Analysis

  • max time kernel
    122s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 10:20

General

  • Target

    652533d86cc3aeb93c2e22706e056e73.html

  • Size

    35KB

  • MD5

    652533d86cc3aeb93c2e22706e056e73

  • SHA1

    53d15b6196c28a433efb7a5b72935a9082656ed8

  • SHA256

    70a112588dcfb161661b341db0a6c806bb77a9941b91e71f8bd294ceb7a4f5cc

  • SHA512

    aa609a11d58d3972328c877ca5c7d0e7160840bc66988b1e4709f657ce3d04063d5f13b85bf26b794b036921e637f26de1b3d51546870c86a337845f68f789b2

  • SSDEEP

    384:SIckAKZBtE7jw/hltvrtytZ0CdObkPDvD16s94g2YsRkk2RLERm:SEQzD+YbP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\652533d86cc3aeb93c2e22706e056e73.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2536
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2536 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2248

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    680829c880e29dfc0d498ec3c246c166

    SHA1

    aeed39dd0988ff93e3f97b1398f2ff8123db327e

    SHA256

    b05ddf621fcb9e920723d7e38477ca4f14284fe1d4ab6ba293813a4f0586d210

    SHA512

    4f6aaef9a7d0784e269c4ffd88bdc4884a226c8720d9364a63ed3b45719dbdd743c83891c11a8cf54c8113deab62e07452f65871722ac8e77c281ad951143a04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0301436ff6b5c9427726cbb6935cd1da

    SHA1

    be0ae0c307dd3953f06ffa2df4ea2693d0c37696

    SHA256

    ab0770e9b7f5cdb2e4fee4f1da55849c44c9d235347631b755caeafbfe322568

    SHA512

    a4eefd91dcc96174825f7e71ca043f310e7d84323307d8a62c2108cf42384e9bd91a50065713ead9cfde44f41c862d759e950d3450dfcf98373816c3ad163a2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    659bf0987f551735d5d747369582efba

    SHA1

    0db5c441d5411c4cb41854bb108772ebe034f395

    SHA256

    d011d40c555eae073442763afb0f923b203e959540a3e7cb926260ecf37438f6

    SHA512

    2bf2af1026423b09aec626219855a60a7661f083f1dde4467ef77599cbf1b7fc8ab6d20681c095ee24e2ee9d67f341e583c631de279091171e3a2e321dc304d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af86a78240fbf7ea39e0a47c2ae5c305

    SHA1

    0c3f6bf9e0ed044c58fa9cbc5c3efc3b582e1790

    SHA256

    1ae220483e54310102a24fe8cc1ef7ed565967e1fadc9381802451943da1dda6

    SHA512

    2a806271f924e3d357a681c2976f202df67e4c285bfe0872939f055fd7aca16133f16612c8dc3ac08484d57fa6a7eda703862cadaae50f0ff8c2cdf8878c041b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dabeaff9c61764dd0a7ba23e6794c331

    SHA1

    fdaf7f8960e7228b30cdfd6b3e0df1fbb07c9821

    SHA256

    d90a235df72b398cd8caaec2e6207c76daad7623e83a3b0f1d1c9847677ad852

    SHA512

    33a39086db78e3842977a2662097bc9f65f63444f12bfe58b37479e5da085abd0763b39b55f4edadf63bb991265a9a679cace8cee88066176c833922e60eea29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a2b141cbbf85cff7dc82969dd354ccc

    SHA1

    d76b315be7721f53c3650f43e19334e498cc0322

    SHA256

    ef0b4b12bda7de82385a0230508e03df3b3e60fbe449020bfe6c33862921edcd

    SHA512

    768f756ceb8bc9b1b151e289f78d570cbcba4070a093ed8294badda295add6e8d26e8ba0a11891054bfcb97207cb535862c67e97fc1c68cfe6ad26a8d726d0d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    378bde5da6b2158f94926c17c388006f

    SHA1

    8c0fca0b23eaa46080b2b812b221df9432a7c882

    SHA256

    626e0e3dfa0a47d176cbc92ab63f6c794a0d3bf66d8229e65bd88066b16d3d68

    SHA512

    60699ab1b0ae6426c9b172e5fa79877b3efa373372970d1caadc7f9252271359e2a31241a3f86da55006eaa7de05679544fa50bc9f10be2f9ce77cacdbb36d63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd68243c4e78e51f63120d9adae56192

    SHA1

    6e4b3b7a59a397956899c9030803577bee8173fe

    SHA256

    59166c3db4aa7c017aabbbea8e3885896aef9f362f7d4b1adb8938396c2e570d

    SHA512

    f861033f9b705f8e1f5653675a1c032a09de3fdd85c94de6f9ebcb157af4532d2b61cdf0120ebf3053bf9aa61c6b844c882b58386553fbd7949564a5901606ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c7914ba584d2b1e5c09dbc59834d2f6

