Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24-01-2024 13:37

General

  • Target

    index.html

  • Size

    4KB

  • MD5

    6089b6cb65c59a5ae01e3f50620c2eaa

  • SHA1

    df40259d3a60af08fb048db40ac395d1ee435c64

  • SHA256

    7e4a050b3ebd08d9c1cfc227b53b2122beec5f2dcb531f8ac46da51d7145bda4

  • SHA512

    f5f7b43d62e5c8e48d7be7d14bf0813d3008413bd2b1127c0eec64a1ed4b25a011922a0befa5d4105648b97674547c2c98b07e3da6e3f3304f3aca5343478a94

  • SSDEEP

    48:zQq1D4gY1t+TDaCNaLnaeaYsaQNea3ahea2adaYK/4mEgK0u2YgWZ5tp80H7J2oP:Udt+T9iKTKxLHlr7nykHi69SS

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\index.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1132
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1132 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3004

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    1c077dcd695a2c1d7b1f3496903829be

    SHA1

    a4a27a99c160f3b563278f95ef9161b47f70a507

    SHA256

    5f56b699f7afefebc1a005d49b306f906330adebd4c5ae04108c8a8dc9762d80

    SHA512

    340d04d82449a41cfe2097e01404672a376c0a26797c16ef49329d27d91fbbd24804e7c4dbb3faed04132bba0343ecbe0d23507dda4fe7a257a7d740a11079d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53e46cd52b910d90a6fb4cd0b23e4a3b

    SHA1

    04addc70d3f37483682118475bf2cf4d4f742858

    SHA256

    6cff03102c1305110ba4751067a0f929fcdd86113eca1f1e8b635653904afb82

    SHA512

    9c62916e1960fdc7a403949a95290cf77d31ccefdb4f50dfc21bc3d0bb9c115b42593265dbbab764397d6e2fdf985b13fe8f9f1ba587d80dd9659b7adf60585c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0298beb28478cb46a642b7e782c74d61

    SHA1

    d844926a5331a3382e71b242c0302d909505bdb7

    SHA256

    b3be76fffb29bf0746785204869fc9673562dd28aedae69ebc368cc438cbae65

    SHA512

    e6ec4445c6a9de3f3db7d65063873c3066c4bafcdb5a22861d8a657298aae29bd93794b2a9e29f21759f1333dc54056a463d437e6ec43e466585182ce1a041a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48096613b7aa0c2f3bddb7f4ec63e6df

    SHA1

    752fa30388e45af7e890a7ad13f15955396921ce

    SHA256

    5f4b63f258bd21542634155e8f86f61386e42ff435ca2accc75d6bbcd3592d41

    SHA512

    627898abe9c7b6df3786bd108daa73de742c240fed1b07db12797ff337c2be0ad9a605c790a4023a00e37168424feab444f712ee965c5e5aa01a0021b5be604e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8038d420863ab3c32b13eaae4c1d8f8d

    SHA1

    9c297778753a8608fe64567b60d822dd03d5bbc7

    SHA256

    ea79d8d9eb1f1371326b9d98bb475c3ce6a44cd67348ef3ef8f4d84d5bdb7ebb

    SHA512

    878cd9316fe5e2a143cf64204cbfccb7b8589d25d803cfd72e76bd72006a2a6d681c834d531a9efa5dac14cc8535a1640a012f8e65f7932cb1f94eadba24ce97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aac1c0b789e375a47cf667e65c21983b

    SHA1

    8236a84197bc09cf59b29de1a33b5d42d5aad396

    SHA256

    5f2efcbcf0554c19a2bace88331af2eca7d4dd369a1bc8268f5ca1f471b2b925

    SHA512

    652e2802c5df8800a2682ffa6018c7791e1c30ce8431e2ae261bfd5f8061c20ee0c3632f447759cead028f86a95dc1ac650288578953ab68b5e1869e59a531f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2edf1b6fee385658f05457782478b4dc

