Analysis

  • max time kernel
    122s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/01/2024, 12:14

General

  • Target

    7236b223af52e209b0f0884bbda32680.html

  • Size

    4KB

  • MD5

    7236b223af52e209b0f0884bbda32680

  • SHA1

    667284a357541271ab7fcc192582cfb55b36077c

  • SHA256

    6fdc0fd4b3bdda99be638774b218a0cbf2017ed557df77f85fe14fa87c093c9a

  • SHA512

    2307e3a079df79a294e6b3847b282b5c1940aba1c1f79ea0e3534491901ad1b2ab3105be6691798b4c076d67207ee4ccfbff3fcfc62da12329d1766e41a4c3b1

  • SSDEEP

    96:rf9seakGiwLsvfpFFOxUEYvBUqsOeN0Eg9jag0MwU:rf9FaL7LQFIaDvBRlVEg9+g0MwU

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7236b223af52e209b0f0884bbda32680.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2484
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2484 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df0d50b1499037307d9049af02345a35

    SHA1

    ac4e82cd79212c0729b98a04f808a1cc78124d73

    SHA256

    c38e74199ae2474a31e666dd79c77d375fbc0c0c272573910014a84a571d112c

    SHA512

    6618b040426fa54553d0dcb36ca43351e835859a2f5f0e6391e629daeb196f369d0e78a460a9d678ad145699d2a524dcf11f0bacbf261b3079a5ecd1fcb95cfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc29172827895a7ee24777b3378efbf4

    SHA1

    41ec70ac746682ab892fab971b31a4eded5a9b39

    SHA256

    ad7a10a96cad0ed3e40d3b21fed6064b4230eb036afc2289c4b1418d0542222e

    SHA512

    2acb86e3b7ac227017af1f1036259cbf8232ffd7d846d7d1648ecefcc380d1a7ef241045b811ffe56507bba6bdfa8f974bbd17ec762b838276a8206839894450

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90d4c0f068e976d25d6c95aab169b3f2

    SHA1

    07922f24ba3aa3224d5fdee22bffd33d9d1818db

    SHA256

    00d4a02f93a140776cdfbbae2e021e4404bb6b6d0b4e8ef11fc4d233f660553a

    SHA512

    87099c20a2fa0ceab051569388083de67fb073e90bf084613f8f60cc20be1836c142c7a79ab275b8a0fd07858e7a223f25e89211b91179fc3982ff69f15cccf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cccf31f6de74c35c60578a899d57e333

    SHA1

    65212dc5ccea95b829f878b06339bcc8299a6731

    SHA256

    c1f8f17101e40460025b95c661256464867c5b533f765409597c35aa64f117c8

    SHA512

    0fb02270547e729b06e9677f696cfb24d1a2219ee1c3e9bb81a22b67b400233c7d26131377f943a0134157a1b672ab54c0615da2d2bbd254abd82e320df2e937

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50e8cc3bf916fe58cffd956bcc628036

    SHA1

    d6d825676d70d306acc302977f4654e7d9bee411

    SHA256

    5a698abf14cfbd974f7f4dc848c4437eab7083439a1955f44ba3fe132c363e92

    SHA512

    3eb3fd59a31a13ad45f41cbccf0363e97473e73635fc116dc50595b67ca54fa31bcfa454b6a4832c1e290776a1a00d3306548c305b1d6ed4bc700bda4abf30eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ac67113d924e47f04374b3784b6dea7

    SHA1

    970b10b2ece5642cb998126ef95c950ab398452e

    SHA256

    8c746d261ae492efd6ad0fe76578cb8750d56f4f98dc591b3bce68a43b162a75

    SHA512

    60622f330b577c44205b949a9f04754d970eec7088dd49658137e0398d0989e9cf5d8dfa5c2f9e3ffbc074a32a1b5a46d73a6bb6fd8c8030e51b5fd20d160fc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    187b2b973cfabe723ef2ea9aa65b2ac3

    SHA1

    3630a2e9d9cfde7860bc06a4a967af25c7febbe9

    SHA256

    e33a1a6069b8b0047e74a95683d09dfd6c8977f1e590daeb192ebbea11952bca

    SHA512

    dd84201914e90fa5792bf04efe6cdc3588bf68d3f1c8f81b7574046b259ae9fe72f7141eb1c2a945b88ee042348a3578c947b4dde7e44733423f34a7be63f55d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    168a49082005f8df57050a161599dace

    SHA1

    4d60b0ebcc946d62a39ba9e6b4e11f6f143135f2

    SHA256

    2506ad1bc966792975bf22c9c472fb3b07477f6f8152ea2d195f34f09dc06c9c

    SHA512

    8e70b354fe34080d03d12e44e9756e2969473fdaf39a81b3d0c6fdaf1c59c4f910582fd08d2de8a006cb776840d6d71947fce3513a353bec4f5353f5a33613b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e7a8b8a03b1d21534c7235dd4bcd21e

    SHA1

    a0ee8043c52d1ce722028ca61433f6304fc2a3b8

    SHA256

    a348e2afcfc22d0cb396d15df7d3aed1279ecb257516d801820945f0f76515b6

    SHA512

    dc9c4130554a6dd875563c0095bd978f0c9af24a9af9da5994a06f33ababce4ac91874afb89df994f28bb9c63c5931850808460b2fd4558773b361d99739b010