    SHA1

    a40275583b9c36f1c083e6d311f3e436c52008e2

    SHA256

    95915023791da0df7bcd29db1bd8d6933e9eaeb6ee8c74619bb5065881a43201

    SHA512

    374ae711f3fc6843fdaf3b147e1d0391f557c11e127ae52cf0fa0313fb9094355112dd0ab90a88f935811e4058cb2cd269565921623b298f9f265fc1cb070e9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    383ab181fb0aa008f292afb4cdd84432

    SHA1

    8637817ee87f7da4ad5c7534768ca42b5158da7f

    SHA256

    7f28d18f2934a5900cd0899ee5192638bfbf303dddd7230715be0720b7dd9992

    SHA512

    b0eaa02cb3b7f7da2c44f582e29e1079bdaddc2737143aeba23753c69a756e15c9bc8cae2c30815f53b49c854e17660052be90303b5352267ead9d586fa513c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8da76d7f57b6e8715158347f5a3ae24e

    SHA1

    d9e876f9f2c57a35b32c0aa8d63ca751cf00b80a

    SHA256

    d68fbe5034f1431c032423e77af9731e5d2aefb74093c8a0613a22c9dcc476ba

    SHA512

    1fd74c178a8ff2b89ad1d6804e7f6e448439a79b71a8d53479a666dad6cb02ada4c8a509ca1ca8af20175d2b0de1d87f58dbaffcb49cabd19efa009dff1f42d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbffbb137816044c81a9614244b8b25f

    SHA1

    d2289ca4e588d1a859b75fb52b2674adf59714ff

    SHA256

    9c31fc76a9cbeee0cd248a37e65c81bc2c629f852f4373563f939b246aaad05e

    SHA512

    2efa82b7f5be67e336b76c79933dc8a32da484c4b5cfb2667ddbec8403a829fdef7cbd10ef7f7c5dec8429c7fe803f5872ba28b15f876c6a14c9c4506d45c0bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f52aa6bf9d611f052e236cad2c491a5a

    SHA1

    24560ae54fbe93f7afa088a2c6dfaa1f3cfb8f84

    SHA256

    9507c6ac29790a602d46363ae80f3038a1f8df5217ed5a70c2e95286405a319d

    SHA512

    814e48a5b9507f1df83d77b77a0ba780f32d52d84fed49f20c3cecc97b7d6dbdb2cf5ae7f0e787fea141ef33202ee75e0d1f0a405b1f389a35e03381ee531b55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4caeb5392396bc4b24e9ce4199ec854a

    SHA1

    a7808938d9c7d0ad87b2891a3722a048616d5694

    SHA256

    595ee95a070d34125096c4ae0a01a7234c82fc15fa6b6d1f1f38612b89ea56df

    SHA512

    99b72b4a031405204b3bd72dc74113df596e0c96e737e8c32e77375fe8594f2a84a01340216ac6e1a6cad82cf96f2105adfbbcf4dc01dbdcbf7755caa98654c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a49cc7c216eb9c0fa7e825afad69f53

    SHA1

    ebcd418b28d375a9d71c3242455bcf0f613c2f1d

    SHA256

    7218ac5267fb5e1b2ce5713b0db6ae25aa5bdd261310f88e955c8add549021eb

    SHA512

    4854410aacf0b4d485238938539bf5e71e7a0cdf8a20fc91d296c68386a0287980259747b164522dac5805d580e576a714b2023dcae742534e7bbcace79031ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e04ebdb724bc3ebcf67c68a6486ef441

    SHA1

    279a5e93f960428406e83f29c421d6d44d37cd2c

    SHA256

    6e8792dadab7eecdef626f4de21bdc0d1b60d8525a8368e67f9c98339c3773de

    SHA512

    cd547e52b11ed8c30ffe4402430d54ef1b5f8987d3bb7a0504290e4ef441d6a5d9d46fc9c5fad17b6c89913de38a6cf7f0ec6ec0cf0b6ec75ba56e563834f3bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c89870c976a28fa35f559a2adfbda21

    SHA1

    eb595c9ca5d7eb2d40038113bdc7b64969ae5afc

    SHA256

    383b01f1da08c88f91b0f73ffbea69cc753bca32c95bfac0b510d846ba271bdf

    SHA512

    547664ceab5ca342a04a64af3c82c71092a85bcc367a3a3c9f7fa05f8899a867aad4beef82a5216def550741c1fe1425dd05e8b6ad6f4bb17694f4f85bf1198f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5baecddd669e28567a7bb6f11bc2b628

    SHA1

    3c1f02df09d896b3d554654bb41b109aee7614b9

    SHA256

    1ff0885c52db6e75c332ac1acaaaab6fb66bf410a5c23eed90144bc635fa00df

    SHA512

    3bfe9fa7e259125973f37c3744320cd54e9e1bb7d59dc58c35da789bd32a8457f4aac6138f44f9701fdac1e925f662a30ab803c592a18b39df39ec8a833bd75a

  • C:\Users\Admin\AppData\Local\Temp\Cab1F85.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2034.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06