Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 19:06

General

  • Target

    75480ca55609e4b8fb28aa04b929426b.html

  • Size

    11KB

  • MD5

    75480ca55609e4b8fb28aa04b929426b

  • SHA1

    a79d2d2af1f34d4d0de061caf67b924a359e5315

  • SHA256

    e74a0d45db99bfdd375af7ab7e48b58246dad9166e73c2e67393049944a296e1

  • SHA512

    1f5a8d879e0a13452edb4e68f026d22e87a26b8f38c001d9d4ba3f0b297427b21df5ce6844215f7b782fd5c739314ab30bfacf8b68ae521c40778389e2827d30

  • SSDEEP

    96:uzVs+ux71MHLLY1k9o84d12ef7CSTUIGT/k1+pEooYPiTe4nsjuFsrlVHcEZ7rur:csz7qHAYS/92nATeau88PHb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\75480ca55609e4b8fb28aa04b929426b.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2800
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2800 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3036

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5eb394a2c7c517b1711d9779625a8c46

    SHA1

    db7c3acd87a46cb857a087a688e3cf8558e386b2

    SHA256

    c9bbd7cf23db1199832aaef69cfbe7de2a92d8fca435a26e1a6e371995d0b2b2

    SHA512

    ddef54d405c89c73ac72cce1b1d96e52b951d284ae023bced670d5b749aec2e7f4824cf2840bdfe86696ffa88e425ee9a55f4f866f8c3257aaf1034be2857758

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62a8230bb73832b3e7392ebe7d909614

    SHA1

    92b47cc45943493559609426924c59aff6af14fe

    SHA256

    7d40c8ddeb13639e467df9b67e64941a0a966963acc1288096046ac085f4fd20

    SHA512

    67e6a7c445411b0e48c5f1f3322d1cd4b535bf4e459e49d25e65165927b9ca67b0c9124cc48094c4c9b2f5bb8c9e26e4df5b6b7b0d6a5d161bb2d672d0114e5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0d864b3b12b2d69857fa4daad15795a

    SHA1

    9d3ec0d1405d85e9c2d090523dff064b104fc516

    SHA256

    500961614cdd5e1bb95211bdd42a170d285156306fd5587790c8c3dc6a6788a6

    SHA512

    f1c95568a91cd40f50dfa07787217d815a2fa4d6205264f8bce98d8f43688602b9d68a87253b396cf1b682abc9eea693c30aae9fd29c01785e39ad3d2b653ddd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2a5848d759684c0f7f1c618444b9375

    SHA1

    54f4cea9763b62d3057e069a5c914dd46c01b81d

    SHA256

    66adffeeb57bd1b84a97e5d2ef4d34b82f4949b105682471515140d5957448ac

    SHA512

    dab458354847b2c7f1fd2ccd19dee14a3a9a03e1c34868c7ed4270dfe974e77e79b5b735680d791d4565e33de2244eca169efef6a22540b872765d185e3899bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    550f9236129b4ba3af11e7d340f6e588

    SHA1

    62c3223c8e7dcd3fe4b89842400812d4b75309fc

    SHA256

    5fde2ad37b1ec98288c799234a184f41880f2c5d2ea2db139c309b3a9d742e75

    SHA512

    1691dfc6e45d1880298d8153761e3f43193628014fef6b09935180a3501483b5cb29cbfbf2e7b136aba80511c0921fcd9443b1e6dddef5b0ffd8a19c273cee78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1006b50c09aeb9636309741163a637b8

    SHA1

    ce3e8c2c01f447a4a029002a51b143226ad55d84

    SHA256

    ec51fdcae490c623788df83f4ec8894d04f6c718cb28303b9675fd41c276b6f1

    SHA512

    7ca74d57807742e781fa948fc445995fcf576f18f9b5cb866b9bab9bfd44cfdb83346963380629a6fafc795cac4e75e8c566095abda8c7f7d75f204578c2f795

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    007673687070a2224a2f3d2e0594e570

    SHA1

    686cb44a398d97ceec3ca752d781caef3832aa4d

    SHA256

    9155d23212b145a669f9fed8a9744a4e4438543c81f05f5cf51d143b7d477584

    SHA512

    51bc556788df177852aae2c98980494c9689b14979ac2d11d9440a4113dae00f35a5ca3e90a2cfc30e7b70a14fa38524ed5499283131203a09ddee1d70b6fad0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd957504a5477cb95e45ba9517162671

    SHA1

    dedc90a5b32fbbb865950b38a2bbe09ee8ca10ff

    SHA256

    15f1700d72bd3a53d5621903e66589b4308f54fb6246ce3853f02e7d03efd889

    SHA512

    ff9e58c7bdf20514cd0f32134e94bdb1bb6c2d40ae9d1c132f81176288c7a308c81c7084c32486d8e79246208c7861cc9bc460a4d222ec3af9f01f3733c6f853

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e5f1cd5bc342dcd120d27213f273558

    SHA1

    e60aae280f4722a014001977eba257bd180571c7

    SHA256

    94ee793d69deb724602644db48798beec7101ed8a7f45057e55b2ee0aa0d441c

    SHA512

    5f9dea2e91072a17fcd717a21fa079309a8b8dcc605234a17f9245e5d2a61b8d36e7b47cadb859f39e77ba45a0e967fe2d44761c9e36f00266186e4de8242ffe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52b6731c5ad91227a9ec4202bd4f4abb

