Analysis

  • max time kernel
    121s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28-01-2024 23:00

General

  • Target

    7e3c35ef877ce902de19ae0067142cef.html

  • Size

    3.5MB

  • MD5

    7e3c35ef877ce902de19ae0067142cef

  • SHA1

    4425453381335afb4372222d15e542cdab7cf2c6

  • SHA256

    d4e401091295a699b3b58246b9b01411ce55e3705d9c1547c773b328524cdc67

  • SHA512

    dac7516c5b2dddb17ecbb3218cc3dc70e4839d6e33421e21322399d922ddeafc613069289784ccc79e474cb6d1e649cc0b49c51c03bce9128d7991a062300a0a

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NGH:jvpjte4tT6QH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7e3c35ef877ce902de19ae0067142cef.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2112
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2112 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2396

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2cee703b194ed35209e5134c3c948195

    SHA1

    993a87cb8f162daab1ef1ddea68749592812fb55

    SHA256

    04ed3e32260be1f8416c6d03bce657e8f10d5a8204d15f9581d22e15717a67a9

    SHA512

    1fa2716256b26dc0138728d6a4b98997fa8b354a16ab0f5c89821e4b18a4bfe10b206e8481e2984c72d26209df5adb90f4c430f9ab322c1f28e954a139b848e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7bd0523ee64e516b6f6b52f2b9731731

    SHA1

    64bc150de2c513c6c5a31e4adea6e5a045b6e882

    SHA256

    848d53bb9e4f7b3d75eed26047c562b0f6f794f61bd6dbd185760a030bc2542a

    SHA512

    a72a9c819e7496b9cfac83a1c8b642713ead951443ea92c53e92e89555a243d7427667a2d5474239a5823969997af87da3a7472cb5648fcd57d908acc435021b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cc083017ebe84565ca73571057e6c58

    SHA1

    08b9e795c94cf57695726bc8f0ed2351e69a5fb8

    SHA256

    748e0e8d024815043625eb23066893e612d6414e77e6acecfc5ea585bee1c7f3

    SHA512

    4d8c6d42ea366810bac2e5eea2d7d48f7b4e105e641a04ae89cb8fce098832ef82ca2a1ddae9ba66c0f460504497b7e1ab067d87cf78debec57d82c289914733

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba3cb5ae72cd4b624d5fd9bcb010bba9

    SHA1

    2b7dfc45898278580a962eef18dd693064377d86

    SHA256

    7e19d769bbddfa34dec407987ad3d55ffd2caa668ebd6dc59bbf69293655f0b0

    SHA512

    cd9358f3cc540aabc03e076e61994bd2f11446b2ca3815b4b1d0c6c8485c10b326ad89a0689448978b12205f84de3fe01943e4d7c64243e25af5fce47ebaf299

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72704c8e834ea32b40dde4d9885ffa8c

    SHA1

    267930be9483c433ee431e1d1cb677694206332e

    SHA256

    5e6986bab512b07cd3ed0901a7129fd844f2e0e3095f889f030971e857dcfc7f

    SHA512

    e606e31c8638072150c35ecb06f3a0ab17ce954936f32e33565b84930edbf40116a451629bda3eed3b1ee2353a134a77ef79634e10612616f3a9b884c0626915

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8c5a2bf6308997f739b8936c17ed013

    SHA1

    8553da5464f35b17e9fa1dcf5a471f3b377514ba

    SHA256

    5b5176d76881f040f403b194c64002fd52100310f7f93f70e66a261bec587c96

    SHA512

    9a24359b87dcc4b388d76b493a6341bee963642b2b802992a7558c7b6bcec770be2ba312e963f21a0deaca7b505b270d8a4bec15383fcc4f33cbba06886adfd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efec50b1b4a1345e4491d1ac68a03e91

    SHA1

    1a831fd186544a8b7ecee8b1348dfe80d60f2e71

    SHA256

    1989f74d59ccb96366dbfc9d0a458fd664ee38f73731444c59d95c07f0820ab3

    SHA512

    b5bd65501bb3e9f9daf292ebe18e6e95e158c80d6b0c090432ce48590526cadac02d4777973577858bb628a6b2128b46497ae15bf6106a5aa45ffbe6e5171006

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a2b468c12532be6a8835e02ac7801f0

