Analysis

  • max time kernel
    134s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/01/2024, 18:51

General

  • Target

    72c89b6942474a75e811ecc68693dc48.html

  • Size

    27KB

  • MD5

    72c89b6942474a75e811ecc68693dc48

  • SHA1

    d7439cca571ba0b2820fe00a5598474be964d615

  • SHA256

    efce73fb0924e717f32663f0b41d5ab2f599130cc98f2a0bb446b26113075a9c

  • SHA512

    e77618e3a0fe8d97d87dd28264a5d6292e6bb00faeddefb57be1b0dd61999c7d3d3fd1f444ab41542bea4dd872b160ef595f48aa5926f78c87c0f3d15145bef3

  • SSDEEP

    192:tzOl9Lp5KsnqwaMPbAshL3VuLwdeZZY/aXVWK9cpOsw23Nok:tQLp5r4d9ds/3l

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\72c89b6942474a75e811ecc68693dc48.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1472
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1472 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2448

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    baaa7c1e0ab1130485b2ae9f3188e135

    SHA1

    2f8c6cde4c8b5fec5060a96e10ca4562eee3a52f

    SHA256

    0e7a0d2f9dcb33786abe1a3f3d34845a1351c545c79ba765ef736aa9f1281818

    SHA512

    b4b5422dc436f103123fe1bfa9d38849d00411102c92b3706816d9561c19e573bd03954eea04fb591c83013c30adf5cb672b99bf739c568bdf02557adbfafa50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ceb7989f8ffee5135985945c8abcbef

    SHA1

    146a2c964cf861621892290f51b42c6340d4d4b9

    SHA256

    b544908dfbd207e27071dd323730c2ef71c1f3966d092c6c44631118f5955662

    SHA512

    53f053f59a277b117004f13fd8b8b8912df3e1f5151a192614a63863225efe6ad2d8e7a37651a7291257a1662a85a148647a28063b4ecd690f741e62ff22e11f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d86825234d875eda2bedb70effad8167

    SHA1

    a9fc5af76bb7417a43e5265bb257615236e62a02

    SHA256

    6f6d75cc7a207436c002566a82e479cf7aa7b75e85f2d8b91a035f7325805b03

    SHA512

    8d6c40314bb228ad4aafd3b5b162df96b6438fbf7bcd6aa2cb1d7a65e2defd39077bedb6a59f576244b0b382e30f1f469537da64911ae7d0fca9910117ff33f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89f3fb9aefaa3eedabcaa67ccfe4b38b

    SHA1

    104493f00cc1b2868194fed489a0a28cf421271b

    SHA256

    f59d155b3a1f0e2c0f0cf68da18835cb373ac9dbe3e7fb2c83793be1943a4156

    SHA512

    6a9439a7f6bf10e83e1c50edf9f817b5f6475ba789288e336f10c88c24243d7081bc1dd75d9fcba1bea9110ad2458a7d1306026714c2e24e2c00c6436e9bde69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66463d31b08b90ff158465adc726e6b2

    SHA1

    3e6d84f44a79feeb8239b50b7130ed53298ea4cf

    SHA256

    d8e2b1374d71710f737c86af022112414d72b4b8aa2d8cccf31152f6e51c4d09

    SHA512

    bd3f6f88c479d82f6ad662cff33e23716d847cdd29e4df9b208185766aadf7b34c5d984d500a10caa9013741b047efd9d6828ae37759f573afaa742c264a1d47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b3488ecc60005a535dc7c0d4d419cd5

    SHA1

    3494f5e72f2c389cdf61f1032a70dd2d57184143

    SHA256

    c60957f9a40b4b6e47f410809008cae7e687ff0c77e9649e5b03da12029c3c1c

    SHA512

    73957ccfafd65e99dabeb67da8cff79f304859da2f2c78528298dd5f9122d07e88fc7ef1fe15d2d011b3e0e1af9b6c13511f61efcccfe43f361b4d2d26b29e31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d66269330ee2d18826cd42ebe9e52cc1

    SHA1

    772c6be4f9fbe7abdfcad5729912ce77fd0ee8ba

    SHA256

    a1b032b7cac55e609e62363b13d4ec55444e8f92e648c87e178addbc80595066

    SHA512

    10ff66e444a8838ef8640d8bb6a91f0be6a47c14ef3f95af5fd92659bc8d990c2de490070f39b0e10dcfd5d6ed3371aee135cc426a446fba20e06ba2bbe406e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e57fcb711daf82c60e57c55c8dac2412

    SHA1

    1fb2a90055ffa7dad8c7d5c8e92f9a8629b53e9b

    SHA256

    f3a2eca05bab726f8fd03189dafecffcc348e48ed80afe10ce1d389edf4c770e

    SHA512

    45c5a38cd2628241ac34f16c8f59082925ded8d1af4ff442fad5711a354429dc142edd65f95ee94d495de5416c7c33ec66137894db0fad31f32efbc85f0b4922

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    178f24b1c4b4ca1d332f9dfdb45a9550

    SHA1

    d35d089a444117466f19ca4a24dddf27b3b588ab

    SHA256

    6e919160a33174a47c81db938f41a50f037df2a7c2ddb0d286e27ec933e6aec4

    SHA512

    c8f38bbf023f0a09b49bb1a8abc496ede86649990190e4bf16703dc1bd7b1d3247cd45f3d5f1f3c4de8aba9edde6724473c4e987f32dae88b90ac7d34fde1ee7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7167979fe2af8e0520d019b26f3b1d18

