Analysis

  • max time kernel
    142s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 17:28

General

  • Target

    75180d8a4ebd1ee0c420f98ce51fbb66.html

  • Size

    57KB

  • MD5

    75180d8a4ebd1ee0c420f98ce51fbb66

  • SHA1

    12a8695510541924f58f9bbe535bdcf16021810b

  • SHA256

    dcb7c2babf04ccfd767278fb6dd64958093c6660b0a288397a01a14b4ab46550

  • SHA512

    ee08fd4f5e83d3c725c05887a888b10af1b92b0aa10d41e1dd390de0bce8d10436cf0bcfe40324c563309e93aeca5ec38c90a9a780c12e4e88a2141f86f994dd

  • SSDEEP

    1536:gQZBCCOdm0IxCKfoXfLfc8fqfufhfsf58f7f+fQfHfjfff/fMfwfZfcflf2fDfmJ:gk2k0IxUjbymJESTmo/7nHkYhkd+rejF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\75180d8a4ebd1ee0c420f98ce51fbb66.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1512
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1512 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2724

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b7db73340fef5209aaf046121693f55

    SHA1

    f4d191da041540bf2dbf72765e8365e61151d672

    SHA256

    bef23bdccc9e1c7bbf0eba49babac5c75d733f706107dd7360ab4514d9f80b7e

    SHA512

    21eaaa4672db17a5de2bdd77515be505a7fd8cc5102ec8331c3a21f864abc1d12cc1025260ea7725d546bf2e14cac134b5260d1fa2e469cf82c960cd9e8433a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02a5b07c2944f99f54d73488077f697c

    SHA1

    13050cd0f1c95ed974b8d5f797018dce6b85cd80

    SHA256

    7897b4ef479fe92fd3ce7d6f9a71223b6ad2594d065470f03c18950daea1fb97

    SHA512

    2515a049498f8dca9c167bee5794a438061f8cb39bdd5b09206cebac5215f365d3b0b21bf7b402b006c922c0c3aee7a7acc78f4a41edbeaa1eb8c045ce27d910

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bc8d2968ed4969d3b496586f661e92d

    SHA1

    87f64d35ba58f6f9cec2eea554b201631273ae1d

    SHA256

    a8caf476d1ea4e83f842da4e8d50b92f851fc2911aa27b4a80dd04ac567c3efe

    SHA512

    d390862e107944d942f59bebcab265971bc88b5ade79f48ebf68ed0742b0f4298cd13e287dae6c9c67a6132b9bcccdfe7754ac6a667afba509cd7fdeaea814ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc7ca684f92b0c5128cb9e1fb65836ac

    SHA1

    fb1baa34071ddb582546f08de05b0e883e860c95

    SHA256

    0aa0044ff05832d723b6718e82caaedc7faa2ecede738dab29f1da568c723182

    SHA512

    86dd6c8b9e80b578c685042eca66049a1a12861daa1f7b6c6c6bee95a67da2bff4f2c2850cdadc4475d326d110c6d75b34d4aa54b3ff05c47524724176d94b20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52ccc14f1f1ad0bbc237e6b2a9635901

    SHA1

    1ca3cb539400e31e8f524639350d01cab5cee179

    SHA256

    e8ae072a9d6fc7e4f36b7491e6b7ed7b85bf4d8d393b5f9257275a02d650656a

    SHA512

    439c1dab559319a9371d8dd3d6d837ae7211f1261bbc6c5c56c2a19d181104f38c182362eddea857561a62dc1cf4f0cccc925b1d0b66542bb6994a702bd0a4d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    658a4e620d10e37d4958ff5ffbc7a3ba

    SHA1

    ff196f52fe7a48a5b029eb2e1545c0fb69a309f3

    SHA256

    80cac14de1da4d6a927626fb9708bceb0331d5055f8824466958e99dfeefa215

    SHA512

    432aa4075309a74ebd54f0954a5482631a5d23eb979379c50cd2d5b639a3c08faf668648f1e70a10d996eabc23728a59bd74e06a5618086779c9df22c4358e7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2c865f61e39d103e8d6c8a024be707e

    SHA1

    de9558667ea966fbbcb6866921f4e295b5d28859

    SHA256

    c07326d1624a3413eb4e4bc8467e0dafbe70a80338b59c6dfd88b2f53030db97

    SHA512

    e8644b33a192daccdac406e484b62f182503967c4193f2dedd0fc8c150d674c6ab1b51096f5e89747a6acaa4d0bddeb2a2da14fe8fcb05617f5074024927af65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b151bbb033eb495c206198deef3cb5f6

    SHA1

    dc2ebe5891aad58dbf54dded3b548bfe82bb6b61

    SHA256

    e50a76975412752ea811d755adae1c620ba6c13dfeddc5c6b24ddba825d2b8b8

    SHA512

    f4e123a0b5e5f025c0af755230f357506ec7d6ec394549a946fec22225e817538aefd79c070bc6914491dd806f92aceda458f8ce8b66a2288e65eadf52bd4a81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30e123439edcf2d28126fa75e26bd021

    SHA1

    2758084ebc151e6f4db39fd9e8db6af0c865d93b

    SHA256

    1601e8d7bdf207e7201da36e2585bc1b95fec434561cb1f8e99e58971e27e75e

    SHA512

    c5b27fe0a42993db15cef41ec84b0f12ef96278c6a5545f9b08639faf704ba99e58164f19b3057b2b20fd147205c08487ee2f15f3960cacea275c3ebcfa36a9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18a3702c02a82d38e5829ada8629c0fe

