Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 01:33

General

  • Target

    7362db13ea8e6ad4ea53412a443c495b.html

  • Size

    8KB

  • MD5

    7362db13ea8e6ad4ea53412a443c495b

  • SHA1

    be674085837812f78f4c7bb200a365bc3c644011

  • SHA256

    1731238b66a910288e9586d2fa287438507c262e4e54bdd4e543a4f534885029

  • SHA512

    7cf8fc44c45d860077b0391b9275728f58852d9918946c2447ffec62fcd565e39cfef0289a794c94b799041869b6b29af87c860531cc420930b24760e41c0f22

  • SSDEEP

    192:FB16+I2tdF3axv5k6VKHmTUaEGCJegWh9rwZOROKJVtvyjEEEaQV7/6tDfZcMP6:Fu+DtjMTUajL3EE31d

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7362db13ea8e6ad4ea53412a443c495b.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2532
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2532 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1404

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          344072d9623ea59f352742e41e5b553a

          SHA1

          8ef25099ca07cf0962c36120b82708dd1ee806d3

          SHA256

          1bb285f12f847b2c091369710f713a455f1a459f04bcc05a3e4e814969c77001

          SHA512

          429f04613a3301d9368d9bc96102f52659994be205e61d9659631e072837ed56c0b979ef8af5e0299b94d7c1d89a28ced2873c3d7f800ca498cbf5d3f8a9d49a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e9072169c6d4344c37247cb55e43ac59

          SHA1

          b4c1e26fa199714d50f2426b6634bef66470d3ce

          SHA256

          977e23a29443fcd5dd67bf9e86ef07da1577c5719b8bd24c7b324e135b2b4ceb

          SHA512

          45d57f4fe49183c12cefee8050c39aa0b23a08db4a6f04c3eeef9c23cb9a291c18f3fb283184097879d22ecf6c3fdde72a28279f5da0e3a2fba8b735cc2757ea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0f79559b50d850a4dedf2335f677922d

          SHA1

          82f65130461284fc428843d3cfc22412f051ece3

          SHA256

          482236c228ce5a91f277c91d02a9dcc6f4507b23f17275f975aab8083729b5e9

          SHA512

          54319902aed4bba2810b578b0b2c33fb6d3494d0a84857c11e7a0d3dd5192cee86b6cffc0d921aebb673c2694b2f17f4cea0eef97f726b034b6c976eccb7beb7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4ed6ae98f66bb4681cf181145affdaa9

          SHA1

          c95d605c70c343da6d90629fd9ea1e1b16fabda6

          SHA256

          ebdd099399fdeb212f9697139c8336bd3b68408bf72876a9ae17e6f6c7e46036

          SHA512

          34bd332f1d4679d0f3efd12d6db0fd46ba6e20d565c5819a5b25c20c0aaead4fc66b037e442ab2df0f590514beb212922fc91d453fc4a66c60f97d727a6c893a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          940a4f62e97998c57601f0028ecc5576

          SHA1

          25f3b89af7fef1db3d9977020569aae82ce57fb8

          SHA256

          e88ceddd2b499af36df985b87edaa4c91b5ada614f5a35bfa14362a119fd4a2a

          SHA512

          aa97f7d7612e5ea07b5c2de5e41046fba28d44ab8a433b2d66602a7995fe46bee7c0f7f02d91f44f95fb799058cc8d7898b2fb55ebb7bc872472c0b0ba18c77a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          58616beeeaf0c0a9605fe5107bc674ae

          SHA1

          0ea4d410e21b5a51383ef3f2a6d70ab42f24acc4

          SHA256

          ffb3b31c6868717c3962d4d8cb642971345a1ae7e424ccdc5b956179910c3f8b

          SHA512

          b9179227adbcb55b4e8916f078e92d8cbee78269ff6d472fc7bb26dde086dce4dbcc78aa6a5410ae4f2db892360ed109ecdffb6dfa36440b46594e211b3f8b5f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          461cd413b62465b6b8e998b9f4a20c2e

          SHA1

          55fa9ea3595de896d932f51bb8c43d74b84e0a10

          SHA256

          f45b378f7e9d02d21bfbf5f034493f0c1565692b35edd281dee701f91a5c8064

          SHA512

          353c162797255d3433f2e71217df1a6283fcb6ab99d10e8fc628297afc6d0ce6808a5dbbd333755e11ef03ef45b104ae6912f7d92bf842bc73326d35588be152

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c5bcdbda5ecc2791b2ad579260a98287

          SHA1

          7bcf445b1a98f838072ab679aeb466f9cdc9babb

          SHA256

          fd725c5499db590c029d36babac7b1d1b2afdace40e40bd20395cb6fdce79fa8

          SHA512

          e6c02453b4af197dec3d1b5f52b0e038685af40d92a874a1fd151138b2ee47891bf8b9a5cbd4ff28ce495e302d3c805130e4ec1502dfae0f4f69908394014de4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d76eac5c93594b20580268b0bf78f33e

          SHA1

          e9e0903ea39f10018eef791315905a6c9c3f1f46

          SHA256

          1eada9ead5819aff0117f97092b6ae32cc91f7031a7f347011be82e294bc0696

          SHA512

          e577fb609504b61d1a80e613f0b5b2b4f5c5b6b6794ab5183f042fbdb8c0cb1213956aa36339deab4f767a2b595443551392e34c92f1484f83cffe5276d534b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          47aac968f7355713f351fc583728787c

