Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24-01-2024 17:54

General

  • Target

    72ab0603feaebf57c77ad1e3e737cd18.html

  • Size

    4KB

  • MD5

    72ab0603feaebf57c77ad1e3e737cd18

  • SHA1

    d4454c2ec1584e84c3856a35f56c484013a91628

  • SHA256

    ce084678dc2358c00ed99374934f2416ff06007fa6fc606078ea51d359026f80

  • SHA512

    097333a6c8ebb9eca7d269773dd88676026bf8bbe702b8f125d29118f4e1ce220835cfb9bb777e09b0249b282e8410457ab4d2c4520f65af8642d9704f82287b

  • SSDEEP

    96:rf9seakGiwLsvfpFFOxUEZOvBUqsOeN0Eg9jag0MwU:rf9FaL7LQFIa0OvBRlVEg9+g0MwU

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\72ab0603feaebf57c77ad1e3e737cd18.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1740
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1740 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2248

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    641b68d1b5b616087702ddfdcad3862b

    SHA1

    1927d363db0d100477567c495457e2c4e38eae0b

    SHA256

    999e1804c7c534a78791b71c8bbaba3a10e49c6bbd9ff6f5ea210bfb68a12637

    SHA512

    a908b15eeab9c624a06fd78bbb41307f67cd245026bce37278c27ed6d1aba18e4084cba77dca3d33d68efa9d53b46744a4ab52cc005aa57a1fb37e1127599530

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ba6f6d89bf62c12aa6ff2048c45a1b6

    SHA1

    14659a1641adb1169e2322ff7cad688166b7b28c

    SHA256

    b0f456dcd4d5485f8f59e74ce3cd778d5b03e5e2732c844f2e9669fb9aa53060

    SHA512

    7eaa50d41bd51354a37c4e171565fadaf417f8424391a9384b6ad351fbb67564fe3b105fa35a426d0019f35a03aa35ecc2d6dd065601a933305414989479ad8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2afae63f0ff7e1ce9796597d935916bf

    SHA1

    d1bba159b025351cb2fc54b92969fac8ec200fbb

    SHA256

    c5148e892d6acd45e2184e33293e9c554d0a4b64240a219e82dd326e95b537ea

    SHA512

    62c532df4742a5b7b15a4f92f8623033863ea8c6cc981f717e5c140ac4891d9f67ea642fb849f02296680383b4d4df5f1984d6870cb51c8b45ecf4dbbe4454c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5927e7d7092cdd8ccb27ebe687ef8026

    SHA1

    dc0b5d463e5f041097335adf90ce5928d1967698

    SHA256

    e45dc0077bdb267a99f875f1b4f2d451ab9b50153e1a98dbca2353b3bd069197

    SHA512

    3f78d9f7f531a1902119314a302b225306c93dcb1ad949c70389680e1595e18b57536133d88474501a168bb2c2348480b380213470ab8d285865827530ce620a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae08202409c92ba0a803c078a678fe2d

    SHA1

    83402fa78097884ddf4d6baaa121a192834cdb9d

    SHA256

    5d94dd04b2b31144eccb5540a6e59a37b5fd8976b326f1a6d3a3e1b1ff994b68

    SHA512

    3b5cee5560b8f3353608dcbdd8e4e5195a144bf9dd0df0b723e55b0bcef5ce9670df2124d152412f296071b1ae50679bcc23daf9513bceb8885d127f5f0e805f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    566d3c1660169c769249a86915d447cc

    SHA1

    0e933ad095efb035b7b708b19ee0bee03c312bcd

    SHA256

    70b5956865df0e97ecda051ae8c14580726f65fbfc92301ae4aeef755e6cb3a3

    SHA512

    01eb9c4a5595cce41e231fd47f95b2c1471cb1dc8374c10c5274aca71b3f08074c48a9a12fbdfa651c51b624a951d7bcf5037084f76198f967faaa90ea6bb883

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fccbc990f2cbce38579717f879c7ed42

    SHA1

    97906116a9ea4eae51e19fb34586c524089dd0a4

    SHA256

    fd0e950181ab5165f76a368088656da35633ea8d6459ac79d1b87638f52307c1

    SHA512

    718cd8475df30f8d918f07844172c330c95da970570e70e43b316f58cf67d3fad96b3fe3f077691470d4830ce68f883a5c44b5ca0659eddb5c1d4db91e9d55bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b21abe54f587623868f84791617e9acd

    SHA1

    bb7fbce33f0a98cee2717b9570168bebf8107603

    SHA256

    d35e888fafefda0b508c759fdf9a282d9c85df19adb14ec1be997128eab62ef5

    SHA512

    0bbefb71d8cc0b5c49a5553f1920638fb6cd5f59563b37b03a55b41ea7ddec249334fb3f3467e4182da721fd519ef56b168424bd1b404be023e934a3c456fa24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eda363ba8c112fa3f0d11eefdfc25935

    SHA1

    4110473b83fe7f973969ca2368eec4feea8109d1

    SHA256

    edd62644ce9b3a147878d21894cb165b97354149077884bb2ed9c4b041222d3a

    SHA512

    b7b5bf4ba9d9e917c11cadcb076a60621c36477d262215ee8aad4883e778c6f25cde7a8445983f7ca529698b1ca38a32d6ff99177269648b8392d398bfcad5ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7c692ca5378c9161b98f4a12869d20a

