Analysis

  • max time kernel
    122s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 12:17

General

  • Target

    163vv/images/Css2.html

  • Size

    4KB

  • MD5

    935bcadc5012ca6e8a740136ad450920

  • SHA1

    af6c9f36080931fffdb76ce063f8e676f9ff6351

  • SHA256

    930ad4472e6d52286f88601eca9607925474e694855cb3871d76683f5057429b

  • SHA512

    41b08c7ff11efb6b75581a08b235651c5add88d86665b4b1a4e56b38b80bfd236b817a0ce0b2c3fd86f1a0eae6ef9abde178808815f4a647467d0274724d22ce

  • SSDEEP

    96:X+484YwT7zHkjvCvCvmvW5HRZRpRLRXRJjHm+D:XUOnHkjvCvCvmv8H33xN7d

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\163vv\images\Css2.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2448
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2448 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3032

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    055de1024ab808eb64e37e2bc658f8b1

    SHA1

    3d1b647c5030a92d0d64419c5fa83e71cfd43c81

    SHA256

    6d266586080be8dd7118df3b3e506f5bd2f1cd1d4237f77107f721f95fba3389

    SHA512

    788d50658490d43d19dc49769ca0a1aa61490bbc3306fe50a17f69bdfd393068b48f440afcd89b45aa29bb7a22ddf6a57e310134a4834aef35e57a7957cdaff5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18ce68e40fc24ee5cc9f5f1a4a8329e6

    SHA1

    d39ddabcc8a0e2acf288c55bcb430bc9364a3f30

    SHA256

    5fa942f3ea19180752f223f2f67669499f3b04da273f782be0eeb450a6011dac

    SHA512

    9fb612efd2460df6db1a33b5b557a326fab7e4735baaaf046145faa080c2deee47b4be7c24e3f9cb8c47b4f22ff1aee598b49be0784e37139b3e539434aa3839

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21242b56aa6ccb3e65cffa996596cd14

    SHA1

    3b3e9bcf02b08f3f15601dfdb254df64cdb5dee3

    SHA256

    3a370832134d1f72b62b4d394b79100e68dbfbd40b6e86a162da06b33602b319

    SHA512

    d4eb1b397b510e6e15d1abaca3fc71ae52962f8ba1b76bcd444ce35b14f0b63482d070681f6cfec58571dcf371765af7bd1348df2c86ab92337beac2b67ee023

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    667b103be5f8f6c41125be9a5a3c44f8

    SHA1

    fd2c0928deb21460168d13b8e7158884ddad5ee7

    SHA256

    de03ad26f7577a6065a160fa75d5730113a618b016dc31723c77c62a646f1c13

    SHA512

    042c32b854b17b623fa32293e5e5eae874be91ac6e82eec6ed86ec39452c8c3a2f63969d3c261fdd2be004add42b2daeff467ebd1aa92bce4566bda6b526ca83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d07832d0ec9dda4a5d6f2c58a1e8e5f4

    SHA1

    883cb459cee6f8b2948a5b67cb33f0b8c68889bb

    SHA256

    663c0a96242b1d9c06199a6b6a1cd675e94e353a450cea2224fd1b6eb4ad4999

    SHA512

    402567b8a8e6973a4105cfb76b7a9f9f5f1909bb5ab59407bd4edb340f5b5545dd08902d29dfbd0b674baf7322d6e11e9c4526041c51f17bb66eadba8053c603

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20493d1993c3caaeb55348881e234c27

    SHA1

    9340f5f071a67682c8193ec812b4b69e9e5274a5

    SHA256

    e6bf1ffc39eed0e446620e2a2d3f98ac91f01785f247ca9ea9b31deb1b070106

    SHA512

    536776358abb6d01470bdb0248a2530b4746e53abd55988ac9284cf029631ec95a5d5f2b6179fbd479ab007de899f602390db163864bc5aa2d19adb55c95bdf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fcdabe04b57308e90308b0c172f5460

    SHA1

    2b1e02569266f6f200490f2770431816549d52fd

    SHA256

    802260a892201f06736dc3cde5719343676ef76cd3f1195265b7153bd675c54f

    SHA512

    edfdbbc4409fda6f028f1e62adbbd9d7fac67fa80437df642ce58b9d5bc2597c01ce6c93195ac7ec312266fb57ed6339f31a5c05959bc1ba53caa60ac9a459f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c9dd3dd42321e49cc2891248286e4b5

    SHA1

    b200c6069e22ef7d9464f61ab7d8540fbc793d5a

    SHA256

    9d0240b35b35772d85e0ffa02df00000cdf653ffa9939ff5bc9b0854287e3510

    SHA512

    89ca8ba8a23139b7b19a1a449daa20910314d4bdc6734bbeb939cd648cdcc4719007bad801932954f13dba90782cc4f08ab1bb26223ec861c73563bab374a8a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e135503aefd07acf665ad6e5fb51f90f