    SHA1

    d1f1977dc31681dbbfdfb0c2eb8aef81c7edc49d

    SHA256

    a100d006fd5a4312b99a5e9818d55dc42965ddb649ec25ce2442abb85430f558

    SHA512

    d87e95df0712d76debe103accc2e45755670f799257327b206b746f63f22ca750bce187b1057acf0f7ec81e610e7725ffc85ed05e83115dd0c834d1f6a3dd73b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9670b96451ed15997c47b6630a1fbda6

    SHA1

    f66e3a630156fba897f68af31a5a4b23eb5bb160

    SHA256

    da3dfc144d6b832e349f2f16ee5edcf4b988bc1256f8229e4c356bd2941d5574

    SHA512

    e1befb1f32ce1b494d245c99c80fb15ffb604996b52f80c6283b25dac5683024311176803a2cfd7a3fe7ae53a7d68dd18375cccda88227ea259eec6359048dd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24d163cb84ef053de97ec59838ee5b97

    SHA1

    f452e275d1e31a6b5e5800844b07e8763658975d

    SHA256

    ed92c31526cf7a6b78bd8c6884076f1851e4e1ad2aceeab9bb4be165cb6b7082

    SHA512

    17ba410350dfc1f942c015507d43abeaf76e225790fbd6102d6a9134951266fcba5fd70ce202b796a372f86fc738a66f89098ad8b89929950eb2e52e7148fa7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1ebfe55f94e1d599dda16dad8c15a19

    SHA1

    4d3f949febc9d0ef672313d5041e83a862851d04

    SHA256

    c5c24f975e5a9fa73bf48b191b6ff6537d0f31c55a44d487220eb9ae310388f8

    SHA512

    92f29b685151d9a4aeb01abe0c7f8cde89a7c8286b20e555f7c89fc98e3a96a64295d8e163982292b1a9407db70b7536bf92fd87d0fd37f6fdf4f2152cf0ee3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16a7814e7875515c9357dd1274ad0203

    SHA1

    9201f69868f30721aa8f194432ef6f1993c0f9e9

    SHA256

    3e57f682535f282c588db0b505e62af45bd1f8a9e012554d941cf5ca8a625335

    SHA512

    64e7e1b2ff4856230a2197c909f95b29f42b59a30ea895c4ae9358942bd660692c2dd68e64ddf39dde83660a705b86f5a7a9df51e463c96e6dca27f353eb6561

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eabc4b5d0c9480dc8173caaebe0d98eb

    SHA1

    6ef81a1a02388c64471475672114472e99c0de4a

    SHA256

    75688cb84c9e5166d9712b6a7b1a55b207349f9a7a58d038a6b95b352de529c1

    SHA512

    5b7052f41c1a43341af1739bbac60f49e3e6118d0f25f595d6d0075ceaf8764cac540bcf1511cddfe048d6be1fd8da9d633e9f121b1c0c07573575b793bdaf54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c894de6cde1841418ae2adf5157d01f8

    SHA1

    3a5004f6d74066a67932b0ab7d3fcb8209c7603a

    SHA256

    d90d462d97eb57816a1ab5f6bff92b3e8ad7c377bf8d8c84e7fbd58bfe655012

    SHA512

    b461c357a29385437a4f4b36918ae42aff4bcfff914d5434d6268b09364d250a3c04100559905328846fc0e8636608a16a37727da382f10722d8663f3aff4749

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f52edeeb93151387dc657c0981b95ae4

    SHA1

    a423eb0e456b2de50c26f60e0f65ff9cd36270be

    SHA256

    9e10018936042b5f3323380716e5a832d9ff836765f2d54a3e7c44015768ba91

    SHA512

    f3b9b1dcfb33eea21cd85f83ccf74a7f23c182dc8245b34131c64cd6d23bb467a44aebe35c4db410e0bf44cfec5fb23366be756bfcae566fd048fc907f7c31b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fe076d19d2537871471d4ee5088d596

    SHA1

    94ada9166556fdca17f4e04241d4a31a6a933ecb

    SHA256

    55cd9be7d6aa69657e5747b82a2bdbf3e1d45b0cb3f6d9980fea2c133ce88175

    SHA512

    30ceea581f92d8289efd6faf787267c03c78bd4c1a788cc1a95a9b7e2c851a0f94b9d9bf9b1d0cba9a9fdefa7e6110fbf44c504dd14635520a4ff1a246b20b57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e72d0c18c010b4b22623dfa01d5ab88

    SHA1

    5e054e272b6c3c8f67c9d9bf8fab503dcfb69687

    SHA256

    fa4987cb25487964e091ca6c28588eb19817c313aa19938803166378fcb1890c

    SHA512

    643f9a33db72abf0f37ffece61a34a30dbdb8ccc8ca25d6806e3dbd08a9b313e55a046d2e32abc87dd4d597bd224d5de2bf5f297c9564ecd44f0dd234b64791e

  • C:\Users\Admin\AppData\Local\Temp\Cab2417.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar24B8.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06