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35bccd15906e1b59f7f207a7f0f7895a

    SHA1

    b2ee03a45398fe7ef717836a3f54f02487a95186

    SHA256

    b66342165f1ba24a5767a0334b4af5e13c90e9bd409c5346fbbb8bf9747fe386

    SHA512

    54a170f5b8dfcf57ec5791b2554039252a6d653a8c4bba0b38838ffe907fb2de7114b93ddc5bf7f4a5082de50e57e482eaaf044d0ac4da3d44a00e75ac28fa79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e8eb5d06f5339ae71d155dafe43fb63

    SHA1

    82ef11fd4e7a6eb3bf443a6db599a4ee4f96f186

    SHA256

    fdce679b071bc74d6ab4edbc31995d7b3853a360bdd108e5e693acb892537184

    SHA512

    4c28865335cedf4cb5ad37785340f559d6f1b8e5e6941baaa7dbf52ddba5ebf2af6fa022e98f01fac26228e0c3907158bec109edfce83b73ef745e8540b4dbf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ecc3f1e5a63bb56365dafebb934a53a1

    SHA1

    4786a86482594c68c0f5f8529b422228f9196ac1

    SHA256

    e042081bd0e5c60f8fe03e02cc0438686e140a67c8a057cea07d408afa3528a4

    SHA512

    f1e93a4a4fd8906addaaa43463f3e1077f80a96d587868e4a34e45d57eb28a3d3ab687e827bf89e021cdb74e7c0f8296e0ab5c7cddbafafec31f9f8fee7f1b56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d6a214bc64c2d704bffde0f6162e444

    SHA1

    365c01985823caee2b72b4433a50932127cc608e

    SHA256

    349537b1df2fb550c46f0f151d4f60e5ca466fafe2604e107b4c293bcb69688d

    SHA512

    f841fa5b9161185a594b8799c2fc1ab00879d4cadcd2ab8b2b9f447c47882ec03bf02f5f71481abce6291400cb5987ddaedb5ecdaf58467e560a554397e27ce9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11987f7c09047c0f7ec90d080822ba17

    SHA1

    f1807a9c4d2413badf1a79ac6b09c5d07f691da0

    SHA256

    c3b1cb958221e338abf9b25b494719f2c85928ecb7b1257fd1b34aef9d20186f

    SHA512

    d2a85201368a1c54b2c7dea988db164c21e03e2a2b2da46bc544f1e0b345b117dde4809fbd71d17baf36c6cb1a720eedb4097bb39100ee5beda2917e36c3e592

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    015b544c1210b18121a3cd094ad16273

    SHA1

    1ec8a4a7725fe914f595f3a8f3c1cac53cb34ce1

    SHA256

    8cd29ebb365d9a7430962205ae385b3ad0eda3fafdff4caadd276823c698b2cf

    SHA512

    085a5b07967f6399edddd8453866e617e67bf195a41f3c191d33c3e0a0d75cb8cdace5c3530deef333c800d8725af1e0ad41b1720bba9eac751306e2e540b303

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aac98294750ab1ad4bbf072f522cea26

    SHA1

    3001bf9691b5f0e070a463f92269ceb256fc28d3

    SHA256

    64574b1dd40051ad737c9d64f6631b5aa5cbd4f394d7c718d70e6c10b3cc0e5d

    SHA512

    790c3007b54fb22c3d9489caca3469771b8d4b44f74e3ff943f93637502da5b60bc460084ea2f19ef31faf3c5f7b39415d8256fa9c6cb92a2d745bcfe30d8f64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    196e561c41b46eb234d76fa72b1ba5b6

    SHA1

    1e8608f5ea6dbfeb01b04963fa7eaa3a29cdcbf1

    SHA256

    5950040dd271b464a3fad8962cff0f3997886bdfecbe201166f17d26fcb983be

    SHA512

    e92d853de4bf462ffb09fafc3b7c7014ae15336e14a4c2e8c017dadf95f282b3eb6856cdc62c1b304cca5f4bce2ae1ab9468011523c9b81464b798b6b50a7e82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0b4725789c30388c7e7f40a8d47b92b

    SHA1

    26fa844d7200acd73296483374fa4aafad4dbc62

    SHA256

    9759a92027d7182538de49ee66f697f0f31dace29f72149a6535628e18370718

    SHA512

    50eb31e8cd75ae3d53dfdad0932b03c1379f853da30613125e68b93552c7ba75eb1b1d3c3a8f9bb9b80942ce39f8f92b68b771962a74b0d92baa018bef63256f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6be52debf72e07671ecc37d6446494bd

    SHA1

    6afd4a6a245f2d885982e589d3361b03f5be6638

    SHA256

    15d17e8a2c368e817ca8b706ef534e9624ffa3e808185f46e558e72fd9977aa7

    SHA512

    fdba189d3a22bbf3a528c15b0104ba7610604cb26731492807e5e9c7a6cae4dea83ab32de6821a60434a1f3955f3ae8e17cb88a1a1eabfc291706403faa1a421

  • C:\Users\Admin\AppData\Local\Temp\Cab4F2A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4FDB.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06