Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 13:57

General

  • Target

    74de2c166d09858315f30a8412c09825.html

  • Size

    55KB

  • MD5

    74de2c166d09858315f30a8412c09825

  • SHA1

    de17a5a19a252942d7c426890be39dab5c147de4

  • SHA256

    18241f78fd7a104a1fd5ec7ac07ae2ea6413fa0a6f0cf3a60faeba86aaf9b12b

  • SHA512

    c054f540edd106a84c0490ae725388ed8ab75f0e83fcfcc84532b185185f000faccd8067dd88d47f170e70ade7cd2cb9dac74c4cf5e3dbfbba19bc7687a17f19

  • SSDEEP

    768:2rypHvvCIoodYM5ytR8Yk1hnAhS1tRRh3Fj3W:2uHv7oCYM6kHnACjh3FC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\74de2c166d09858315f30a8412c09825.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1536
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1536 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2256

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    d09b12af69c9ecd7e0c67fa6f4079687

    SHA1

    cd7445e61189759ae9703bcf894e6eabb73a528f

    SHA256

    5c95c41b2d9c5485ef7e9a5dc543c76ef4e0699398f3dda79f5116624dde477c

    SHA512

    cf791897a501ff03f2b952042389a0629ab65239aa716e4c3aedc61019139cd5c7495e122f11cfdbf044283ff5f7cc4e4368f3859fd820e71af55e56f8f5d279

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E87CE99F124623F95572A696C80EFCAF_33A22DC5622FDF6383E749748D25F47A

    Filesize

    472B

    MD5

    ac38b4d335929ce043d10dae7e686062

    SHA1

    8d4eb5b9be5eec5460021254564d766fcfea4a6d

    SHA256

    0a1038d48179b00652d3e86e5fec189527149b922df822b92aa6754272b164d6

    SHA512

    463b5d4663e7fedd59046ff4088094944a7246056597584e784d38ec5f77f515f39309422ce6d292b214353d11880fd44aba7bf2eb1f8b88c712c4ad90e15df2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    1766ac2856e86607c23bf4fb2fa51762

    SHA1

    b629e74da5b75b3107e3fd3b8995bb63b24e374a

    SHA256

    b15dda9891d23d2f20c6fd133bdafa2016b694dbd1e9efb1168f63afb02a089f

    SHA512

    bd3e9ed367cf6902d66c8c890aaa2fc80fe0d07255b617618f90745c5f8ad9a4e8d82ccb9116f7ef5b04a8cc5c48102e3e7e66d480378616d8da7bc03f12557a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2c0c759da1f9a6a10f1a10f5f9f149f7

    SHA1

    ff3a5c381f1212064d3b189e066edf61938dee51

    SHA256

    9653187d801418c173d5759016f2b20cfeabf5d4b3d18d2eb805a03fcdb0694a

    SHA512

    8570b64d63b5d7606995c8238bfd583a2a9e10a497fb4eb44c4c89b6e0009b6eeedb84580107f8333584dc3a6382afd31b660515ee164f41b03c0079c8b19cc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b6508ee770280ad90240ba2d8c6f769

    SHA1

    a83c5bf6c7b4c2ab37512300cd8977d2b7137b97

    SHA256

    694763024c4b4390a28f677463f70805d3b8e2ace02d90d36043c33a60cc2b82

    SHA512

    b3fbd02af2cf53c20e66f14f7515a45b0a99cd2650ce899af64ada1177d9447bb138f87c9b4a4c1860e8db1a60c9c5c03dde9b6807332c8bb3253d6387ed96a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    864337cff4d8cdbcd6ec0f02191b1604

    SHA1

    629358044556ac13d24235a085656218379139c1

    SHA256

    8d6010c9ae52e63d7672831bf55317bbd89d9a70b52fb199065a3deaafa7bb80

    SHA512

    4fc9fc3fa4d0498edf32e1a1d6213ff19e4113aa632f7435c0a74902b08c3983d7c2e65ffce0e8a5ffb0c89ec9bc128dca573574eae115040a8bfc0cfd622959

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f8ef71cb05a64498c500379c4fe9668

    SHA1

    be9877068e79207bb9961e49c377c4806b5743bd

    SHA256

    1873623117c2cea399de1df2d48f007d8415369b1b5cf422902a550c88e3f6da

    SHA512

    4c4ccf4f6fe4b22a96048400feb4401fe72974963f5cc64512ad035d3b362bf6d3dea9648bd9bed4b9861dfd4687d56111591ccde99c51a35210bd52e16dc9c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a902569a99ed23fac3244ec57f8d3710

    SHA1

    e71d2aa54f84a2dbd0d70bb4e2255ea468c7e4fc

    SHA256

    e447fca7df63c20f665589418d5f7c9f7a44ca8cbe205d7a1447885e262d9c22

    SHA512

    ab139438d1682c3d911966d8532c170f47e98c8b8e6160722b106806e7fabb7ab4f4fa029b346daebb5a26e6d3dfc1bc0749044390a1cb034b5bcb5774ffcac6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b8e1c6019809acff633f37e0e216588

