Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/01/2024, 12:26

General

  • Target

    679f7abf506a3762bb72fed3afacb5f0.html

  • Size

    4KB

  • MD5

    679f7abf506a3762bb72fed3afacb5f0

  • SHA1

    ff49fa09b5000c025aae9cea2d53e15052f7b4a5

  • SHA256

    2df17b232a23e8f3abbee107faa17d1a2394c476b2e38033e659deb831bf45a8

  • SHA512

    b07a0161b9db2a545385d9152c3c235784a9b4bc775f1a3ff9db67b47896a0c0603134e443cc012f1de2849045633f1f4122ffa972affefc3762e320e27e9285

  • SSDEEP

    48:Q4Vl0lpikR6ZHQToSAgqEIp/4b097ZrD+2jCOHy29atv:AzeIUGIJ1NF9ad

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\679f7abf506a3762bb72fed3afacb5f0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2324
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2324 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2892

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    631cc2841e7de9ab34be0b7ca28369f1

    SHA1

    6cfb1ae8261dd34b5572ad3f8941f32047f97fda

    SHA256

    60ae417059429fe67611d0601051cf0db0ae8be8d19cac33ef6261d65b44c329

    SHA512

    ca4837f87bd193d71dab15160be6a040433cb5f2f8de402d53511facb815b43b376050b87a7378494a4929d17b8d812808ab0adb12503666fb812f6cd87d58ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc66610bb8c158cc085efb0ee91a9312

    SHA1

    dde771d4b597e56e93e0ba08eb34636bfa004a9b

    SHA256

    e82a62ed36e3f59e232dea1c843994115014210f8028f217f9c3ef69e6e6f6b2

    SHA512

    12c895cc49cf631557ee9ed3221d33dc6a199dba11be56815bfafb548a175f84c59c323f7b220b6bd9fdfadbb934f9f318ac33a6658e0b50481f6344a59e25bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c6df8ae65d9851ef7df0477ecbd9838

    SHA1

    43960c98ff57ff5a599f8561d856f37f86a0b4b5

    SHA256

    42964748635a67d903abcd8f26cbc4150b9097d5e1f22718d0c4fc02863f6ef0

    SHA512

    ab455195cc272f59c1a8e8c3db3d6973258f41b2ab78f05ad96bdbc057add49d548c450c356b41ec0b369224b90ffc43c683834d7b47ecad8df852ee8631a26e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5a8c7ee555b9ef72555d79d123bba8a

    SHA1

    14f02e3e0db9fd98e98b17f1f368da0e582d3e15

    SHA256

    bcaa39f4a6e22f1ad8f322bd4ce3239c21aaa61d10b734467a7de2262fc71cbd

    SHA512

    e817d82fa9ea2c5ef1f1c31de3b60c24ac8c6ed142d12fad7658bb06e048bb282aab39eadc2e754c5669f29286ff30016c29591f30b2f00ad26841a3f9bc6dcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c24886ad0c8488abdd876773daae0f1

    SHA1

    c10cec9d1013a0f29c9a9d4e5d20ecceeb2aab7c

    SHA256

    0b0c993bb1b56129c187513fd4abf8885e0da48abe2be5a490a3f7f502fe48a1

    SHA512

    5baf778c5f6d8be0c8fc24053a2a6b81a4c9b96958188135749f3bca4a463f2e6963d418742d726d283f60246a136fa933cd0add3aab078cee0171e3b18256bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    026225cdbbf8a03e95afd4e0bf576adb

    SHA1

    d4580b49f44174ee599eb1084a027432ea69a3b5

    SHA256

    5f8a8f2215988633640d39b18cc04d78740e9a68a6232232c4ef6748e4400284

    SHA512

    35bc05afbc43a4d8b89def6e229f733f1f9aaeffabeb5ae602f248ac9f496d602c24a52ee97f9a6146da9a8147a0918e283bdc83b87003d7d7d2aff0fb374a6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    115deb25a31d6db0ab1b54c9a6e34ce4

    SHA1

    3e66721d9e67791c7c80df3203a5931fb65954b1

    SHA256

    fdb82935ab7710b230f7c9bfe5b4a58af1a5429a0f3281bdd64676f237e91cf1

    SHA512

    5efa6ce423746b41dec6fde9440a393275339793dc1914e92d7bb6863e3b841b10d756504243c1251a80e7d71b21c4d9a8c0c9c343420fa5711cb16c3d095584

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5a3bdbea245da6ad9240ebcad15822a

    SHA1

    12a90b6238d92d3b854d1566479475972ff40b81

    SHA256

    d34a1005e17893ad71f19ef3bf71f28be5fe627f700cae0ac8fb2772418b91c2

    SHA512

    347b3d70ba053cd7509f8e21d8bd9315f7f417f359b168939bf9094c29b171ae37edfc3982481c8e582b89145a3fa339dd2e76f96095578f87f2e73d76fbda59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bc2c557d9733c517a19ef021ddb7ea5