    SHA1

    31e3096fc7d54433cd8a06f3fd9b15c34e802005

    SHA256

    eba968c5dcccceec6f3b29b4fe86f746c2083c062fd33354b8137a8d2caf0bed

    SHA512

    d65ae3bc9e69b0f72545ce7d5650ecb5a8516336fc36e57d5a401fd26a40507f03884a95ee38b7bb085916243d2252dc995b7119b4b6a73555f82ee949c60059

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1465e3d12cf68549a2fc5cdad94f5808

    SHA1

    94e110b9a7c6ace7937a1034b2bc878bdabd5ea1

    SHA256

    29de4c0c8dd23b0b6585df530b4a0abfaa0f775388bc2abcf13f3ec70b3a7a58

    SHA512

    36a8e697aaf7267194eac622b718783783b2650cadcfcf191ae3aa8bd524bc92d10db181dcc4959c1da95a3fcc09e580d5fee92825c293527554a414cdea537c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33af2467e0ab988f6b259cdcaa63ea23

    SHA1

    fcac16298609db1f53e2b095a878058bed1c32b4

    SHA256

    33dcdffd843ba4428deb0b9615fa87668da883d9f2675e82a897a84d7241d0d5

    SHA512

    cd6b34c553d6543ab5cce0521f0d2055f3e46133712fa30e96f36d71f58ed8e75da6c91f9fd5ac24881906bbdc7b8b26fdc02faa2ae7ee3210ce23f5f2415c39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11537d48b3d94ee4b7a081064bc8563e

    SHA1

    f0ebe70e534ab4119f13ac58c92d9323466fb01f

    SHA256

    67f872eb8a3bdfb7b6dd00f6f1070b8f491ebb6e1dadffc2cd26e10a63a47208

    SHA512

    27bffb5b18787d217cbd11f41ff5d3f7e0f8056a7bea8bd5d8967564f678408bc292f56eb14dc3f5d68953dc0ff6cbceca3453600e6df38ac68295c932f224ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54c6a76ef4fb5bdac29b1727b664628f

    SHA1

    6a12591be72fd95aec603adbbcc5408eda832d1e

    SHA256

    0b090929d8eee1f0b9e848938be1dbeb5bf7619ecb7a51af8edf6fc266eae8fe

    SHA512

    d788da44709a3a59d1dca6fdfae7ea855980428f6a640c7085cd1dd34310a88718f13b450ef9ff38b8e183f37b30e0648fd12dc8d04da48abce21d5675a1ef86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    afb910f4be082df144e3e5e06efd90ef

    SHA1

    777815cf2aa7960ace9ad6d05119f744c00f968d

    SHA256

    b7217b8beb7dbb88af564132870628edd2192bb53b9a33d1af90ba3d761e1b71

    SHA512

    6b50c36953b7c1810e074f90522daf8c6d8717a59b892630d31421c815e48231405aef4e1f32fb5795dcdad18be06abe8dceff8a901a5c8c8070111c1d9e9546

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee521173aa660fb6bd44aa39ebe9d006

    SHA1

    3669ba9e3d097c8f9c0ec5ea139a64ba0d4a65e2

    SHA256

    1e777eabf5ad4a853e9714de308757c4401bdfef6b3d30a3861576ae06cb865d

    SHA512

    3dd40e259ece3b3912fda7f37312c576fc36bb2fe81d4b6a341aaf7a48936a5e390e3f42282ea8cdd2c6199fc60109caca57e5f5b3e0e468a0482ba3c1f5c733

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33da8776685d54a5311057e1aed516fa

    SHA1

    67ea64d261c3b058ca40e052b9d8f7a7488985dd

    SHA256

    c517ad7e830d0db107950ae78f631f7480c190cae86b6b2591aa7a01534baee4

    SHA512

    de7279c9f913644c1a3914b907dcd35872b2d90512e942686bf00d129653d958a4887505eb06cf3cde14bb7f734fb9fbd6fff96b892a4d0ad44396440465334c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8b997911b1fe6140c5c48329c66d10f

    SHA1

    e7e7c381d88e931f536ea63315ef745d1e653026

    SHA256

    d9e3dbde8bd2e757b22c7f5c4999e6ad7f71913855b9f82b6fab51afaefb6ab3

    SHA512

    bea9922395f359421718f53166c97659f99ac50d3a8f4dc00b1b146c34226ab2b08a0be46c5d605fcff2511a2df4fab7e398ed0e8b98a3ed3a523c179a218f44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b3665f213a3febc25e241bf01165330