    SHA1

    4eee4d53aa96a83d14659274eca5df861a910cca

    SHA256

    8fb4f620555f565c09b8c5c0575f87a0eb1123cc3be136522a0afc622dc3b0d3

    SHA512

    b80eb1f16a46dab4aa66bcbc456e5d18b07c8035a50de88c26446f5546ee3b3a288e00671ea1ef6203ece5116a8c0854d313ea18c16707bbf4d5d77255897305

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a2c563bcd0fca058bea3441c6531516

    SHA1

    a1d32e345c037b5fa10475fb52abaf5e74a31a84

    SHA256

    45fb396b40b5dad7524b8d1851ed0966b5b1ae23c8349b291ebbaea8bc7bf43f

    SHA512

    6a9a1ec228c412958f72faa26b84441d1844003c53051f30c6c9a14c03a9e67aa523e7f2af26f3a391abc4f9b09b545ca4759978667d3587d3706f9c4d379489

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9294eae4e764f3350c1d3675d324a5f6

    SHA1

    d7e900730c14eaf9226ff75b679d1e567d1386c7

    SHA256

    bf3f77654d32d9f140de08bab01ecd36dc69bda863143137f6e7d1da536a3cb1

    SHA512

    ce3a724e20acc74417481f57a75a5959f87c6dff8df26cc197742f16a4742d2f55a5571ae13bfa13fc8319c80cfd8e861308b3c3e306c4e73a299844e8d8e222

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17944d75879d36a2843d85fb15cd3d14

    SHA1

    5af73a5202d61a1bbb06bf6d490b14d610507d4c

    SHA256

    9905812608ff08d247757595ca1c673b4892633a48078c1afe018c7857fb1211

    SHA512

    bdf12ebc03148933722b4c355d49a0d99cf9c3ffbfd6bb66f7b213cce22c9e875a8226b64e47a1ba4236ca1a20f23493bb500bf60556e599086370c7788e066a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cde1a1094debfced75135fa7e3a0c12

    SHA1

    5458c0b476304faa36792bc808c962a3ebeac6c4

    SHA256

    510bf00e23233658f290d7c7e2bc8fefd8d3147eac9287f1c38c72332da3ec07

    SHA512

    849891b910c475dc78ce6163b7c6fd9bf780a180eae1d72aa7fc64cf76d89563cc5187b90dba75b33c072d17309702a18d88a0da69136c87767119a364481f78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b42dc0c7156fb57bb8716fa40940aaa0

    SHA1

    522c8344f8571a04c1fcadac838dbd5aefeabaa0

    SHA256

    5aa45f220d2a585941f134f37e3a0b59acf1dcc2cba02afc0a4d87c0a63f0b42

    SHA512

    2bb273fe3f6689298897ad54151345ca5eace8c814dc72a8269ee89f0217228acdf13b4a67e2305a8429ea9ad718f123e9c6a52f1bc4240c55b104a775a88247

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4345c4a6288b72285fd7d8930284c113

    SHA1

    b1c4f6e5b8ed17434ecfcb372129cd4a1657dbe0

    SHA256

    73fd67497fee55968853a24ef91ce13dad31c3e09ba91e0acd04e316ba8a9e55

    SHA512

    6b7660918480658de1b0c525bc085888e7cd08708104c3a6064e7e4429f439e438512e4cfdf49a742b08f2013e2b30d8ee7e7c98050105889a62add9d4fd8293

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8eb75f6372e40ac413e73169b00332a

    SHA1

    7da8ecc07395708048a2b5625dcfd075c485e8a6

    SHA256

    ff3f904f25b5a84a15ed23a8249f28ffcf0f2ddba84a161c7d48c8cac1855595

    SHA512

    2e7fa9d9ddef085811de54c9153f7f074e7781199ea2110ad3ec06844b18c8209a09d4ee67e38ef9aa2137ed4f0698f1bd242b6df8332755bfe229cdbeb88b7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    478658ebcaee540161622508c254cef4

    SHA1

    06aca0e48e87561f23885987ff27ae93026072e8

    SHA256

    9ccfe7c5a1030d9d58b8af7d6aad5e65574b31157c7f1232ebfdbe3decf1e243

    SHA512

    1248d25de9312c4f00aa6fe2b466d0c1caa8f1cbe050ac42a03b7135dafe02bd7f009685f645fe3f6741b6e9376aecb6588fa7bf499a21ab087436e9adf731c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b332a3232af65e54fbe938cefe1ed31e

    SHA1

    bf774996eca9b8671b1fcd1855f82f916e2e7749

    SHA256

    7e72c89662133e9e04a764125f1313f3744beb527d77d4c09e4b3ea58412e40b

    SHA512

    4a15b5a49d679a437b150e91755cdb10c22a45c5ba49ac33cbb99817d6015dbc9adfffb98447b9976980cd00aad5aafae2ae86a73751f678ac3f5ea4f8006da5

  • C:\Users\Admin\AppData\Local\Temp\Cab4000.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4012.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06