Analysis

  • max time kernel
    91s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/01/2024, 16:24

General

  • Target

    77d3f34e31f2eea53bf7ca98a7c64ed4.html

  • Size

    18KB

  • MD5

    77d3f34e31f2eea53bf7ca98a7c64ed4

  • SHA1

    9c0a2d9ecd62fe0278a8bb69b19bfc532fb84b33

  • SHA256

    e8276b46ffd516bfe0e23c38c5a3b1374cacf72c0b44f10d699568474b287d34

  • SHA512

    ac6712ec528e64f2f195f5bd7f6bda1ea112cdff4f4ff682efb6ae50e7082ad20b196bfe10d6aa03257da9a90b424b17395dd9d72889883233d29d9d4530b48d

  • SSDEEP

    384:fuzcEZUL820utnQ5P8p1r3B7Iw/9MWZc2J92V:4cESYdN5Pc7Iw/W

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 61 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\77d3f34e31f2eea53bf7ca98a7c64ed4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3304
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3304 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1896

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

          Filesize

          471B

          MD5

          b610bd5c61e2121914699e4b6cb9f7f4

          SHA1

          514f5ad7770f18e1c5b62253d95d6aa3c63c83ee

          SHA256

          3a418958f81aae04aa13719238c42d24adc5258b95246b3df0b32a1bf7676b51

          SHA512

          9ebb50a5b4942dfbf1a037e8a1b6308502d5bd337abaf90cca0d44f3a88001b25c6f82787f13b2d5a6f2bcb81209f831c16422d4c1a6cb6e07d55e8dccd7b3b5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

          Filesize

          724B

          MD5

          ac89a852c2aaa3d389b2d2dd312ad367

          SHA1

          8f421dd6493c61dbda6b839e2debb7b50a20c930

          SHA256

          0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

          SHA512

          c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

          Filesize

          404B

          MD5

          2a2f0d0ba11e3014c085329ffb25bdab

          SHA1

          3e7c820fb6dda32c1e98dd9ec7def71759880903

          SHA256

          c6ae25cfb79f47d1d70906134c862b47c1313cedf81eba3ba602d7da3c7d930c

          SHA512

          3e6e565096e7164b0f529f3ebc9a732e687d476836c9e4766e0fa827d9380c521cf14a7a3e035af5dabc22d515a4af9ee11bd57f356fdc6f927156935e3765f5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

          Filesize

          392B

          MD5

          635dda5263b903f8c0c288f1e3e93db9

          SHA1

          a3fb746aabff5e3f12788ef06d27d63dd960a9e1

          SHA256

          79d646d3490915786a3a9b9b831feb7994b8c597d42ba9bf971652123d6dd890

          SHA512

          c89adc23c1f829221ee59d4dc122f7f836db2d9b4cb757229bbbefa105aacb23e1f857099e843eb212de60d24ae3e8903c5bcdcc7dda31b91c7eb4dc871d583f

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\MKLV9U3S\www.google[1].xml

          Filesize

          99B

          MD5

          4f7529a8c75650ba418f4d5c8fe9af57

          SHA1

          7e14f72de908ee02dfe8c69db13305bc2aadc54b

          SHA256

          792c5bf440800f03772f4076170070b8029405b14210066043aac2de510e2251

          SHA512

          95fbc1d48e42ae44d336b915b2363749b31d2fe6a5c1fb86a0ea277174da1ba9be8f1dcce537d88ca212daa9520f7ebe8b1cfa04cfd644543f6499a1a4031382

        • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\wx7tnv0\imagestore.dat

          Filesize

          1KB

          MD5

          8c4af652d9e1db977b74ca8c7f46dea4

          SHA1

          bd5898084554d94f2baffd04971a09c0f8e55f57

          SHA256

          e7dfffd9d317d6c5c2e64dd29daf191b5e071c0c314d6a6b47eac509807f6c34

          SHA512

          8b32bce4f703a2d2d5020a766a65529fad147e534a6c130dde3f0b48e2bafe3047144ce50e68ae2ddaf6c3202fb95ec8819e45157c1e0c6bfe67efc079f77aa2

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\L3T8W3B4\jquery.min[1].js

          Filesize

          84KB

          MD5

          c9f5aeeca3ad37bf2aa006139b935f0a

          SHA1

          1055018c28ab41087ef9ccefe411606893dabea2

          SHA256

          87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

          SHA512

          dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\L3T8W3B4\reboot.min[1].css