    SHA1

    1d6f42ac0b8a08abfd1060961a4f20bfb8858ca4

    SHA256

    e374e6bc74e41a0cb5392535dcad262e3e723c7dbe9f00e5b04853ab6db4c3ac

    SHA512

    b5084f59322f0130a97e58d079b24e1e7e7cca9aa9528477bea6c80da96e1c8dc323253a5f4234373adab8938d330de5e47e4168dbc44456181e2d2ebd4cb413

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e234fa513174b611b957552b760dd17

    SHA1

    67518f49472bf616886a222ba3ffb9bd2507c7c5

    SHA256

    231d3e8cafb299bc7042942bd3649309dbee6ce1b113ea9ae2188d5f638ba91e

    SHA512

    99235f0edf4f6df0aac58c118b64272a59ebad6f3a33c9e7f1539ff76ccda55da55f503cae40bdff926fc7c0316f2aafe2cfdf65eb5288cae5885ade0763dcd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d50108144ca4c08ba98e8a0cf6ce1d0a

    SHA1

    d35a038d350569ced1af6471dddc661ee58970d2

    SHA256

    d2737c0db0f1ce8edd1e147e436584850aebabb7e57c1ac3030772891b01e79c

    SHA512

    5423a0c62c0cd5e9d8986a8f351f6dca2a1200c697b7fce6a4014605e4dd012c0a8610b16d4bf77136d5cd7692a2396f6151a3630ce4036556f825472bf00efc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fae31d34b353c310b8bbe188969e8bf8

    SHA1

    bce8793a77b39538ac13df0a270ea0add3da5e85

    SHA256

    61732bd3af352ec7c26d9dca4e36d9b05f418beea064f98588bf7cc818950c99

    SHA512

    0b1a201bbc471b47c6e4ed84171bed6065fe1abe2c00979a9863b95e174c5ebed06fff3101218b7e21b2d2c4ad7cd94fcb5877c3d644410f8b8153605e24c2ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    020316c0b1e4e10edf8c4248885d73bb

    SHA1

    f618aa782656f447827143148cdc9b74a16dd990

    SHA256

    776fe7c590fd3125ae972c138bb2401e634b031735af404433a501ba0426121d

    SHA512

    5720c6efe30dbedab53c29c4c0afe107d5329538c977db9b4260fb2620a3de452c1c770de542ef9e9ff110f3a7e46e31dea02d64752818015bd63b3a9ce7242f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2560d1c1e5582027b1b1bdb37fbcd928

    SHA1

    a2d651792335695d79c53d5c4a9d26d0c911253f

    SHA256

    01774a38c8024d7a21f14fad76544990bbce3eb8d98a8e4832773e9dd65ae20d

    SHA512

    e5180b607455dac6a4bc36d8de1dac606c7064976b958d821c13c471d9250bb9e6ffdd608561bcaa17b330ccac658dc90f37c5f1b6525b84980d390a307afa4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e2c9b87df4e69f837c37b9565fd8887

    SHA1

    a75a727cc9bb19c8859cda0c08d4acb6002fd9c0

    SHA256

    fd47dfea404b9470ebf1d9710c2949f0912a6cd3fc0b95fb67b699e9b85e4e19

    SHA512

    f65f42731dd6d5aedb44d6fc04c25d3d6664d5de6587914f90a4bc22dcd5ab1057b3570edb8afd964512fe109635e3f8981f0c0a7c7c41a8a78a5995aa136f34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26dbc16069744045f415a142a6f70ee0

    SHA1

    d31fe8bb8e6553e7a4237684fccb9cf2c7c954d8

    SHA256

    fda9bf3de71721baa01054efe347015ee899e85309f72c02e171b43c75219590

    SHA512

    559d0f4949104d622e9006e70b99db5b31e461d13d83f0818573e0b72dce2858cc0f5d102c73cc9a84e27c2a921f7ebb2508e551b4e73ca8dc545d96362877b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    293ba890c3a44f7ce7bc53b22955c995