    SHA1

    cabd2b304429b1205a8483efed3559601d1b2850

    SHA256

    938e3e9fad7404918317e59538abff43e04a3a82fa69fcea18726aedb18373d0

    SHA512

    afdf6948b516a1822f4eff68e61686452b7a82f18fb2177c694891b8dbf9888cb2034121753fd946f6a9ab410a7d30469c615a33cc9ab3ebee3b249e52666d91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5505380fc562cd64a4f0489845110b0

    SHA1

    74c710f3c28174bfd24e3fe22968b4afa0574f2f

    SHA256

    b0dc068bf70cda0051f618d57aaa142476beae54d291644dd6a1923b2db3ac6e

    SHA512

    b25fd6679aa6c92cb37a96f01c50237e322f98672066a019d843f10ae098fafc3a14284657010b68e06764436dc520d2eb5b2b7a5cb9f28ed1bc5c865a9245cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ce1b31916cf4261518c5568cd991d11

    SHA1

    d63308c06d66ba79b8785beb64226322a0f39e78

    SHA256

    66a8399d95f7d36e1c55699498f8544196c4adc548ff5d9d4671d814aaf9288c

    SHA512

    3af4ad0b2583fa7ce3f812596eabd1db2f256841a37e4ced4a810c06520aae68940678bdb145495951df0f74c62485f330b365dd435f134f010ad6fb2755315f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f6086aa6560e2d209c1288dabc8d639

    SHA1

    1e720f36ed5fceb0a95dd1a0d72510846528b501

    SHA256

    6e9e324e919dc01b4714770b687eb18a409e382b52fa9d4e2cfaec63797b2397

    SHA512

    a72b6b76705a312c763458f7dc2d54b908f473355d0b92fdc74d1a9ae3d4beb0cf4750439dbff73ecd6371ca69320512c691b9b51186ed67b159f3093f2de9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f65993ca4705f42f5cddeaa1c56fee2

    SHA1

    268463a86a710086ca75be0c2842478434723559

    SHA256

    443182ca672a8ed6c42646806a19e050bba4e25cb3cf0f721c6bd4f8759f0e94

    SHA512

    76b5196c5904b54e5e7a9ab23e04b842bd675593d6688edcea02ec475e9f6ff0514f388a692083336695c4413fa1dfd5258e9afed68e4c1fc61461ec3d24a67f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98160b53b14dfe4fb44d2ddd1920b711

    SHA1

    3a709c7db5eddff5a74789eb589fb8f97e2c76b4

    SHA256

    c1caf02337998415590ae16d09502bc96e49a2a30841e0fb75a9d139154bdfe9

    SHA512

    82b9c0b82145f4dea961c5acb99ed330b5e2b4d69b1297e9ba5afacddd34ab7ea2f1c466f7059e84f7f492e22abb330afcb947841b2d0d263b6826cf65c721ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a40f62abee68b2629d15af0618212e2

    SHA1

    03236537447e5e9cc5a2cda12a9fb20efab490ac

    SHA256

    b4d4ec217aeff3715b4f66d44a932cb8f4c256d145854654aad68ad05f6aeedd

    SHA512

    f8e342ea794aef30e3692d51b87590ca3c10b57708da3c1de79ab066b8882163b2a699568cd59caebf5cd2048b8adebd5d9a903b5b94bd4e2e87bd97b43265de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bae8a95abc456ec0e4bde88f29bed85

    SHA1

    43d96ea593b0192043a20ea80cd0c9e43d1f50c1

    SHA256

    52ce9dfd7b9d8e9f6f67fc88a21abd463c2f6eb736ad0500b616f1fea86e3fef

    SHA512

    50fb56b86269c5d935db45824992dd72573f262342926d654724f05bbad817e9f05631d233a0b3b323ebfe8a0e6e08c292aa9cba691a0e42ff2c6864e59ca3e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5d461f4b2ac7f82cac475c54aa4894e

    SHA1

    ab8f9ff04640b70b6418aa2233c991d13c5c8aa2

    SHA256

    8eb6cf17f7c4030f84a121da3e850b7dfd5fa4010d250912b5522fe4e4be57d5

    SHA512

    73d6d148b6c8835f1cd36320603493f0467c749e37902158f0b48f59a8947a9ad58929b114eb717f0909aa9f8c427dec990ba7341395d0820bc58955ed122f37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ce723bb92b0b632eaf469a2f56e78a9

    SHA1

    d84b32d9b8ef4e95db32f0d114a2f31b00ab1c4b

    SHA256

    90e37144f3caa9f5ae04f9a2992518d902260a4181782476767ff1ff020bdf70

    SHA512

    33d90ed525d43179620f0cc172996caf26d4a9ee0813b60bb62d9214542127c9783f89fee938a965663e369a7bf7af3170dbae1c4d87225df1122d2a88a60729

  • C:\Users\Admin\AppData\Local\Temp\Cab6143.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar61F4.tmp

    Filesize

    136KB

    MD5

    61b7682e703377c60d2522d8472ec424

    SHA1

    205fa2191042f4986eb7d2d930d81070f4777a05

    SHA256

    8068db10134871dd7f3fc5fff4638410a902bad7822622eeb933dd7e70dc80b7

    SHA512

    16ad4bfa04927d716b9f64938966c803da8599694c2b0304d34cf57fea4eec03004ca60929930879879f012a73ffed89f7c7f181bb2ce9ed0db3988af00b4ec4