    SHA1

    e974e840c56ee7a92877e9aab93f9ec30487c35b

    SHA256

    32aea15571170ab5b35a2f1f405eed786dd0286416094af818ee86297b3de0f5

    SHA512

    8fa21660cb72e39157752c90a1df00f898a11a431b0f98bf19b75a6a517349e8eb1dc57cc6f141d3c1f1e163d070521bc4c6eba15228c7eecca54d3adfcd7b02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f5a5d2aba724328977464f2d2030347

    SHA1

    324462ae8a085518242c9b152b9e1425fa16e4fd

    SHA256

    7d8ad565ed502e937c696fca0c552921cad88aef61eb29891f85e1bb84fa1a56

    SHA512

    48fbd1f46b7244bed6a7c06c264628ae17266e2f505cd1f92a41231d66c677fdf63fae8c52d8bde77dd6d1b5e3741d99158eafda7e537eebe47e5c7ddea22108

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa42d1114238769dfbb0c8f9ed271565

    SHA1

    1bc1cf1110ea2267a8231f8cbbe55142402c1940

    SHA256

    3f2dffa5cf16d9f79659cd8f293b1d72ffde124ca5cd6121ecd2733bf539a640

    SHA512

    df5d0f9ecb1ac5b0e5ee62f0148af9f504d59588f10e2c3a30161f19ed68064487aa56e803dcfcebe620c65a02950929b4e2a066a8a47393c34396d1517fdb6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a9301948f1cb52d331c3c62ef4ed4b4

    SHA1

    5c5758cdb39e23321ec22433bf19de39461af4e5

    SHA256

    6d18d9a1ab606e581f09e75c0a0474e079f3a0f3e002c6ff82dbff67481dde21

    SHA512

    379f17428e0b35e9d367200b1ac37a6a82751f47a61a12eaeae9cd692f1ce0202520c368baa101ce2fc1dae4f08278870c729f56166f9bc67661bb02cd8765cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    281eae670ed2d9422bef5d71d49821f7

    SHA1

    97287a25c570edae94d839f5194584c6d7c31993

    SHA256

    26a2eb3e1dd5306e1821e2f4991f753942c029257bd1e0af1b457b4ee7cbbef8

    SHA512

    49f0751c042cb2ea07b061cf7281142b8aa5a70de3a089e01298e9a089e916f036b6dbce32460577264e35ffae52266b97e2f2510cecd167759984962c700701

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d26c47655e94920d8a9f2dbf781f1f0c

    SHA1

    3e1f10f35af7d1c81e0795922cac44e8892e7b78

    SHA256

    df1802431a35adf37bccc0325863990fa98d484f738118b7034342094a303920

    SHA512

    e11a3f9db46f1c4861082833f5215f905960fd893d7d477b932a3830308e2faa82cdab8fd9b609acde3fc14b70a301d369e2faf12ab017379b3573a31436f703

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e9513ceacfb215fbc793a2e2f6999ec

    SHA1

    7318782acb650564b42dc9ccf776c6ed3f5a795e

    SHA256

    de31fb9c5ef145a82a810bac8f6c2b0903b177c98cd1d5f218fd21e1e8e61292

    SHA512

    1f5789fa2fa03279d3af18e2064a756b183dd5f8bec54d5599a9833478902b35a1bcad590a8930dd1f97194736e41aceb602ac6711566846be3bd40ad86204a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c69aaf2343051248e0fd484378378e7

    SHA1

    e13973d7e4204027300ed7acde75f2a34357d0be

    SHA256

    38405e55029e46bde15fa1062683dcca6decd5ac39c55712b76541f87de89041

    SHA512

    23c86c1a404cddf5554a8d0933918655685b19736c498393699a687f4179fb79ee2d8c88dbd35c131db19d49e2107f6da2204c4ba88ca6f7ae0e017609f1c2f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13803b8f36b02d92d6e20baf7845c8bf

    SHA1

    425d2fa6f7af5bf5e38b2c8f8d80e39e0ed0dff5

    SHA256

    40d254135fb6e6ca3da12b08e1339a83aabac797a37fa24af9d2a31ac62500fd

    SHA512

    a73a5c73213d14f070fff2e739ab397b832ebb56514088e012850f116064ca5cf362e5dc84c034076e5cef4b3ef34c48e22043e2ffefacfb32f43fc8f2d6b414

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f18d181e16d9195134d5c054fea11177

    SHA1

    cb51b7c4f25ebe1230dd0ab24d090a582444501f

    SHA256

    9b8b3cadb67b3a735a23edd8c35fcafa463aaecda8e272e93fd41ba13a0d71d9

    SHA512

    cc85a67b9ca202327be26d43fdacf578bcf9176161cbc37feea7c1757b79b2b74bb69e6d57376c3cf0946c6136ffb6dd7825e2c5a76755c32498d436412c926b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5030436f911dd8475d9265785270d82a

