Analysis

  • max time kernel
    120s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/01/2024, 05:45

General

  • Target

    719b430788996ca5ff37165089c7f72f.html

  • Size

    1KB

  • MD5

    719b430788996ca5ff37165089c7f72f

  • SHA1

    a7799a4396da55f5907b45a1247e29c4866e3d0b

  • SHA256

    cb58bb3635760407e9c6c5797822f422dab54260bb1304dbae38aed118da0a24

  • SHA512

    81f46863ded7ebecad302132da7f5e3ff9695695853eb23f86bff7afc3be2b6cad24c60c7b966b4cd52051a4f6960e1c43b95caefd04ff34e6c26d34c43313e4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\719b430788996ca5ff37165089c7f72f.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1380
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1380 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2316

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    c3642bdf0e7c84c6c5862f938246a8fe

    SHA1

    a16799e7788381524d7ba6f0d5481b3453ed7f0b

    SHA256

    ad2d9e1385056a6f3f8b3dfce934b8bad210b748232fada11d903ea6bb785ee4

    SHA512

    282a55a600ef915670c4ca2afd6d59edabe6e50fafc36edaa3d823ec5d27fa96ecd8dfb38b80ee1bd73aa13c8d357e0c2253bf2a004b96987a901e3bd3f47211

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1dd3e6fce5b2340c0d375f59ddefc7f6

    SHA1

    227eaf9badd203083702eb8f00f47970ff0d6ae0

    SHA256

    fc559473b73728ca539b4ef50c1c8e2472bb3dbd1910aedaaa6c844e6cfeea7f

    SHA512

    421a2bb53abd5b07a20149bdc79be2a54bcd65f05628ffa6c6ed90007aac156919e286c2a172be6db8a2c0ebf130100c44ec5214baf13c16c95f7bfdb5c1f7c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0915e6f4e36f3b4451f33b69eeff2ab2

    SHA1

    654d61dc4e7c4ae85fe8d10a9b08eaac68824b14

    SHA256

    de2e38f28424229bf1e781f536f9fc82c06558e10f3388febdfa9b409f9766ff

    SHA512

    eb32ff7269076f18f5e438726e5921c83d179e26718782656b902d5f3d2c02fdee602cd2cb2a341077ee34745398cc940dbf4ee0e6c8fdf4b34edc4bf66457ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18e60aec92b71a1bfaaaed4504a00430

    SHA1

    ee7cfc2c1cd053609fd9c936d946099285c190b8

    SHA256

    4adce05d2d726a8dee3dc6759392997dc8c6096ac11f744a89203642970fd9c8

    SHA512

    cffe97baf8be84006a792430917affaba0e8a1376b303e72ae2833665746bedcaf06da81846d189b1b4eedd612ace318bbfca01fb13aea0c29ecca0bac09aeb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32a0baa6667a146001a1e0eb9f275e65

    SHA1

    fd1f50e7bac68b87046791f4e9afc30b6d75130b

    SHA256

    b1166baf63cff19fdf6e983ead8060c3040e8ee0f64c36001b9775da59c39a38

    SHA512

    7687484fb3a27a8320c51106c5a1b182df8c4b0e5eb25470cd22ba54bf778ce86b86ea85ef7c65972242a37775ab27d1e77b23c23c2b2ac9cee172cfe72719c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a8b332a1c60a5f9ac3ea7bdd5e4c8dd

    SHA1

    82ba6f42f6861c910dae77fa89ddd0777eebd88c

    SHA256

    7ea4fc5295a99a3a6220cdca064beefe436f8db02cb9879cb4ca6543866f080d

    SHA512

    f04e09ad8594c937f89679f3d86740f4149555c0e44e3094be96471726305e4598dc2c2792e695b3d22592a0a7f3f0fec43ea8d775d9bd4d50c310fc150f626c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90003017831f4b094d81e9ca5a3c5bee

    SHA1

    5c7a36258e01fabde087c06d5bef5d6f1cd6df06

    SHA256

    cdfcdcea87a2b9fe30d4186aa689908cd208e0414e8ecf28e3cf9a5de3bee2ff

    SHA512

    cc5eef32bca2f29c49c275c401f031e67c706a60f71ce515cbb6e6b786b8009846b796ae45349ec1a8cf3936d52b543529fbf9599766bf3dcaeb61f8d47c78d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a4fc64520d1cf89348f7515f7405477

    SHA1

    60c583e8c8de2e650dd1498037916e1c7f2aa991

    SHA256

    ba0b6a827b9cbb024bec5d4c953df70bd322364a37a7b109d40a0728dad89768

    SHA512

    d9465c0a40952a28945602882d9c7ada120a4468cd0d6df617abdb7ce49034e8392080046afe9fef76055fa8d7073f181e099ffc2b96613cc80b7c1d89e5c0bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4497ef62ca0e3ef0cadaee9594cc37d3

