9bf30d35185b0b2e99eadf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c65d9ef9228bb723d5457c48fb337924

    SHA1

    e59739fcd7fd47bd9224dcdeaca10bf1dbf1a928

    SHA256

    094d6d5e54dea51255e7fa9b8e62d2c8089ff3472a8cb6345dc1dbe027c1c5ed

    SHA512

    5a8293edca22c0df5ea97fec4187cbda8c985d2305968363aa9eecf18c5dd5398e36f178c528aaade62e8fd13c00a43eeba72991c7d8f56c44180aa0bfe876db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1ddae55d8453913819556f5f45523f6

    SHA1

    2af4e085af34e558c2719334c01596c056e6842b

    SHA256

    289605303a5a947f96c0ef205f3e421199be53107d8fb17f82ac4a112297702b

    SHA512

    663682343ccbc4702834cb563394e572d886c56d00b250c19dacd770c534ef4f82e43b7b0a8c652ac6f29d1df9018ca643db7fba47b28f0c12a8d2e863ccdec9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    927478fb38c2d6dadc0afaf1877fb73b

    SHA1

    2872c17e21e05907f7104bfe80bf56f6181c2f2a

    SHA256

    5076bc9052f89eae62639c0164cdd26af521ed9c55a596743e50eb63c460d528

    SHA512

    bf6250ea7d86bbf7bd2dc961cc990a9a4cad478b645bbf248e37112d0b82b985e9c9cea0562d772d4641152da42e316ad7802afc4e02b32189bfddaa5a48fdb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95ea6bc3e82dff70c2549424122c7765

    SHA1

    ffbbbad7387ff89c5bb49839658f15c01cb49d33

    SHA256

    2f06d9818c6002ddbfd5292471de71024da426d96412347b250e3c8813630d43

    SHA512

    ba05ff752327f2cd6c3f3aa5dc4709aeb1b8b63c4ffa6974c743327079f8daef44d47baab479dd0353fa72a70eacde257f7e578c86094928b7d169167ca02d4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05b53ffd202e32df3c30455ce0a5fe41

    SHA1

    120e0be46fe368e6c5604eb75159527fb743d3cf

    SHA256

    826a59c4ccbe14cedbd1ce2116212ea4c5a968940cdfc8d68b64ae188b7d1d0b

    SHA512

    61fa004fe789de105f767d3f2fe099f51cbd3c9202e3da0d930e90337753f44143665983b7e4c0c01b2998a483385cca8a0a250df8fb5996c0c616d9e919a952

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    055e7263237ce236e80813c1e237c26d

    SHA1

    0800373bf3a1eae75736af9a50a9352cb0f3a513

    SHA256

    42ccee6c55adc46d9ffe0cf3521cb65f1b7763708379e0ae2f603e5c6659c695

    SHA512

    d925cdc497c2a6cfb77b55b57124cf30b2f86f9705d8f796c775da6e105f1a23a8c4e44b76c7c7c187ab1df6a3ef980387f158ec85c792cb47a5aac381ec64d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    473c310c8ad542354c0b80d6ead359f3

    SHA1

    6fe0ff5d80294846455fffe8e28ed6d3dbb65a55

    SHA256

    436e0a618a642f57edbbd866b54dce545772a537812ee65bd685df1f67f32f43

    SHA512

    efc10ffa21e632e58d93cacd2cdf25e58fb6d5d5ea6628f2ab422b52a5b0fbaa070d1043aad2de85a3dde4ce6532c46a8de99513683731e9c469201e2316e2ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03f320d51149b1c8407e9cd60875ed43

    SHA1

    c1f604776e0e3232b814b0a4005d7032eace7903

    SHA256

    701f72eae83a196433a67369d7d74c74147be277e40d84dc44c79d94c3fc585c

    SHA512

    016b8bb1f2917266983df1203e5b77d95cc0a29b79af9018ebca9df347f48b8fafcdbe9c68874ee3f46d4876c6fe8ab0b1b9d3f97db2b4711ec8dff9c5f53e99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    020deace3fbe32142958b74ec51f718f

    SHA1

    017355d2e0c856e353e9fcd87652bb0b06255b87

    SHA256

    9401d6438d8c9220cc7e46643df007a21b97b2b94b85da04b123d9c23d5b6f16

    SHA512

    33dbd84c32b4eba654caae1669757157ed38a4d2f9216c9769bb597fc4ea97d7c513bb7e8482b721cf8223ae73c9e4a62bb481241802890154b28ef53c8019ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef3ccd2a6be4359dab15ec3c70f2bb79