          SHA1

          f311e2ed0ee928b81fa9d3211b4f5ad5065a5026

          SHA256

          6de7ec30705b77817e19a0cadd5d66e214c108d437e0bdf3ccb6f8ead31e081e

          SHA512

          664e2b8f9192a051a50b51fcc0ccc77d5e28479c6a210008f084d3b769750dba89ee0d6642796e810e8fdae1e716dd6c40791105202fab54091f99948946476c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2a2e95e1b3d18f7dc3554e03d5332020

          SHA1

          0d48e8b59f923cc105b56fe3bfab8b8209e5b630

          SHA256

          f2af2835e4cb679ea91ff0062f107bd8656ede8a66fb5ec7203f76b37cdcfa26

          SHA512

          7b6823d784af3af4ad609ee90588eefab3bd95bab90bb0edd6bde513efd1dbd710454a94d12cc3b3cb9f7d49374f8f29fcea3677ae2586e0c27542aa80b1299a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0ab5f4199521b165afb2d48777e84f39

          SHA1

          e90628fd56809af99e56a5b17bf89a3b6d31602e

          SHA256

          a204e13deb3e99bed724875ef0fa34150e34224ff726b0164bc9baef0c569203

          SHA512

          66a5a5308661b8f33bc17233fcdcf4f627da2bf35fc88acae9f51c12ac8744fafc185a0ae983881f9b822a5416ddcb017fbb1a39c9c87b47eaf08bb5317cbb2d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6ad0e279cecfabf5177359351198a862

          SHA1

          f15cbfa166dbd4f306d33496d7ed3bb7888a4d39

          SHA256

          94a128296ba9f2eca989ae7c0784da0d7e992b620e06c4adcca7cfb27bedb516

          SHA512

          a042acbcda42a36aab922b6e3594b1c9c7f9bededc8ce4330973ff82a4c3a0743617f3b099297c9be0b0c5d1e194e458285eb7d4ecae519f98ecf6108d7e2008

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c7d181b51fe114dba1511fadc5dba022

          SHA1

          53541bb1535b1795bfc7b33fce48fbf74325ada2

          SHA256

          0a51f4af535f0b090ac9ef19e93eb1487fa4103b23e5c0b2f8b2210a4825583d

          SHA512

          935b079664efb94bdab300f000946931d9abe6f51ff160fa893ed8f5280b579424578a6cf981d88701f67a81e845c1c4f95f01a53968ac2ac2dbfee12f599347

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          66f8fccb7e725e9517badf7c07845e0b

          SHA1

          bb0cbc83a7b61abac5038b37a2370e43c944610b

          SHA256

          6b77237efcdd319be084dd0e537d780483f772eede3996cb8b5c7342b478f3ab

          SHA512

          61e94324a934a93529507015c0b35e29449dbb36c82149269a555adcf23a9347593fa61da41935e615068e98e5ac8309c7fbd36bc6bd7ad1bb6f2cffff767846

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          73110a5aee5a99be6c86f18d43241761

          SHA1

          5682f76c11e83448497d1423c521bb4b366e5ac5

          SHA256

          71b8eba5771a05db14b5ea6b88eeca9faa984a8fc8537b66bfba6bc3c7ec2ce0

          SHA512

          f677c49e6aef8b33ef6b03ce7f51dbd084ec335ae5b5dd776499d0ce9180751e23dcc11c4d0b60bbc9422b1ebdc490a0977a95bc9dbfbd49cae48d87f146e06a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          95e1b50dba9b029c1a571e0ca52d1f72

          SHA1

          12d0cbc4160df1df4bcab6fe80e6fb890fbed5d5

          SHA256

          24cd974f0e4986618b4818a400cf194fd918530fc87b3da43c7e587804d60ed6

          SHA512

          efb4860226a85fa09d8a8c5ceabfb8ba85bd1ab10e3d7829f8a4db0b74816871d9a80f552a65697530f250243b34c2b4e41d68ee78bfd11c5bf8988087ad8bea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a508a747a952970ddb281b1e5b304de7

          SHA1

          3634212a0e6080f22921adb9829822878dd5ef2e

          SHA256

          572d7bda141fa2ec97071228f3b96951889cca52c8c62a63d1b12c0b477cbb2e

          SHA512

          472258fb7703de54ddb8bfc35418c96e15ee3c7995b809096b952107603279caba3e45705651059e18bb2f447cd632d1c6e4d85f7d1279eac4de5a62e8f655bc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          91348ee2b3595b7af224c470a5643ad2

          SHA1

          6c4abe88a772c49212a1574e31fe5f3f35bc22d5

          SHA256

          222c4a87f5af0cd8a855e26e3db02140d2b5761c68362c89c9ab805910d79405

          SHA512

          ae00bf11be73384322cbbf863cfdc34e8eb0fc3c967af04a771982083797ff76f14caaf9b1fc3933fba8ab9a9d1ed8ac40353755c2b26a91e8196349b0c59ad3

        • C:\Users\Admin\AppData\Local\Temp\Cab251E.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar25B0.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06