    SHA1

    556ace49b14d0aa5ef2b050860b0101c32c78d32

    SHA256

    18f66d847a396c343047f094c5b17d0a6773df00c84c8d122f3cf08ae47592be

    SHA512

    c8831a0fa06f09e1a4f4d42d22fdee2276828ec74ec7f10e2cb498d19789c97b637cb917c8a06cf9d44d917f9ace8cc639e6972b35ee3f5c5ec508a3fae8a2f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    941a62ac00bede71b7b6d9d8b19ade54

    SHA1

    3d2b81ba3c64fb08f6f26ca281d93b9e531d7eed

    SHA256

    5521ce07260be4f4ac3020309188b98ff5c9d419e2493b251aefb6df9608b0dc

    SHA512

    8bda7ec8507655ffb9934067d9bd3dd1d7cfd605b6dffc6fe61e738ffbed99f0615cf59a62eea926110b1cf6bfc4a608312cf6a8325b12f284aca07f13e5b387

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b49daf57cbedcd4f30bd56eec84804b

    SHA1

    8edb8408d26159f2ca5947ce2ef133bc83b6913d

    SHA256

    c809e0170b55280b77bca0f6c3e6ce9108fb2ab88e1fa076d9ca90322bcae029

    SHA512

    23e7ce30e54993fea797ae436bcf5389ed9e42de9bfeb516c376494d37754dd58680d59b0687da49e6cd026096592cd9b89281c927a07df5929cb79f4cf3b748

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85f37f53f098dee9bd54b2de67ab15de

    SHA1

    f4ecbb65e3d187deb94efcee574af4e91e21c726

    SHA256

    1691212104875df3811cb3677989efb8717209497b7fb628985dfc0dcb41e7c4

    SHA512

    1adbea6fcef8e6ff95695fcd60becab60309383037c4e1fbdf244eb8103dc9b202e9ff761cf2f6af56ba395da8ba740771d95a3f0dae62fbbf1e63b1a3a6fe38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58154db62432fb2400b4b4448a2d7531

    SHA1

    d559d645918fbafeec3006d0a5f7878470c65dbe

    SHA256

    1cf93e43bee9fb5ec6e3bcd3edfd85733d72d8758bb91ec2b4eee8c83263dd64

    SHA512

    5cceed6faaa035819091d6eb9e42f7ec48fafb24a7a8c4fc851f785e69df44dc7509ef43a3ae88a4184a3b46bc8e0438c1bd986e8356ac0dc4280a97b473886d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e93b150a04a29f2d1fc6d52443975fb

    SHA1

    af51f80d95adbd0031514695c6f7f4fc87cf5fa1

    SHA256

    7ecdb2814d793e6967b9b6cdfd72e56dc06526d94b1d6cfe1cbd928501326267

    SHA512

    b31f6a09bcd73259ec9cf4d5bf21b9a3b32b474432af1bf3e37821b7b12876cc409a3d97c186b8940a7b7cc892565b8df3f1517f50e421260fe6c39e8a99d184

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    186cb4c9266ab3f0557167d7c0e758ab

    SHA1

    8a2a3269e52d5505ead68c6a02d08afa974a5e93

    SHA256

    d1ab2cdade9455a17afd9761b8ddbf7144c33be7bd4323aa866ea8c751ad7af3

    SHA512

    da5c7629ad9e80dd437f28e650dcc909b20c29a89497c87de7adeb70a703402761fd77617bbc17e0bec3dc27500d84db902e5c939aa41870a1d025cb3a97c7f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3cca179b88f326ed2e64b6d3b8ec477

    SHA1

    34903d07c1067670f0c50548525c816cb12e6008

    SHA256

    b2b92ca5b8516b3fe58d10555807e8060003ea25ffd9291dc506a1a50aaada4c

    SHA512

    557d05079ac7e6d694f0dd36363e3a94611014ea1166dbedcfa6d0ddc9c09cea4f987cc34174458b41484b65a015019eeffc6cf456d7d50def75a73893f8a918

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b98a4f3b056804350aeccbb49250a775

    SHA1

    01662d4396e35a4f453d3c0a3a8c0ab368f14aca

    SHA256

    0a4e8018ef1616543cc8d2ae0fc2b042725723d9facfd15d20798a435ffac1f3

    SHA512

    a08bdd902aeed80b3d55dacee6b619f6fdcff92d35c61384e33731e2e6e12fc1c60c8bbc9e8722e219a715395ae4c711e367d6abaaf9d4ad0f0fb505e1a3dcf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d12e43680a971f4cc147b84370549c53

