Analysis

  • max time kernel
    118s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    23/01/2024, 18:32

General

  • Target

    70437a407b23b0168d37b810524cfe85.html

  • Size

    6KB

  • MD5

    70437a407b23b0168d37b810524cfe85

  • SHA1

    26b49afbbd2f9a251f295d9a2f1a810d98cd1fa0

  • SHA256

    e9b0eeba68c8274bb7c65b30d03a618003631e5f5d819220b2f9d8ecb0ca4d32

  • SHA512

    10cbb6fcb63f60acc2f2306b32f79759c9b0e8f709493c5a6030b08a999354c4345481e73c68953d146452155d3a9657205959ec3a783677cf13e03fb2fc8a11

  • SSDEEP

    96:uzVs+ux7kELLY1k9o84d12ef7CSTUJccEZ7ru7f:csz7kEAYS/fb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\70437a407b23b0168d37b810524cfe85.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2028 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2664

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          828776daea6694758aca7368a3ff376b

          SHA1

          756eab42459b36f7aefb2c30e86fa458d5a4dbc1

          SHA256

          bfcc2ef585116a1b25606fefdcbde81a1a7020eefbe8714a0c0619ff5275404b

          SHA512

          0b1d51c9d119065aa8f764f3734ce14f456b27d50544f0cdcfab5681a05e2f7b213e963bafbdd10d94d5034f2275d7c2088bb004c3d57dabf0f0a4aa3451a9b4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9857a51a034dd7eb33bd6f4315c8b697

          SHA1

          808e156bedb897d6760bab2a871ba5c056eab473

          SHA256

          71b849681caaf7c7f6773c91d03382d58ca52e04443bd68822a7fe36ed5a5ed7

          SHA512

          9e4762fae94485d34f6f74c4472c054a0cca7e0ecc67176bdfffcc9eb012d50f45dc0fb5c81daafb3d7fa9249a435b5c5e7904359bf22b74af109ddeb2bf265d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a1f611ea9dca9fcdd073d39cc64e06d6

          SHA1

          4f936daf789aebd78667cf3d2738b6bb4ec42b40

          SHA256

          221fd0d88366945996020bb985e6fdba1072bec10083b6d2a1b592e8a01e281b

          SHA512

          a6d46897a64c065c064b15ec2b8562c4eed66eb0acbedb958a748e516d8f5f9749f51c289e3315fdee60b714b39f80a5889c065d1a57363ccebb44b1d1ab5874

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ef17467b0bf7ac690e994c02464146e3

          SHA1

          3bc178e18cb5f48cb83d5c49db8bf62620973abc

          SHA256

          e349ae77cc6e9b45e4544407c8be8494cac8680f0f0ed82af7dd6e4835cffec6

          SHA512

          5246fdf62888213863909c13388913c5a4600e69405544f27b8a2cf21c578eb83c3d7d130f7b1bac93bbfddc8cc038e7eec91d3091e086f267ed5808b7e07a3b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          049d773923df2f70bc0d88e71cf9f317

          SHA1

          f173ddbadf6d8398ad4749c97f044adc4fc6f448

          SHA256

          eb6fa7264ea56c5ae299b0501ff2212b9b2455b7c32411380eedce302e58103d

          SHA512

          f433ed6bbb3b12eee8fc770d2a41c68cb2e10009d26e2adb89d694e381c38ad7352c325893cf5b0ba737e19c1f8cfd6f64e83db723b96870abe4a704b9f179e1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6a4e1c96da49b4f05bf19dcf9913e5f8

          SHA1

          add05ec244da6b40a2c9ef2c002ec17f09500fbf

          SHA256

          0812c38f6236c1b5fad9a238e01cd1fbc76c93d663267f68e713572d15fc7c42

          SHA512

          38dd03a5f2bb20b07a7154b3a735230b8a87ccbd0b22fd52355ca25cbe5736457ce1b3567910a5eb9b86411d787308588d4a39cd86785c992c1c9e70b66ef776

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6f6155351fa7d3dc664e96da86990cce

          SHA1

          d03b52fe66038a027ca414283635fb2257bb396a

          SHA256

          510abac099fdb1d1d9d83e3e277ab62cae699aae198549a21eddb4da86ef7df4

          SHA512

          77ac32bbba2939ca0c7cfd0ec37a27244ddd7837601db66bbc1d94be09c9bce4159d99a1509b2d2265e311f4344b7418570841c7ac23b1038a746f6fd87b787e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b56ca006d7462244aa67eace095c3843

          SHA1

          e0804fcc4903f4565a3fd84332e323b197644905

          SHA256

          914c1c12580e05afa43b798fc027a58d2a3e146ec85005840ad7fd2ca4a497b4

          SHA512

          322e5002fa9428a71ead51bac5f261a9a65759b9f99db6eac7c09bf19ebc9d18210e0ad92db9370690248f74c7b401a15a5c991e8a69b32ecd19f1d0d09472bf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          158f9b150ebe43f629b758bf59fe5c38

          SHA1

          ec9a2679063a2d9099af068ff30cdd305a63f0fa

          SHA256

          3f46b7fd381a8a4a036372900a655fa04dafb5341279ce801c6bf7781b57990e

          SHA512

          1e564e55b501b1b55ee3639bd288586a8a5dfcbcf66b196323e34bffbac16e14afb0ad3aae313769e0f6e5d797a406b5514f7d2ee677ddcee3a41ac804e459cf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          342b795d3d3f1db8f8462dd05577bd64