    SHA1

    85929ad579264348f525088dbf09597cf0240f61

    SHA256

    d08d9d73a551a5e41d0214f8893bc62856479370a0315975d902dca639864081

    SHA512

    b6958e2701d6c4ae02ef901f34cd2451e350d1787dc941decf3d229296a9be61acd4cfc8db4da7b77151df2b4915548a6b5f61b86c73f296983e1d0f616ba13d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a217ce8bcfee8ff38a448a6eda810739

    SHA1

    58770b4d3190edc60a2db26e9c56a580b327db71

    SHA256

    4d304038e35abcca223e2fd8118e92167eec0d4241f83ac6117040a9a30f4e9a

    SHA512

    99e4a4f202219799acd7b6cd6e62b84ac80eebd46eb8d4be18a14c170ed740bcd2ce90b3890184d33be98d5f315f23071d63bfbe23da4e31c5c293dde422ea68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a30f5cd48fa99940c2dfc60b615bd321

    SHA1

    3b8fb2f6e333ab5283aeef1eae3d8eb6f426a7b4

    SHA256

    92c00e11597ae6c9b03c173781ce791a63db644d79ad63e69ac65c14ebeff873

    SHA512

    552640e8e8b55987cfbc5bfe075009f0d606a648d6ad0dd5e0633e7366d996188b040a3cbe9994abb9492a98525cdaf5694c9bf6ff90c4eb4d4d95622cee6d9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4242481c298b3d800c80a65195ededca

    SHA1

    47c487fb2b59eeb28e0862ef93bd6cccf3d03a81

    SHA256

    8ae5021580db1b539c061ca556098ad4710f14386f45c5f32b584e0c839c6242

    SHA512

    7643a88e01f0f36c7dab8c5d4821fdb2764022e611d0e820f99a93bf5de593a60964ac1e9506012b99afe0e669dc36adb8385ee410ed5cd819a72cb02f2ea4da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    538fdae694174b888aaf6bd159db78ca

    SHA1

    5d7a0b5bd3e797e0c76f657ef085e3b70df9dca9

    SHA256

    7cbb8027830e44ff4015f2062e2294408db46a20cdb670cd30fdb64f3d0bb771

    SHA512

    ff1963c75a2a597aafabc1806973fec3da82b96fe793250b4f66917f1fa1aecba0ad07ecc7bd23dac9c787b75d97fddf8a23056cb9d388d673987649960cf224

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e59f8d3b058a7338e2cfbb806bd2289

    SHA1

    f05aabdd408db58fec03c81ed7f08afac3554cd2

    SHA256

    9b31c1e00e264d5105ca17a6e376f0b14230f5ed19f9ca9fcc5b41c0e686e020

    SHA512

    4ae5b122cc267199541984bca5d68c34d686413f545a9e3450ad4ccc68d559a3455a093043e79cf3ea8da5673f781ee636642843ae1621031f33cd6a5217c42b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60aa4a601d09b2b7a277268bcf0afb03

    SHA1

    31ce6c467aad795bccd57d97d2119b2f78e762a1

    SHA256

    fa22814b57159709805bfc690fab0a27ae9e38db34720a7b03111b6b2229e558

    SHA512

    2bc2bb32f7cf29b28a98300495ea1694554ce0e87f12d8ba35ce51028a5213d977cd36f4e10b2c5cda446b5faa46f564ebb9114aa86a8862e02307e7ca2eb88b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bfd353dd5fa6d638602578556a83683

    SHA1

    c40090bc20099f0decfbf1150e6f3815be956697

    SHA256

    5a977c5df793f1f04b68c9fa9d070722f87be20c71ace245d5383a80c500b4ca

    SHA512

    81c7bb2b5b0d9134416dd506caca788cad794ab8bf739fac2827d861d9fbbdd0342e4fb958f68bb04ca9f6079c657a85d156b4d70b130b93b0571849ab8b079c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24003551ea26ef6e6c07e53891e36d5e

    SHA1

    08feb90cef159b0bc9fec32909b6145be7fce7cd

    SHA256

    20182d68250b03fc3f39f1c777b654e7ec0235cfb1edc16a968bcd83ce91e402

    SHA512

    c2074388254df0b4864180b6e545722c79cf4e4eb010682a3d96636b9973a2c677eccc5f00b5e676f9f4df0da56899aaa321b24a461e365b350cffee15cb066a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b56cb4ecf434ed2783587de12c5a5bef

    SHA1

    dbfe54a8db874129b1c30d39ff4aa431cddbf73b

    SHA256

    afbf66be14afc3e70ab9649e9ef933e76bb063f058a62019ba6b92a89e49985f

    SHA512

    30958bed0da2eba3442c789f4f30b065bf700e00fb98f3237c62736713256268add68786b3b23a7533be9a0772ca143d5514e94df69ea6d165f9c8ddae42eef7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be135ee83fe20a0add5bf70a5cdc0d47

    SHA1

    e8d582d8fffab043c6821783c8133077eb20055c

    SHA256

    8d37a477adc45d6dd9ea6e9b96088d9b6cf2582eb6252012483cb294ecead13a

    SHA512

    383cfc5764523e3bc4d457738806d07e26e360cf9084562ba7eb0b13fdedb0cf58e3fa07ca6a3892114e820fe536b009da849d5628a291821d828116a1a83918

  • C:\Users\Admin\AppData\Local\Temp\Cab4462.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4494.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06