    SHA1

    2e2731d96b3690ae3dbc6d18ce005713dcf0385c

    SHA256

    ef1bc995f468351a3c94ce5673c2e8e1ce8da325cfd17c325d7b32017c4579fd

    SHA512

    fcd7faf224786fa3d0182095012feb3e7d3838b1ea118995b8a276241744a2e10c0b473469520e047ee83e8123a9539e8f8cbadb75507f2dd64d76534f71a598

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    263e49ad90b57359fca5190e3f9b6a28

    SHA1

    f5759f786a6d2c1c1550a72090ef754587955437

    SHA256

    8cc92f39785b5c11a58a9208c9afe811c18c0b39412f19683f3611ccf2d37cc3

    SHA512

    947db6521aeb0a03ab8ae971f3d4c1bcad89d7081f8ef1025ac3c8b96483dcdd740b1aa0ce12ead4abf1cecb406154d3b079616f26afed22a485498103ab7b9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00b6cced9532cc6d96e0da35397307eb

    SHA1

    3f9a3d25399f775a7a247a5d78fbe4463cbbee68

    SHA256

    d9fd4e9731493bdc8936a6d700d317b0c43f3974436c029a71373f5ae8dcfb01

    SHA512

    aa2ce03b94fa93a112651dfd1c4bd138d0872b27c1a3acaeb7b7bf9322c59e89a8707cfe95f2c3f60e51993eadd78bf21e24ba22c6135196ff0de3de44368694

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c50c631091bcf7b5400a2ddc07b9664a

    SHA1

    9a1cf371bed062b22b6515ddd8e8a3e17b900b17

    SHA256

    f421c549fa1ad49f11d989ab9ba37e07294c80c83c5a143134107169d4a3cf6e

    SHA512

    6c19bc39a9134493059509caaccce043459ed2d86e89497154ddaced2e9ea1c915fd8bde1400ae0a6499b882a0b5aff84190c5273480bfb3a846248a7dc2b8ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ee70c8a191830613afc71b410132e3e

    SHA1

    64a59e4c413b15ba6d64089cfdeac38f4456ba36

    SHA256

    8265e569b369ae1943d405100d0999bd9f6fda23a7e0105f49ba018a5e1db004

    SHA512

    7acb3860c5b72377a2f0d360c6f19b97c8cc76698e18f3f3aa03479c46fb5585c25f150d4df40a427953f238c59ac160d63ba745357261df61ef6c1d6760eea7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f613a4bd33bad00bcb249c9a9692b5c

    SHA1

    21a2f2593da1009a24a53756fc43250ed6216ab3

    SHA256

    6f8f31d36c580d69532ff531c6da995c4300dff5b56ceeac49fadcc6f0a65397

    SHA512

    d02b82594e21e6d97e50c9bf627a0d2e3e6dd1a2b30a85d058498cb8dd7a70f344f038a6e9ebe9c10ed38ce4529f9ec2cd2c9ac15b917b2d79cde0c388729190

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b96e116d0ca8592c37c003adee30aba7

    SHA1

    fffe42bc93ce77ec9fc4a2802e2fbaa15da1be45

    SHA256

    7e46f70cd22663112168a3630c796c2af63edbd54fa18361cea14b2b270174e9

    SHA512

    3d909b1da8c1625030ea9f48f0b794e533eeff7a7747f1fd0b9474c424e62c7f2f84b29f5f9df62e266e38448e5873cbc878513ddd962aa9180e59df51a759b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    93fb5687bf0acefcd890281947094ba5

    SHA1

    2fc84a6207598ce39ed4f917ea1ea4fbce4f7ade

    SHA256

    a3c5ff780e1234936aa9d5aba41462f606a5c1439fa7e15af861d564425be421

    SHA512

    420e6ddcf6591cd2dc3e6ff6bb04a6c44b67e670e4d43de3cb8f1b91c970abd265980b127a3532fac589010ed47f1ffe3f1445f3a38ab4a6c00bfe310d9ded92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar242A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06