          Filesize

          3KB

          MD5

          51b8b71098eeed2c55a4534e48579a16

          SHA1

          2ec1922d2bfaf67bf3ffabe43a11e3bf481dc5d7

          SHA256

          bd78e3bcc569d029e7c709144e4038dede4d92a143e77bc46e4f15913769758b

          SHA512

          2597223e603e095bf405998aacd8585f85e66de8d992a9078951dd85f462217305e215b4828188bf7840368d8116ed8fb5d95f3bfab00240b4a8ddab71ac760d

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\css[1].css

          Filesize

          530B

          MD5

          0a127ad39a8ebe4207492293b556adf6

          SHA1

          17d3dad64e4f9139cfb85bbcca6659a8aa532a48

          SHA256

          c1294965425b5028a83bbe5eeed0cd9b92733ec41efd07e34532522d4c97b6e1

          SHA512

          5aa845c5c6c20259d9c6bc0c9fdbd13ff178ba4008865f7113387767db0ad39cd53c1d276cfa4997186fd39f21d30bf00caf8d092e5c04119d992368b1563df3

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\d[1]

          Filesize

          23KB

          MD5

          ef76c804c0bc0cb9a96e9b3200b50da5

          SHA1

          efadb4f24bc5ba2d66c9bf4d76ef71b1b0fde954

          SHA256

          30024e76936a08c73e918f80e327fff82ee1bd1a25f31f9fce88b4b4d546055d

          SHA512

          735b6470e4639e2d13d6b8247e948dbd6082650902a9441b439ceacc4dfce12cd6c9840ee4c4dcb8a8f1e22adb80968f63ace0c0051811a8d6d1afb2b3c68d74

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\favicon[1].ico

          Filesize

          1KB

          MD5

          0106d4fd24f36c561cf3e33bea3973e4

          SHA1

          84572f2157c0ac8bacc38b563069b223f93cb23c

          SHA256

          5a6c5f7923c7b5ba984f3c4b79b5c3005f3c2f1347a84a6a7b3c16ffbf11777d

          SHA512

          57b77c5d345eca415257e708a52a96e71d3ddf4a781c1f60e8ba175ea0c60b1d74749cd3fa2e33f56642ce42b7221f16491cf666dc4e795ecc6d1fbfdb54ab98

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\js[1].js

          Filesize

          243KB

          MD5

          4f7944ab0823be83b3f3fbc857bf5d10

          SHA1

          b5fa24e20e9927ea3c94b62eae7426f2f8095522

          SHA256

          5fef3a7d15ac8280af1d699be438963921ac454915c83b47682cfa4caff0ff9e

          SHA512

          4814de192275c168944cf57109fc95c0371343e67a39402240bf4e37c3bb7b9101a5555e7eb71fca71d215ee67106e9042f74da7b77285281f6d755373e7de4d

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\style[1].css

          Filesize

          165KB

          MD5

          65760e3b3b198746b7e73e4de28efea1

          SHA1

          1d1a2cce09b28cffc89378b0a60cbb1aa8a08c4f

          SHA256

          10e40ea3a2ad69c08d13e194cf13eb4a28a093c939758a17a6a775ef603ac4fc

          SHA512

          fbcb91f26b7bd874d6a6a3b1d4d6f7277ded091cdae5706c285b4d5d17446a1bf58572c224af38393ce49b310a51d5c5d60711c7094e5d32abbaaf10d1107e1b

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\styles__ltr[1].css

          Filesize

          55KB

          MD5

          eb4bc511f79f7a1573b45f5775b3a99b

          SHA1

          d910fb51ad7316aa54f055079374574698e74b35

          SHA256

          7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050

          SHA512

          ec9bdf1c91b6262b183fd23f640eac22016d1f42db631380676ed34b962e01badda91f9cbdfa189b42fe3182a992f1b95a7353af41e41b2d6e1dab17e87637a0

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\suggestions[1].en-US

          Filesize

          17KB

          MD5

          5a34cb996293fde2cb7a4ac89587393a

          SHA1

          3c96c993500690d1a77873cd62bc639b3a10653f

          SHA256

          c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

          SHA512

          e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8F18HYR\zyw6mds[1].css

          Filesize

          1KB

          MD5

          a5bb75d5bd1b19def25c1dd4f3d4e09c

          SHA1

          d0c1457e8f357c964b9d4b6c0788e89717fe651f

          SHA256

          ff0689879c72300a01eae0c05c3205e2ca57c4bc1a6bfa0718fa6fea4a51627e

          SHA512

          b9fc57f7ade8f34cb02ece2935acb30757ed846e4bcf81d3fcf5bfcb45611d386bd337a6337e9945c5654cf044dce4dd3fafd60a2b42ed5bdc857ef96d077a69