    SHA1

    cff57d4bafe52e3dd822328832a8a722d8de100e

    SHA256

    4acb5594cab2dc64a463be5891a48cade67c171bcec2438401d9dd0679662459

    SHA512

    d11498809936f70df248626dabe0b7fab9c4e74be90f89aca800299578a21f997ef7182be303d314ef5b04cff946073057b0dd198fa3b1a939ecdccad62ea45c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    491757b48af63e973e6f85b20732deda

    SHA1

    26bf2af014e0d60cf253f59a76ac8f294aaf7586

    SHA256

    5b8b6818cb7fe2d94ffffe6eb9e201b2dff8313a5cb32c0310d10e2b4beaa612

    SHA512

    e2098bf67f8b5b7891b6ceae947547c63bea0b3a439fbc979db8fdaf89aae73feb2d74db767fd4b286f2057f42dc6b084798cd34aba01eb12abc9f0f8885a3a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff782173852fb4d66fa81ad968ca7b9c

    SHA1

    4f767defcdc77123a02be888d07eb3a057235e60

    SHA256

    df4139d96a640071a96a8d1daf565ae67ab34f01c609af23a6749c62de6ffd6a

    SHA512

    37348f9f8337c7144a9fc5ef3549360f89656f4ee2a1e56e834590ac3e3301a25cb561945e4a3d41bb86fc7dcff649752b15d515313adef54adf0e86ff3baa03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2f0f1aac23daac4dba379cb16e20924

    SHA1

    052638da2d565b2ae778e20e5575297b73ca7b7b

    SHA256

    3a23b703463eb816f87c05eeeb92f23398d7ba3e67837ab2703e18b6e5896815

    SHA512

    b4dbf3082bdf11c37bda2f93bdf03bb92805f017840052107dcd7ade3255707d3dd179582330d37040b87ae89cb3b102f37f2fde7714b331946e624c81d4d6be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f76957c787847d82f71cd0504bf72de

    SHA1

    34074f171d21a5bcaf6cfef50ffe4c9d77fb490f

    SHA256

    18700bef45bf12f591aab00c05c5f080eada0839282a9bbf141811f61a40d839

    SHA512

    157a82e323c1e6480f7ae2328a3ba86f6e987445d59e855e0c74c0e6dcd32114e8c75116cfc4beb10c6fc75bc4c5a89c268b4cd52a056ea8b63963df7541d499

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    457a2ba09d4e2db48a7bf89e421a047c

    SHA1

    b636067f413146591c539a245613f18f1ebedc36

    SHA256

    6ee2444d661b43d8198534ab723c8d062afbc298ce8627a28c8d299fb899d513

    SHA512

    03035e1d419765c33cf2721192e8f7517f047f3d99462f2822ffe92aef751297e43d13831d3ba778c18c70a043de5597dce4f9d2ff6ac1e0346d201a21c029f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cefb163c289c9804541a910b03f237d

    SHA1

    b2e9878ff48a52a8863fef1d3381c02aac477ca3

    SHA256

    de8c3bd4b4102e285a4c62c179c770df51a7d53fad5a7721f562824572237047

    SHA512

    f8781fce728c4574d9d668c999c39727ccf2ed8f7af220b9e2cc888481314548e94875e1f464467cc2cbb72041dc3801bb2fc84560c1a87757a47345e757d0f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a2a96d87ed8f8f0cd2eae106620d2b8c

    SHA1

    fd71831899f0a310e210c07f71e1fd899bfd209f

    SHA256

    3ba77089247e3c5f752573f2d9de15c6f908d414664e47c1a69c745fe76c6d97

    SHA512

    646bc88933668942ff0ac6ff33b5b6b04251755791e40c2a49c4dd07d21129e549537531a6dcf5f21f665a820754ffb55de0e2d569074ec6cbc4fd4ba30aa95b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    47053fd7a206a045031524b93ec3f573

    SHA1

    cb0523736cf2706871d9d59ba15e7cb493819963

    SHA256

    9cef63a1b31c154b407ac8c34c1753da39410ac774f9601dfc101c4383252ed9

    SHA512

    5dc2c6dbf9e02b6acc38f4519b1741b8ab1f770f78fc137a6aa659e7bc86779ec08d67fe6f8bf502c3b96146f59f3cfeaed31fd4e5c193f798647cb5fc2dd94c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4K0WM73A\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4K0WM73A\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JGM5U0T3\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab626D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6270.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06