    SHA1

    39d49aa941032371330337c1265b23e60c4c61c5

    SHA256

    dd2688998d14ad5fbcde24506bc26aee7adb242c800a273f3dc3f7890da6f9b1

    SHA512

    84269d32bda98dd338cab79da6ed8e18900e955bccda10c4416540be6aeb7fafa3c0ab4c1d2d3b35478d9a9d4d532fa470d2f4a24c0e9d75873400ecb32d172d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8815fa70a480eb9f0c04cda0e6d74106

    SHA1

    96c29bd090e09376c61c2f7813cf2f217c163357

    SHA256

    bc5fc116ebc4803090de5fbba8012cbed6ece6bbb37d8d45f88634e1c911d6be

    SHA512

    85e3a19be0f3feecff1ba0acec4370a700d012dc755858e6389cc0b529560f0177c92f359bda334cc9fbc72b5809fcf0b96eb404bac1fcb5e61d0b44fe131dea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc4b501b08d50631999bec06f65907a5

    SHA1

    4104fe7657a691920cb8d2415c5ce486ea299031

    SHA256

    90b14d1e1c9ad8181b862f03bd79966b8339236c92905cc90de36acf42218a07

    SHA512

    a8f785a1875edd232cd5dc40eb11f678810d5445d2af8b73fcfc165915fd59d77d5ebb4035b3f1c3ec5abdec55979a8b1c8d4470acab398d716fe2ec2be44665

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e56bafeb191b7b4f9f2ab1f9a3a268d9

    SHA1

    a2a348563431799b1b5398db145d6fd072170265

    SHA256

    96614f0d5454575543cd00b6b86201038d02095a89cd4dde5bb2d06674fbd0d4

    SHA512

    141e7cb9d5cfa25d85f4cafc568422c1f043761a139cacbc4cbf915960c125eb6e0b13a7b086fe3ea123d40097e8696f15964a9d7d305a0b69cf85a1895f702d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70c6eab8eb5b22d33c453938f5ce89e0

    SHA1

    a6d1b767d63ad32957c4dcf8935d086689760274

    SHA256

    35cd36bd3601cd588efed4d57501d317b730613085164cfa42da6724001fb121

    SHA512

    169c2894311a61c291f4d5ad5c7dd6166653de39f425a47f497ce0efaba98323b9f911ddd4a88e52a3689885e97db5e9d01b9967b2d61fd5dea66a4da1518118

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae13cd3a05782bf0c00b3fcb2d8e3cba

    SHA1

    9973454d5d8a32767fb47d34eb22af6ae4ba4cba

    SHA256

    b8ffa026864af1e0474b6315bc4438f473237310eca2f2518b03e1cbc64e0d55

    SHA512

    c82cc93fce8a5ce688cf8d7e37ddf5fc680871ad87a65c577d19cc14ca5156df4a8c750e70f3a78e5e2f19ce96b3531a4ebd6172de690a0b37bee3ccb787adfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d16c857653a41a25597787ae636fe7f

    SHA1

    79f170832341d6fbf4ac44a68553621e3fec774e

    SHA256

    5b5affed8bed3bcb43be57d6c1d6a937ef62ae65a128962145451ed9acd8943a

    SHA512

    d13ad2b31a0b2c12b4ac48c8ddf602edaebe419ce836a0987176203152a22d44d17c8cd0b4532b85d919c329c1c6e623c86d3341241b744c34c3643e3601c88a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f7c18885bccb01b72e02945893ec6b5

    SHA1

    7d82311d4b450a5bcb54178f7c5cfc4c9214d970

    SHA256

    73a94ccf4932871621074ac85f56f201f7bae42fe026615a61e32337aabf948a

    SHA512

    a49fa8cdc5c943b6d45212300d71a028318021e9292d834a5c0833f1f9eb6642d0fe59040891a1e1a6c280c99ed51478b38af5af5929733a32f634aeb676ea56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    af830a5c43fc036159ac3cbc18587e86

    SHA1

    2a41b6786120d1b0611176a91764853210b7e4e1

    SHA256

    dfa49ed53012b578d08e4833c192ba87bdc1bfcbe74edf3ccdafe3bec7e23089

    SHA512

    168974f1d910c69619036a68773145281d426029d16f53459777efd29390305f9b7463305817d8054d75e86bb62a9938afd5de1ec3a8fe0c2d4ce5a34ecd2251

  • C:\Users\Admin\AppData\Local\Temp\Cab8671.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8730.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06