    SHA1

    ad746333266bd7e49f78ec3e9136b7d17ce6abc0

    SHA256

    b2ef3538f6e21d3a0bfc5e286ecd3430f50e9c3d1dc26f22e15f1201941f8b55

    SHA512

    1b2654137dc917af9058f840a9e45b86a6c990bb066022dc8f22d045c4ec2de0c69c9a96cca7b1671e3cd714bea218df1c371b804baf37f35bfd206e82ea8a1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfecc2c4a7f8ab64cc1918a57ee3efe2

    SHA1

    bf5b8b4c4f879172dc50bf3e1670b07e0d66ca89

    SHA256

    03e7803b556891e4567abea340594c3657d7011c4e4f68d067f897046fa38ee2

    SHA512

    82fb8b5a6e82502c568401e1030f6c20e0210a203f60a60e460753815a2e596a85d314408a35a062965548da347415e76e19917c1cf1d7f096b23bdeb11bb006

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38bcc865a53d3b71ac6f06404a57a741

    SHA1

    19fface9f5f31d2a6f3cadd224531018e873b355

    SHA256

    21d1a013b906ba41bb080dd0663522241b2322e14e668586a8e7b6320f49e728

    SHA512

    c13d45c5be5ff27887ad6af3190ea0dacc75d7d23b20c8ddbef3af8f548cee0254b79acf3e27eddf779b4e068676842f39b2f33c277de2ba5ea55ce113cf4298

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76e8b425933944ea1bf8f3f0c33e4597

    SHA1

    207e24d8c03dc26b654f0d36b8bff5d196699315

    SHA256

    d480b04218354468975b5c5628ea1466fea5a206ee3fa2408e8e138b8725d7fe

    SHA512

    1d6942b0857cca6e92d01efa9cdd886b446523edb3560bb225c3e9d97834c8c26969849ad5b6427703c55aa4a8ca7c3f28579593fa48e373d2365cd458a331ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edf47182a4c147d32f440e8b3286a8aa

    SHA1

    756474fdbc0ee240d35ee068eecf9c89a7747610

    SHA256

    9da99eabb716955edeeabe6526c73a0821424396be391dc3fdf45a64c89ab89d

    SHA512

    79a90853ee53b480b371efa1048fd921abfb12fe08ff277e3ad1a7625e5274d2f475acec1363a30a25b56bb3c791e1d0168b29d4e6f32ade8f78fb080278423c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78dd6783612f60b9d69e515c409b8c53

    SHA1

    4569832d03258896b9e827ea9df74352ba5b3893

    SHA256

    67e503902322c18ecad4afe5bb16425caafe167959f66e40b36cb3200ddc428d

    SHA512

    e9d4dfd83344ed91d7c0ce94329dad6a7eeda4096392462765d927f0b4676061d637c60e0c09ef24cc734b220d918e8aa8351b06cb5f559fdfe0fe74b8535bfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b2e722210f4d634ca061f9bf701fa51

    SHA1

    a199cb54271ff1c154f9941d97378fc70dbd133e

    SHA256

    074e821bfc55701c4244595ac37a433196c3fd130328bed959c68e24f63519b1

    SHA512

    3ac1fa8667b242c786001ecd02ffb361245a9ad319467e588474034b21c0ec2c09dfc626283c44009bdd8e5ba7b927f0800280533f51d563dd7b5715e7790f13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf56a6d0c4f7b7a607ddcb86906235ac

    SHA1

    4edec1d59beb724a5fcb388787010817e433e747

    SHA256

    7bcad444c0352581cb7abb7ace51f94501d0e0de4a13e44924bb586752e66e40

    SHA512

    0c8584f345da55f3e67b128963b839401b65713659b9ff65122feb6fed502dde259512d2271fbb366aa20fa804df8ce825257e2e56446a9e85855d975223ddb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2156d058725664383f11b9fffbb89fce

    SHA1

    9f079970b5cdac0f41fe3be35d387953caffcfae

    SHA256

    c4a9e8e9621fd147a119b8d538092e0b8586d89d748dde1e5b322e34b4fb3e8b

    SHA512

    5fc3383b62135a3a68d7dc0e64592217c8c46f914b1c69e392cb6ca51bc79d94d0c547129badb161c92f23109a4f5753545d08bc0d77251ad9a1ca513f09f64a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ea96802fcaa3db816816864dedf1e4a

    SHA1

    7c3899e4aa2a8a487e81f7926d670d113cbcb8b1

    SHA256

    f04e90a7330938a56e88d1ba6d291ce41581d13f7a8bde5ac8ff0fbbc7873550

    SHA512

    67c972425425b58a2b77648f9b00f6c5c884afc494b0bcec3134ada9b21e8e7d5a6c47872fdfcb32cfadf40330d174cede50f7139cc497496833adb2d17d4cfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    adf941a1fceae454d307264b5fcb36c1

    SHA1

    b36825f5a7ead7a00cbe94fa121c3019e0e680bb

    SHA256

    7b2377f4f23ee1bb46ef688a9727fce235e5383ea0e72686e914b876d8e678a8

    SHA512

    4f24ceb03b89c0304331ae784aa6f48147733ecb12c6ae83e01e91f95a5189c30e54feefb8769567bb1531a19ceae5d3b376b60f4e56bf3014d660f39a2a3d4a

  • C:\Users\Admin\AppData\Local\Temp\Cab9177.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9218.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06