    SHA1

    c95547a5384ccc223cc5eac5b4553c8ca50bc701

    SHA256

    9e965efab9a59974c24491b3ee3e1b047bd3ac5a6489d4efdff0c5d64ba549f5

    SHA512

    08876e3a5b6bf2f81b07811ea00f4370adaa457e4d292c8a6291a8670dccfddde452a54a4f3fc6a98e79224cb1db5b16e21ba28b937124a43467e217782e5cff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2e6bc74fe1825a4b7b15a21b62f998d

    SHA1

    c8d859a26f57077cb3f8d8a2b5f3b441887d930d

    SHA256

    5d634ad6d2a9b6d2e9364967e4500844aa1d177532822ae36ed462a45886da31

    SHA512

    cf531b4434848de2a3e50ee0558d43680d8a323f042fd3076597232764a25b724d19128fae124bc6ca80d91a3b4038e0ce81a51535f986862a492701659b36d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6997e2e2401d10eded6f3b85f057d95a

    SHA1

    ef4ce6d428bd2be13535301fe7fcb7cdd6075636

    SHA256

    2bba18443b297c7a8777b3ad5b690bb0d37be014bed6731bbb031d89a134ca28

    SHA512

    4e3408469a34ee4519a50ff9d229ebfcddd87e9ab81036c1af1f7254d84e5dd34b9de50d75ab79c7a57622afb2ac40cb7f6ced782c8dbbcae5eb11d4d7c73d2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7db82cb55206d68ffc4a44cee0befe8

    SHA1

    7bc146850094594766ea04d67146b1d6442ad7f3

    SHA256

    bc24598caee47077efa23bf7f4674e8cdbcb9079eb6efd0680d7c8782a8f0e10

    SHA512

    111cc9d0e9f2c97d130b85609c01a23b320936fcbcbbeade2f69446dbcd1ad4c622a3f112d6e82738ba83215157f5b7f235fca20b675bf280e91159a2cebdc89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    304d94ef6d14c7291554a630ba858236

    SHA1

    db260fdde04f17428bb40bc2193954e5a3fc4c0e

    SHA256

    b2d4546d0b066950bc696a597bc80f8f1ebb60973d6b941e8d93985c9a8ca37e

    SHA512

    8479312a22a3d55be6d0d634cfb90a7c0b268ae46b89f812f3fc6a3b92a127090eb03512d050fbdc068778db3f9eca008a7a983c70e49e2d61c6f9c6b5b3f704

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    0c0488f65fe8f8491b2338caed48eb81

    SHA1

    c937514d2d34d30ade52101c8ddbda2029d16840

    SHA256

    45e72872e26884ad52866e3bf5452c2c2eccb06095997ce0b19163e688e50c6c

    SHA512

    128300240614677df14891f05ce410429e85b28527c6b1eca0b2dd80570751a1554d052d06bd72d2f363bcc5d2179229b3541efff61387228087fa461228c4c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E87CE99F124623F95572A696C80EFCAF_33A22DC5622FDF6383E749748D25F47A

    Filesize

    406B

    MD5

    fc2dde96e2b0cf6b5454273e6bdb55da

    SHA1

    130d25019f1ade89f136b1e8c1deb58739a4a3c1

    SHA256

    802c9723a3a8acc05dad5fba57acce1b823c8faf4449de79e28b47e5c0b7d6ec

    SHA512

    59f346ff80953fecbf9251bda69d190094b30a4a15ef584ae5f6b4a2bf1c2c7d017bf92efb29be9d1618355228a469ed79f18e99013380ee01dd40d4cef2510c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    02d5fd1be33d711577f3cf7e1afb3a33

    SHA1

    057c77af178fe6e1a9d8435dee7a3f5c2b80de08

    SHA256

    e9a315f8d0d4f1103c85bedd34b8e11cb1e6d5cd413e8a927720037a54ac442e

    SHA512

    4f4972fddd571b4193731769b63b1f360209e949f01e2154434767b5beb686df627c4cdad25c9633e1b7d44b53ba4bc6f37ecfa0497b19d940d7de5b47a1a408

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E1CCB52I\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    f6140cf2e81a9d5b9bc96970fe1946f6

    SHA1

    e18cb20a08d0c13d44b72e36e9560aec2187abce

    SHA256

    68cc8a99c8ed5cc0eb3aa2146fd34bee0051bfd98faa3c03b83c78b4a12a8bd5

    SHA512

    1f61bf7228ae9fc1b36249223f4ca0675da05beaa6c00b28b7fff500e0527ee237d139eaf6793ece67f8730dfff0207bf945a848795aab7c57301433449a8acb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YV6H14B0\cb=gapi[1].js

    Filesize

    133KB

    MD5

    288c5ba5b7001fe841c32f690f62cc93

    SHA1

    29aba9d8e4f7cbe25fa5e64b9ecbe256e51fc789

    SHA256

    c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52

    SHA512

    e375d41344a086d35accfb02bb1f91e2dd383db032af387fc3d6b1230057cc5e432e9b2cdd976e51425b4f587391d42f4d9d857c2e6f11e822a65edcb85f1c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab3CE3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3D44.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06