    SHA1

    d692705571100746052c01a385b216588af410cf

    SHA256

    ebf1c938c9532409674b16c89ed20c5a6b6c6b399e56426885ec3acdb469006a

    SHA512

    971804ff0c0bb671a6801bd406829f822347e65a32b471e3f78be0b9c67a908eb91163f7d8a56bc8080f590730f89b1e25ba46ae27632a35f59a67178e575a10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    addd3a53516535ec741aa49ffa3f19bd

    SHA1

    e57674c609b5ba2198bfa7505c3888789d51fd86

    SHA256

    a0d0f7490551b473627f847c15ede9f448c32b58309a0cfbd3107f72dad89210

    SHA512

    305936da57e8001f34568c336a30f68387626a119a7f3677d4460123169854e6ac6b11858363e05f5666ff3e7ad67f3c23e0990b1c3ea5a85054abe41cf25882

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    159831211c1a0facecaf602dbd133eae

    SHA1

    254613c179a796b7569a251c25330745b2b5394a

    SHA256

    41bda32bb1ee9504d5e2f1b1e16dbd2b5c4d6bd783160fc6cb86bee7ebe89f9a

    SHA512

    d75cb915e42aed6589588f15c5e977977d64f9c12ffbbce8fc6b107ae6bb424a34722539543e8f07c71705960c70e509b63756884a8eda6588b382f743e99e50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef5d6278db44ee40a6e533afbf6f7492

    SHA1

    61c27ec8b2fdeca2ad9cb67dc3d9fce4b5186a35

    SHA256

    f380c8f5808b188b39a979ee14a8258c3cdb917c0ce9a18fd69ba5c378e1664c

    SHA512

    f0b54fdf03a03c8e407ed5197f40fbd61c13e9305d078eca93b6fa309bebe393e75add226e63a9c02c42b836be541b018310f14a434e1145f41da5df509680f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7f1a45c47f47307d55f99d38a1f781e

    SHA1

    a5d75f6193672af693bf2bca1d182edea8c3840c

    SHA256

    81b6bf04e7e38e090136f038d83d535ef2a48d1cd6f60ee96fe1a3082cf9c34e

    SHA512

    e1958ec5005b339dae01b70b67dd0cadc69bdd072ef1ff2262949eabf92682d9bd9168a45ce5408115c510417f1b0a252a433d8f6bab72f6c595660afda0e22d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21b491b47b2c45ea6efc5783be5e2877

    SHA1

    2529eccc2d966a5783598716939cae57d7f2853a

    SHA256

    eda0ab746f5922918d6b055ca794b7b03e294cfe6e4fc59710b9595adc0119e4

    SHA512

    c2cd8cddf69458b7712107b404e2adc2e43509b9df737f6bc42cbbc9eff2ec19c905d2cca11b4e8facadd0bdc50f4ec6ea55d9f8ca19d4676767cdb29c12e66d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d39becf3d1cae26671832ca6399c04b

    SHA1

    996412f29480d971c03793903a12d9466498bff3

    SHA256

    b84200b41065c9fa929eec70ab85059afb1d1670cc931db9fa5c7faf189f4ab3

    SHA512

    1ec37397b51f4753ed6893f019083356440b9ef0d4f5675382f8d88b0070713c0e72161e4cfc763af279da36530d9f091aade9839be49a72d8edbac4488a1498

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c39abe37e860439761f834e75d7a9c3d

    SHA1

    bff68c7bb5b1153ca3bb39d5c3585e1c2b502615

    SHA256

    ffd5ade7fe7e4ad610652baff92d55c03360e813b2ed769bffac840e7fe2e967

    SHA512

    90ff778ceabe83e06d78993964c184fb447aa853b58267a952091fe7d1524142cc1a513d6fe0122e803fd3b5e87010736c7cfcc3ac86718dd10e9ba01987410e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0831f7a78affeed64d0444fc47ba51fa

    SHA1

    45cce0fc6ce584891eccc73321d65c14c1fb3b5b

    SHA256

    efdb47b1e6442c14fa94d1c57629c1a92d23a599187be18f16060434e3bc9b5d

    SHA512

    93c15c5d6471ccaf8a64d8e3eb055a330636e39972da5924e4927f93b0be4249ecda5774a8fc5ba63b721fda43b1504efe7ce48c6cd03cf01a5f36733fa0e413

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\glossar-js[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\CabBEA1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarBF30.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06