Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 14:03

General

  • Target

    74e10dca80f446c92c98a857c3b9aea8.html

  • Size

    45KB

  • MD5

    74e10dca80f446c92c98a857c3b9aea8

  • SHA1

    1558a04a02430dd1e26aa9dd3d4a9a08ab017c58

  • SHA256

    e863baf6fbd1c1f8c5a622939f86d478d28219e36653fd91fdda759062ba6453

  • SHA512

    d539298c97eeea5e74711afcb98591eccdc2edadb89275755ee24c48d23aba8333d8606672ba2f09b6b08d3160008e692c5d6a7083cfeb25303435a168a6d75f

  • SSDEEP

    768:2oQSlw0EfuINnqZ78wDODLkEPw5KAVNOKqbSjAwCR6u8vJZrehVhTuGAuNpp19W:vAmqqRjDOX/omKqbS0jR8hZaZ11I

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\74e10dca80f446c92c98a857c3b9aea8.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:836
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:836 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2044

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    15bccbace59ba1efa6ef554381f15b8c

    SHA1

    102c197c326577192147f3b20cf9b16ff39e16a4

    SHA256

    8639847bfab34ca9c2c1990ae55e4a236583aec38a4652c704f619829e0699c2

    SHA512

    49c2e8189dfc288af32bbd40bf63dc8dca502c0fe5531ebcff892a64ad972936e95bbf56b63a9301c154a25127e20d0ae248dca02c6256ae7de2ee1615f9e13d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c73867ebcca35635e3bfb1cd0ad67fb5

    SHA1

    47727ce380ff05407ebff1292785194fae1b6677

    SHA256

    b3a81fbb6062d179015f445b03896179b8adb12c19e3b2d33e8eb0376ffc2661

    SHA512

    2a26064ad3cad31c11acf4efc1fd5ba1c920860c91b5166d0bfafd36e7e0ea0a7a23fea6c73e2082b05f6635b38e529c793ee3e873c90569a25fbec216ba0c01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e90a8631d62fedd416f8ac9ccd32a7d8

    SHA1

    6573015fe9eee67d7aa90594cc2f20835a0503d1

    SHA256

    d8d619db493404baf9c1068a170bbda0db950b287c464bd8ff0f896e4c0199bb

    SHA512

    9e2bc4b4f412d3d7ec96cb6d9e564c52f604ebd8b8bb356f85baf77c58dd7bd3d1fc0c917470f61a67e2a29b06886f455bd9f53a63a1dad23dc2ca580e1928a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f5f43e3238f24546a0ca7ab72d8e073

    SHA1

    2a78c6611694d3461bd4d0553bf6d367b8d44745

    SHA256

    f1be8a28bec5fdbd00272bdd0286760ec80d3bc2ead3fa3fb5db1f95d8fbdef9

    SHA512

    0606bbb2c6b7cddaf4a77729293aa95e70bdd3542ef2a459f8c07752cadbf38b62e00d2764fc9739343ee67c1ab322e53c417316e0dbe5e8b8718cce20173ae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd75462ea21da6d184ef3bae22886062

    SHA1

    5c2db7ff5deab6f77d064e25202bad2fc0de5bf3

    SHA256

    c4b44885e4f2c463bbd4596a887dd8ca84c15128223439dd96a1d6b0a86005ef

    SHA512

    e6cb5704594d98169f1faff8bed4032f2cd798c8d4efd473a336ef7dbcc3d9c7ee709fdda30b64e682d7fa4d65c84a5266f0147e4cfc3ff9dda8775a004b7feb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd691bab547a66fdeda78c70e13119fa

    SHA1

    11e4a596a708c1fc4114abf23c6fd0554fc2a84a

    SHA256

    d5768787a7cbf320b6017a4d7d57f581f0b87ccd17767dc6a66241f20ba34098

    SHA512

    9bf670a9060feb94a6f002e6bb9a98457f91d8c3af4f3303353cfacc813b3bb2fbbb5769ecc35e5e4317edbaa77dba07742a364e820f1c96e9a928428d56e264

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ebbd62a3171fab31f82c01aa1fe0962

    SHA1

    97cbc077251c71ac03beb4f43eeec26cecb44157

    SHA256

    b418a0870e80bed9b0fb6daa12de87d78ef521701f43db6f503986c98038d769

    SHA512

    c5fb59e33c64595e16209b560259c276fd32103cfc8b1fa344d0d35416007371b7ee2088bddb62ee12f50fa258b018277ca8b4b94beace7c053025fef3fb4887

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6565bf239f9cc426cae0a14811c8a8fc

    SHA1

    16f65cded287867a4468efdbcbd23e3fedec9d9a

    SHA256

    945106fb3b3950217027291896da985e278023b0212b45b5060077c2f70190a6

    SHA512

    39c9759ad197ca28c6fae90fe298947e9bfd36fba141af71fde9d140d3b1f8966f852a1dd4c5e3266702a4523e4dabe2d21bba6e62fc99f52f510a862c903053

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1dff9e9e4bad8718398f3f98b733e8e

    SHA1

    dfa6578b2059c8c3110b15e7903b151c8bd2029f

    SHA256

    cd5aeab4708b1b3f91a8be70bb02e271ad26920aafd9ed38b97072af0f3581e9

    SHA512

    33a9d5c3f61c33f067dfbbc02c2e765eb1db619f5ad3897459e1009d44f261a98ef4788639c8759529e6c55b7efb8688e60803136314de08d0150c4617e33417

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b98b0687aa0a2c1e09275611dc8c4568