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WHUIQOC9\js[1].js

          Filesize

          188KB

          MD5

          d4a5c07d6d92673cc775d0438a1ff972

          SHA1

          251d15bfa185ef4b6a66b49e8562a6e0e2125e17

          SHA256

          cb76d249b39e543da9038c7242aa92bd905b1db4791a3e6db0ee9f56a7794f10

          SHA512

          d3eed4c0c3a411048dd06515234da12ce312d1bfc713635d753e3b5d50b2995c5e34378d3a0f730ea6cd3c593800944b1f187ba7317a0fbcd88c4946e582133e

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WHUIQOC9\o-0mIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjcz6L1SoM-jCpoiyAaBO9a6VQ[1].woff

          Filesize

          16KB

          MD5

          dd6fe4c6f321f39c750ee024b38bc1c6

          SHA1

          192f09d9b27fd7518a7b2cc7ba503d6f83c68307

          SHA256

          d2de7fbc083f058b6c7eeb6985a1d24e46e5e9be3aebf0f2d3b26204fc7edd94

          SHA512

          e677bce8d3920d2e755c9fb80a6a96922c5504ecf06b5a650787a22f29d5f39b2c37ca336bdca41b25b71d36caec21dac78d855e0819435165d3771701ca45a4

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WHUIQOC9\o-0mIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjcz6L1SoM-jCpoiyD9A-9a6VQ[1].woff

          Filesize

          16KB

          MD5

          d22f975c52faaf5f561bcf90641485d4

          SHA1

          4092103795efeb56b3cf83a69d1f215771ac651d

          SHA256

          08cccd7191ddeadbb2ac3f16aaf5e3a0b65d2477fdb5a33e3b17d1bee9501d6c

          SHA512

          b85b99e957dc5ffc88b3ef14d14b7b7738e1210c01decc249fbb4a5274baa928b6d81e652244572e45ac162aa4616b0a0c607d59a01b01303e572ac3bce03382

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WHUIQOC9\recaptcha__en[1].js

          Filesize

          481KB

          MD5

          2b4a2c0d107bc671d4b39568a47aad66

          SHA1

          779b0775413e557f972fb43d07c4e1a09d2dbf01

          SHA256

          cccbd316b2e050d41ebf62c8c613d5bfae33cd43104ac3b772c9e10950a3dbd2

          SHA512

          26d41601eabd090a6f6fb2e99d270f1631e2a4ecbade927705cc1ade3495757b097f0832a8a1f915688fb6072322b10071c93bf81d4304863ed53ec41c71fbd6

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Z0UNWU5J\analytics[1].js

          Filesize

          51KB

          MD5

          575b5480531da4d14e7453e2016fe0bc

          SHA1

          e5c5f3134fe29e60b591c87ea85951f0aea36ee1

          SHA256

          de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd

          SHA512

          174e48f4fb2a7e7a0be1e16564f9ed2d0bbcc8b4af18cb89ad49cf42b1c3894c8f8e29ce673bc5d9bc8552f88d1d47294ee0e216402566a3f446f04aca24857a

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Z0UNWU5J\jquery.fancybox.min[1].css

          Filesize

          12KB

          MD5

          a2d42584292f64c5827e8b67b1b38726

          SHA1

          1be9b79be02a1cfc5d96c4a5e0feb8f472babd95

          SHA256

          5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0

          SHA512

          1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Z0UNWU5J\p[1].css

          Filesize

          5B

          MD5

          83d24d4b43cc7eef2b61e66c95f3d158

          SHA1

          f0cafc285ee23bb6c28c5166f305493c4331c84d

          SHA256

          1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb

          SHA512

          e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Z0UNWU5J\responsive[1].css

          Filesize

          66KB

          MD5

          4998fe22f90eacce5aa2ec3b3b37bd81

          SHA1

          f871e53836d5049ef2dafa26c3e20acab38a9155

          SHA256

          93fcbfca018780a8af6e48a2c4cd6f7ad314730440236c787d581e2cef1ab8f8

          SHA512

          822158dac2694341f6cf5c8f14f017ac877c00143194d3cd0a67ffd4d97f9bf8f2305e33b99fa12f62eee53ba18029541c0601ea5496ff50279d1200cfa03232

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\Z0UNWU5J\script[1].js

          Filesize

          9KB

          MD5

          defee0a43f53c0bd24b5420db2325418

          SHA1

          55e3fdbced6fb04f1a2a664209f6117110b206f3

          SHA256

          c1f8e55b298dc653477b557d4d9ef04951b3b8ba8362a836c54e2db10cda4d09

          SHA512

          33d1a6753a32ec06dcfc07637e9654af9321fe9fa2590efc70893eb58c8603505f2be69084fb2bcbf929218c4e7df9f7a8bc3f17a5b41ed38c4d8645296ebab5