    SHA1

    03a6aae9de66c36761052583ffb9c4bdf53ad9b0

    SHA256

    31f059886f21d14daf0f06181aa87b0a6c0e7a3cc6095f97c6dc4fd5d0f22349

    SHA512

    4fa4b03d9df4e125af7d4b85c34881a71c26fb51f98533fa37f2bdab0eaed96d6fe027b0669fcd333563972e086bfdd771d35d0fa51197ffd14fe05c2947187d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d94c8755f03a4b05fde00d55801f0ea

    SHA1

    64fa8bfaf9c8764edb83e12869fa9528d73632cb

    SHA256

    14eb2307741b0ec050d27a6c71ecdd6d3f177195e0a1f467195dafd7369ffbcf

    SHA512

    8ff131dac8c5bb2e9792eedb63463b112c084a078ffaa49ef941f2928030928de5639b86593dd6220ad0e2de79beda7307772d5ca17d9eaa334d64742cc4c0a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc6aa42a9139029991688ccd43c547e4

    SHA1

    7e62f1e36f32399453066f1fd57bdba523bef0d8

    SHA256

    8af9279741113dc68193f6073d8ed45925265fa3de83169565735504a4785b71

    SHA512

    0be87c41ad7321b8e6253be50f80df368c77672340cacfec219019cbd169108ea073b6f921b2be1c3c5c25360011ac6b8cbd341948b917ec7f64b924fba6b689

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19c4e4710da7e8fb162d6f92e5c89f2e

    SHA1

    96c8f45d785d0bcd4e91504e9406b0ed8817fc34

    SHA256

    f2a4ab286a446baf745773d18992107570d2a5a5f2e3b72785555736a69d2ecf

    SHA512

    dae624778fe3e6811856e0393f4a32f118e5a0ce5e47983805cfbe5c1acf06efc1413b18b99da65d8aa3ef3079ffd9a7c7880c44713542ac6aabc82a3c7108dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90c827a31cf96b1b22acc3cd9fefa266

    SHA1

    e983082cb7325a2a579f6b64e8b33d3786e3a431

    SHA256

    69648bf61cc860e485855f099a0a638f31daf6cf6ab858ffe37969cc094f3028

    SHA512

    f121d4b68c6a46d3790184e8fde9942b1f3f890ece9e4c7fb294dd33c2062b44ec4da2cbdcff6635997d43ee8237bdb65b26181a2f72785dbf3f128962dc81fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    918922b319aa24ed27686ac4cf1a45f8

    SHA1

    38790412ac80fb64cd549e7ac7bd23181378fce3

    SHA256

    ccc98c01b8e7a098e7a00c98267f369cc66547572680e79d6736b775ae5f771a

    SHA512

    6f8f5413c655691778161508c12b9e1dd6affb61e5172547a85dcae54525858a71939d687a8b2e2591a92ec6f5cdc7e4c295d54f7f60963cbde6e673abb76a4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a2c13afa4e0b9e05213a26144412e3e

    SHA1

    fc3fc263dc2509d02e13a868cf6d301f989c2121

    SHA256

    72b34b18035c0f3d52e796d7fedda3babbcfaa780df15e5b96d652355ad2d98e

    SHA512

    0225b6fa4a9f902fe5d49ada82000301e395b498cbf0cb9b46eb1fae3a4efd8c49b01f7004b90550aa018f616619e50fffd1042bfeec7b57459e32efac1aafc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39a35459e256c1cab8a6fdf0acc7a121

    SHA1

    abd2cc2096a1f4ff980007b3800eb4c6217d2a36

    SHA256

    c6cc62b36015edeeaf7beee4ff0df62c0969ce5f3111a5cf1a9cd39f38805f46

    SHA512

    ada119ae086759b1a99e9ef9f19f4de088828aee66bf32de45e4f9400498f5b3e3bca4908e961ee5520da07e5f95cd3d65fb95839d262e6575179093b4d585d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d6fb6131234898b5d16372d23889a99

    SHA1

    13d955d89e15495be5e79f854ce86773592e51e3

    SHA256

    3ff7d30c3651ca8ae1ef988587e78acf33da9df6cdfc4851db11c12297a877b2

    SHA512

    0e0c274f49f701c3d00f9590afdc515b4ee0dcee648f4452c5538d24d0ba7d5dad4707979390faf3ae694f5e16efce2d5e843c24054cea90dbccfde719decdd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a131dc625352e9d4253b9c09be24d14e

    SHA1

    b8de770db391a7ff830619c44c24a93ed1117a6f

    SHA256

    2a947a933458ebcb57a1762a5fb503b8dec200da602be1570f38af8659550747

    SHA512

    f84f7cec232b8c31bb0b11be72db2a6141c2af937accac5f79feacc00bbf2f47083ba4c60ed47780e8157a0dfd01d0ebe7b8488633f9bc83db380fe323a8fa06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f32425ffda5d1cb3c6395e617946c20d

    SHA1

    9915aafce8873483a5b6d5e4dc82f1deef947188

    SHA256

    81f90098369a70fd1d66484a351e74ef889e141793020587e805f5b8d5ae1e39

    SHA512

    57b19c52bbef18f4b4559d4c838a025ccaff8e28d12451b22d759750189dbce6cc2a041af21b4f669f4f0db9cb05ff7d92eaae0f93ae66097751e0fb30d19352

  • C:\Users\Admin\AppData\Local\Temp\Cab29C2.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2A80.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06