Analysis

  • max time kernel
    120s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28-01-2024 23:35

General

  • Target

    7e4c8519e621ed09f877c3534eea6a74.html

  • Size

    9KB

  • MD5

    7e4c8519e621ed09f877c3534eea6a74

  • SHA1

    26088df4c0cc4f1fc11a9de1b58ce6fd1970c9e1

  • SHA256

    dbf5a6f9324baedb7da9efc91d134eb8acc3673649ea1d460990ba7f51f7325f

  • SHA512

    a12e9d1ae4993097a7a6af16b9d770128c84939b88388df45ce9b2dda58a5faec6c51aef2b44f0671b04c0bd923c49d6742805495aafeb363a62e23fa2cf117b

  • SSDEEP

    96:uzVs+ux7cMfLLY1k9o84d12ef7CSTU3GT/kPsQOpUlVHcEZ7ru7f:csz7cMfAYS/G1UUPHb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7e4c8519e621ed09f877c3534eea6a74.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3016 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2720

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c90127ff7b8f1ac7ccf88f08adaf6aa

    SHA1

    4c9d444765a3d4282d5e46ae788f457ae1e3eb6b

    SHA256

    febd888c540cab155f2508f3e1e2ad2c99fbcbb7da905ba74de40bc603daf60e

    SHA512

    0380d59c598c95e7c5760dc34279b2884a18bfab81b0729c81f3edf76b367192a37079ea045b43cbf77356c37898b03033ae92883bfb418ac412b1fbc60fc0a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83147c7bb60eee5bc80e7857b343a509

    SHA1

    5a756e83a43307d409c734224725528da4b3446b

    SHA256

    cc948bd1fecf618fae458f99ce0bb33e34bc49c08dbd0db2657881692392a863

    SHA512

    25f30ffa8475d28aedc20530eef3e8df857fe463c193f0b6338b6588e7b4265685f2c638303458c521a095a91dab3b4f45af5492fe30736c8bc4f94c89a225e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cc26dfce8fefc4a5768498e1ad37ed6

    SHA1

    acbeedae7dde183acd77c81188b32204b772ae51

    SHA256

    68ae87e1b749cc5d749498db5c40de19d028fbf463ae35b6267a247c33a82533

    SHA512

    a6183b7f1d8a95250a6a96bc634db8cc1398794df0aa6556e6e76c25722fbc18e3f04a628952409dce6a00a88f345f523926c057ed78c1ad7c2b15d2a2999681

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c26434c156643cffb721b6bcb071352c

    SHA1

    2ddd97a2979ede737ff566debe9fddc6b07d4e5e

    SHA256

    cea3761193275703412e36bdfb4c75f3f39d623c92341add1c8a35b5d53c8052

    SHA512

    f20ff82cefe816b6766cb71b3027514d0597dc4ee5605b7d5aa926d1c682dae1a5d084974cee2c5911788f8c065242c3c3f1174c81ee5e29a0d6359bf2b3aed9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0669d5e7557b7639d51ad7b8551dd9f8

    SHA1

    44a1b9e5ef650118a0ebf64680e16ca369d917a3

    SHA256

    0b92f99315a27606f3a53ab7e2096b8b3b70f232421139a12a48275372b07d56

    SHA512

    16f16b53c759de03c92cf39cc60a3f51b9eb49143cdd2a0526aaf84affb627dc18ac645a7cb024bd0f0797d9ed0a5268a0e40f2b1386417a4f45a228d5ecf416

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3064840ca135d307986e527c65f740a

    SHA1

    0b994981d619d532d8f299593f1593da98b29a34

    SHA256

    b2a951ecde9b1c569d4aa475539eb1daef0e91a7ba31dd320f3511e99680b530

    SHA512

    b791fba598d7ab266567a87b9be3ea2eb344418865de30bf12aa482a19713515263f7b947151f615c3a2b76bf17066bd1b889fbb6fdd59b49502f0229dde8be8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    866b6149e14f69c8e34e644bc48b3f3e

    SHA1

    f0203c7824a44f35ba7bbe7d8ff8f9d57b7107d1

    SHA256

    1517648b03295cd2537b855f075b07b9696e16c3e7b5387789732e56ec58ef65

    SHA512

    9058db1ec7bbd75bff66b9abb7e365b4eb81ce0df61dc4f7448e2f2f8cc089cf1c3ccee72eb3a840369d175d5f2ee64b1a0903327d64628f78eab74045a5fbbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44e9ebca703ba190bdfb64e3a7d176b5

    SHA1

    264f44be3fefe8c8342f720c40f37d1ef1e19f42

    SHA256

    ab4d684ee662cac42796dce8cfc47037987e6530d4329270f04ece073a73b15d

    SHA512

    c113fdacaf1d09a46026e4bad615a34cf0be1c37271ad1fb90e88a318cf4edf0bb4229945724ed662e0715e2f9907464031e9178b66e736700eafa77d8f8a3bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df7366face74da8eee9d8befb8bb067f

    SHA1

    4dfd55c8d29f377251cea45de9e83aa9890fbf56

    SHA256

    d057f1dd8886beca01f5c9a0e64b480d5ce5bd7aee821ceb16e85615fcdbb885

    SHA512

    5776ee618888e84b6a0364cc475d021577ffd1405fc483dcf606d641ec1fcb23d6e70695de63117bb845b8ed6e5ea87c6e343ee0c15aff62b13438c02acaa878