    SHA1

    5d970df28d84f73baeca61b2ede10f84451b0b75

    SHA256

    62ce2ef3df8204164a933ab655ab51fbed34b98bea60e9e533db40df9b9b8d32

    SHA512

    b527fbcdac060e5ff177321241a1719659d9b05c5a76e4fda3dc1c15309012a67284e527aab84a380e5eae983ba36d30da17a364860dfacdf0eed26df67a45bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e90ea8e92526434ac8442a98a571d5f

    SHA1

    46fcb6db9acdbe399b78623e39d44bf01ddb58ca

    SHA256

    cb44d9414e634116dc9a6e0451e17226a172853b982dcf744c67fd1afd22acd9

    SHA512

    785698094d8292bf257b8db867e1944cc428d1dc286070f7f727df8c1bdd3e5c6be2df59840297ab9d2d8836ee073a14e98ce718f312e07eb33c7559d27e87ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f32bfe5e7623a843d55e4115b7bdb201

    SHA1

    d35b716ee0e6f23ddf5c8d2bb09ff90b244470bc

    SHA256

    337c33fc4b63264d75202dc88a7db18a6d8db84f26de21a2bf006a48a3e86f67

    SHA512

    e35d947d09d02f7b01c7b67588393a126e191991f656759b7dd828e1a4f2bdd51b94982d5e05297099a2400f95135f40abbe29dcc2f83c2c846af442c3b54de9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4e164aff001f0cf622e86c8bde490b3

    SHA1

    bb7a64dc75872ec816931abecb298dfce65bc5c9

    SHA256

    97c3e638963ede2048b7b9dc18301e343d46295024edbe77b8f2da625a0b5c73

    SHA512

    ec0f532ba966ea9c56084f20573f653ecc3609a774464252b893199b09617e0402e52da4e6628efea0d45894bc301943cedcb795ddc4385f8a4a138a5b28cf9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ac06e2d0945fe5575e4d8d703221e0f

    SHA1

    e085dcdd95766bac99efdc0d3a946e3005efa513

    SHA256

    58120b31855afa480a3bd8d80c432b6efe3e69ae4de6326a3f3e68eb93efdf77

    SHA512

    4025a2bb6a012ccc095607d50d449514584446dbd0aebf154fff7622a5c6edec28d5a8ad139e7659cfa81f1ad4dc0e7eb3234a30ab09162c6621b98052d3b2a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a74b1d85af22b094ddea628de7225a0d

    SHA1

    9590c64911978a928876dd93304722aa300451c9

    SHA256

    6d88513ff0aa7473158b8d552bce550ca12f6acb2304e774992a90989d592504

    SHA512

    829172adcdf6b848e5b779296bbfd5b01a02354f296ba65f1758d7ac9d1b31d68ee02187c3585745c1067a44e3e352f4b6a24a69dc5aa5c75881063a532b398b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e33fda6d3608f2d46f126b2e5134d09c

    SHA1

    7cc2965b8fe5f18e0173f2e7f56819b561587f94

    SHA256

    dfc7e6f65ad8d40be7a0e009255b778bfc20b20f4259ab1c57086dab380a680d

    SHA512

    6c7a7ca9f16e711cf308a3a5c2b962cfbd70c22ec504d2897488c89bebe2951fdaf66b1f91a33a81073b2671999fc09da1f99856d61ff31a437ddb5021fe9133

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    445d6f3238e47a362c8d9f6b08d4ee17

    SHA1

    3a17b4d98b044d7e337afbbb395e43415eb60436

    SHA256

    0a40f7c2f479a7f24f326a8d2e338bb40a77628c079ba8a15d39a65548fc9311

    SHA512

    aae3d4c134da38a88fa0c460de6dde8fec23c6b08ad8a421e9744d755e19152de8c58c87369c0ecebcf15b84024478cfd1a303747c754b55d64190d81cf11f20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef0d51530fb03033d2a75365c7b48258

    SHA1

    c4fc111d968cb6481a8f38b089018d04c5e6fcc0

    SHA256

    9d976d62d0b6c7d8a717e85169aafb0f18ef4bc948410b6b48d81c504cd99485

    SHA512

    0227e0f8db4a2a951da1d949682fd2e34ecad7c1102554fc7f72ff7b6d58ffe4997b5a1c3abefb87d706d427a4ea75020c103a134daaefe438a0c934882f8232

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2a302d7e24b3b32f0330b71905a6161

    SHA1

    dc4d9f5be8495401ccbf73a0f7cfb6d0c8d94f62

    SHA256

    8441aaf9069825366611cf61bcc777064392dd82a008b05137431fb1791eb941

    SHA512

    164a1853b7794a9f9cc21897b1bc4d31f01a2e6157973ac4e8cb8eec1e8f6c2f663e3439c8691af7217b3e17b06d18c033decc497fbd9f171edf55f5e84f56ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f40b32562d4e93e5aec350065af55e73

    SHA1

    20e606026aaf2ae4265aaa9f7d10107f0c6c8663

    SHA256

    74865bbd5cf24edae6cde91115dc8c8db12c1627b3df879a796ec460ae906813

    SHA512

    684f0dbd6fff0fa586f619adbb898c4b20bfb96a50d108bc21c02bf1445fda78e639411c8de62d1f2fe6d9aaab4a99337f1295417bd1f6ac53dec9eb1b296d7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    5ce2d2e466ad37e8383c096ef9c4dc16

    SHA1

    a69a01d20d6152002035ea587995be9ba8e5577d

    SHA256

    4c86387178414f948c8da732233b13de07a8ddc29d3bab6ae4390fbbea3139ff

    SHA512

    30f5bbd97c8e8e511e5f8cbacf1363eb1bdd8b18c46a78ec35cd5794dbfe6eb4145dfa4633c83dbfaf9e1904633b1c24dc341269bfaff76147e0da44b6e731a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab1EE7.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar242A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06