          SHA1

          5f5c36dc12833097ac1e12bef46ab56e93b1897c

          SHA256

          af51df02a0d0494b7372d550e32b18dcb5adcb670358edda5fd6caef3f61a2bb

          SHA512

          8c847f682f5ff992a4d089c8946f36e2bc7ab428feab152f18d6843f69c027240b5d196449107c13d1de2afaf04b1a8be04e1838911c4cc330de4753e65bea7f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          58e7cfacb1faee38c4dcecec04de8d2e

          SHA1

          699db31c951857bbfa02b0863ae71e57948bdc34

          SHA256

          d2b4b793df58f9a4a856c9bd26b22b05c5174681e1a5a03b82c3ad8ea8e23370

          SHA512

          7ec8714c67b5666cf2472bdd7843e7bba39568b9414f821e6f314e9fa3aa301fd7204b3c3eec30776878a90bed31e6780ec2c0c6e499d61d7b40d34e8cf0080a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          661020ef408c9797a99092334abb17a6

          SHA1

          352854b11d72f71809b70ee0ba3d786979df9fe7

          SHA256

          887f6da28f233b6c8243220883e9a0ca6c53434310d2337dc75c78d4c039715c

          SHA512

          f267ba247ea151e26f50f61f1fe7315aab418a8337916b069d57719c525cfafe2289dc8c311fdfce532c4a9afe6e4e01a54a326ee39a423ea7d4924a0a970f76

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3449a05b54b89a9fcda1b0f2677a17f7

          SHA1

          d6dcb219e884d5c654cb58e3d445f7bf6f72ddcc

          SHA256

          5382a016d7aa797ecb9ea1561c61a5be2f11a7ef7ef614411481522258af543c

          SHA512

          cb6b5a6b31dae4db3a3da0c20d511c10e11374de4feb7b0c99d8458d3926dfffa799f1ee25ad74629f1cb5247b300528b64e92ea49e73f79e8a8ad8fe84e93f3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e7ff44a3d92d98057c78a6ef30a437b0

          SHA1

          d7af6cefe6761c490dc2f8ebb6f47866961380cd

          SHA256

          faa0ba88c07ad5241f4501790da37aedf4d3c8079683288479912a7179e8fb8f

          SHA512

          29197793039d81eeb0896fb9b80939b2931555edab06bbb9ca44fae6d6e42117400cd529fe0b1b69410a463a07c1eea69daacda8c8bf4b922405ef9d2a659bb7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          86b2a76e2a4b52542a6a235abc355e2f

          SHA1

          9c418bf798fa3471e2bd6e5b30628cb697810e19

          SHA256

          8d4f82dce1e8acf469ff9fffe82173d983e31f33b30331733c50213bb630273d

          SHA512

          67f7d605dc03acab83ff94b3ebd32d3115d1c4f07d8f723850d45fb30b5f687c4f003549b5258384e86e95541db0bb5895cf611af35c91fe3511bd41c260dcd8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9d4823bc4d95d9ee086ec4f06d959c78

          SHA1

          7fa1098d8a5a69a00a2f258cffe1567b04fc62d3

          SHA256

          8059113bba06c0d25381356929739100e39c311792dac509dfafea4ce47e230f

          SHA512

          5147a89fdf7480d5198030501dfcaf70f344925f997b9da48bd496ae7edb61fdd7b37a2d4a274711815a773d4b25e8edc77cb9af210e1046d98df1c958e41cc3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b9244bbb75869d00db4df006e0afd7c8

          SHA1

          0f405c93fd4c2c0f805d177866be6491952d03d6

          SHA256

          a01d60c33f3909fdd172de07a58e2c3d42437df82daf34de2ab015a4ba4cc5a8

          SHA512

          c6c5f3890625fc0786b7b0bbb3e1833fde0498a073f4326165e4c7ee58ac5434a54c03f46d77d50a45fc8d1bea84a0021441bd8f64a45c666a1f410e6bedeeeb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8cb540a6116f55a37957cb3a6274929a

          SHA1

          3d99c06e3d484087a23c317bc8aa64645be38b82

          SHA256

          7f7b31b5499863f4777c3504a658d71304df8d07c109d4bb6236a88b90b6c8b2

          SHA512

          6c224623584d1497cbddf6d3d74a00b01e2d874f688c49152ad8ba2b4d14079e8ebd36e20e5e8f2b7d673351a22667a95fbf4ca9ef6d4b583b387a379fdf0fac

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dd974a0a3d382c6229083bf625588d16

          SHA1

          1df615c57471515809eba26ef40e984fdee20deb

          SHA256

          32a0ba6a6c07e2eed683abf8b0a9d46378917fbf801785691b6945af739f9e24

          SHA512

          49283be597fab476ff70f697e8c98e1853c80cc8931d7318a231d08c5b378e048a6ebb28dd86817567a05234cb2c5fc0e9efb0ffeb8dc35134e621ba4c06abe4

        • C:\Users\Admin\AppData\Local\Temp\Cab987B.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar992A.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06