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfc61a2fb1ff85f58015109031d562cc

    SHA1

    473ca9331747a2db9d28c365d3f1bbbee45f1f93

    SHA256

    bbd0ad0eb9f9641c6cb7c1c828ed7b76a89ffde145eed9c2658990466c15b345

    SHA512

    55ae2ef42528c920a1d762c9b9da61e84e8642b1bb32fd63c7c4bd1b412dc7adff624dca9a7c6f02b369ed08cde3a0d53c209fbb0db7295d1e2a6a4af1c180ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c4e45bd5505389d4e9fc57ada2c4073

    SHA1

    f7d74a80800c9237b802da031141183d36b5214b

    SHA256

    066bdbb5cfbf91f0e13be9a61ecc60ecf3784caae51459dd61449d30025fcff3

    SHA512

    2f16fbbeef461c7cf6e9745c653cb57d8fab84c3a86defbd23041ba68122da3cf3ba9fd6404b17fdc99cd9508d7a9af8cd22114d1362689aae6a38985881b669

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89498d3a8978e3872c07f03161a9c4ef

    SHA1

    e2c5c65fbaef1c422f4c225dbceab33fad75a7ff

    SHA256

    0b58023fa10c3cd8e1db46f880b39dce831a7da04b516c0b7bc3bf8b5e7773d9

    SHA512

    95f51d6aa49b80e64da5daa2d0c610607d87ccf63226abaf816ff5941e37b6d45c8ffe92f52fc1a794b794859eae773bff40f75e68534f98cff15a7df7581915

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1d761d34a72baae9021c79edf78da51

    SHA1

    8cf366de5779699e7b01a9837931770c293062ef

    SHA256

    b399e1421e52c5ded582769b2d454ea7e38e29ea5e3e996540bf3bef08dfee39

    SHA512

    a7649d220cd696d43b6502ab20a2e02a05c83e91f4b6d6756bd2df8379adeeac0d1b201847608850e0f48175c77ab4a34b4f39df6b42aecd02e2f6353778269d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6c7f90bc89c86a2b5214c128d47a3ed

    SHA1

    51e16b0672cbc727797f984be8cd5643521d7dab

    SHA256

    7fda5721dbb2d4b35f670f5a44eb8c687d955235e7108b1ee558055d22f1439b

    SHA512

    bcc63e5d98d782d464d6fb10cad002864cb61babaee6bab76f03874b0541646cc2657b83fdfa3aa7dc71c9273a809992d5bba9a3447a8744f3d050d3921bd9c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb2228f1ee04feddc3fabf7472c6493d

    SHA1

    c840a5d8f44c83453c55d0f04af2f74464940e30

    SHA256

    24cba42f024b00844ad1d6c99122839577f490309ce4f67b0d62268039fb4f56

    SHA512

    764e82302d5f656687cc11efec9bec857f7a3a50d260efe60bb1e2f8ae16f73721e3c2c9f9ea622547cb546519341d61f1f13b801e72d51710bc0f7f4c184d11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7077c9e992e6f0fb5e3b250970fd7d06

    SHA1

    5a3e73745853813032b39b48fc01d5881aec81b4

    SHA256

    44a4846b577ab86f9bf43b14c83185b1eff2d50685f3fd752f68d451d810659d

    SHA512

    cc6bca4e60da34c0aebdda68301bb94dbc20db335a1b33d00fb0535803c5ce3e0830e9f064e260ec899bb2497c35e6cdbacef748be26719b0e212ba80ba96e4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9bbc60d0b9d94db26b887045947499b

    SHA1

    c6bdce01ebefc1df03e2e43eea1c8644a817fae1

    SHA256

    152bcb5e30fa913d6486165f39289b1ef484d2072e19c7d8e2eea3948e1e9293

    SHA512

    fe3eef88221b76647c571b1b5b86c3be43eb7882e86b82182da9c555bb45f4e41aeba707aa59e0c38c18e07849b93c26170e3d5fe47794941026348cf73c7eb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92e5d6b49590e64b75ded4974a1cc7d5

    SHA1

    3d3a3b6d8db6beadb7756602fa7c3a48c7cf8da4

    SHA256

    0aa7d2a206b5c750a4440cfc905a1bab015585d636f39b9320a8aef97fe5c469

    SHA512

    132784e0427d9987cd0a1dc87f6c79aea4ea9ec817de6b6c28e7079a960de2a4f98d6d8772401e7091cae45b6661be58e87e61b58dc33553ba49f8440a68872b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2720aa7976ef92b63d9b21b4de62b07c

    SHA1

    4057b55ab70714c0af30609e9366d9ced5a6102d

    SHA256

    d7aa847db2ffda8c2aedf90f0bcc31cbd2fb0c3dddd8704940e597650c21b7af

    SHA512

    8e2ee8eb4434a19cf839b71e35457f2396dcf8764e226f0076f89ab96027e5a039221080d1502ac7adbe02c9ac223cdf8cdbc2d2deba0ad960fcf6dbaa73356b

  • C:\Users\Admin\AppData\Local\Temp\Cab5294.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5335.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06