Analysis

  • max time kernel
    139s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 02:44

General

  • Target

    7bf0b4514cd8d4c25bc0e107dc17468c.html

  • Size

    29KB

  • MD5

    7bf0b4514cd8d4c25bc0e107dc17468c

  • SHA1

    ae26cda3e8a2338b2b57da862a91b9368e6f3f9d

  • SHA256

    d2df5a90db6df02194589e28222b08259915c15e30c36bb61cc4fb238dcb8243

  • SHA512

    a6ca6db963899b24d723b7d59dbbd7d39093f0022e98fce7d2d6e9ada075a7180afdabbb48d2413f95c794883ab5d4e9269619299e6a6b0334cd07ec8a949f63

  • SSDEEP

    768:9niPihQ86le9hQRUFFlsrdDw6shU/4lKkVGdS6qgKUW6WhF:9nskbVz7R

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7bf0b4514cd8d4c25bc0e107dc17468c.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1912
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1912 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2620

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d003ceda65152fb4a800f487dfa3dfe0

          SHA1

          6df2e9703716eba20180e84dca69ff0bea35f8f7

          SHA256

          c74767757f56eaa1ed907024cc7025d51ce027028262af9c00856b49ce2d3e7e

          SHA512

          1146752f1f278b97b76b6996acf316661c9343fb0de48685ebe1408df861bd2bf8537cdd87add8146b16ed5bc9bf298f55c7aae55315c74ca27a8ab525458cf1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a02998b46af85def0739efca254cc302

          SHA1

          d9afda810f07897ed3c42f097c9f48ea59c1ff19

          SHA256

          330ba9214098130b3f9cd4fc3a41de8d421314e13725611559008e52a15e2939

          SHA512

          29cf818e069ae1f0046d37f3ac359fc11554dabf259357fbff16e0f20e969811a1a9002c3b53a52cfebc82572a82839f9f326ba83acb23da98f0b4932ef926ba

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9feaa0ac30234013f71b655a8dabc777

          SHA1

          efbe539a6ebc9f6b8010c4b30e844e0db79a0314

          SHA256

          f85ddaa8c2b22bdc672ab602b57c13cec95c2c8bcfb72e95bd26ed588f59d1dc

          SHA512

          5a9a98a9b981d3ab1fb98ef9df7ed8e448ec6706de7e1a71b1caee5e54f4f0e66f4a7ae186012b63bd17d4f213397480484dba70b4a2beee4ad5771bdbcb4ca4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cd0b3f2e74d3d470a68c2eaf07064106

          SHA1

          9c1dc17ef82ab614bb1bb42c16c20a73fc288070

          SHA256

          266e0a847973dc1cd12186d8675fe2c17c08b1a265a3c2630079eb7eee095e18

          SHA512

          17dcd6416e650f5bc165992aa28f9787a371793d8672bf1bde299cfb6382e4d299b32635305aeda040f8dbd0a8c4fae4afd7e78b6db29887442a807c6b8291b7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4a8c13f18d2afeb37fb81676a9aaa28f

          SHA1

          d724d006ba24c4da473e4e73b9e3f626fb90d260

          SHA256

          539dbb43f448df4d24306c4d8fb4dce0400c6fcc57bdf46bd956a1eea41e3fdd

          SHA512

          425afbdbbc1ad093c9502e8116a2108192759c5be1e2d68de0c0686159817e9efe3244992ad16f472391ec004a29923aa5abc033c31f3bde10b43345078182ab

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6c84a986a2af7681c786f665ff233604

          SHA1

          0611974cb695a8f723fdb97b12dfe320355c800f

          SHA256

          206de8feecb8e530dd92a66fc846764217b7629ff229503746985aaa3bb4e94a

          SHA512

          e33339eddcd18b5f4f34db09fbdf4a95b1cf213fbcd11def463b2ead71fdc006bef9901ac90bc2ef5d7b3d786d5e1c7e79e05ce240b0b0d7c33a5450fe477085

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c293ac2b9a618969290a24c8815cb80f

          SHA1

          360a9bb1454eaaac1d5f9df714a1b1d4b9e672ed

          SHA256

          45dd992a707e059eae73d145124cb4ed1e0b87d986ab7959277f849c011bf984

          SHA512

          c428a9f45ca6db4a6e5674e5719b2b67df55e4d3ffcac3852e269d8de03d03b08ebc00a7dd11eb2ad5334e8edf0515ba69bfe47bb9ec3cc854dfb1ae1f6b0f09

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fd3518276da6bf4cb274e6da4101f39a

          SHA1

          33d1a0890039ff237e20ad499469bd75fd25b7f2

          SHA256

          ff9a2845d6596fb6e35c3241d484135cbaf6253b7c8d045ebd34e9ecee04f81d

          SHA512

          fa36eb1492ae104b9b34807226de03f44fbe29692d948123f29a9f536abf5beac6fb8f12be2698b1e2364201a3ee168ffda4011623476341daffde08c29724da

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fb676689110fdcfba252599e9150a16a

          SHA1

          4c8e49410387e31776f0db0ce97b8212f60eec72

          SHA256

          f875b0648d537df537fefb2379971810487b8bf0fa5f0ec71466663e197f7f6f

          SHA512

          e2688b7dcdcc3934dd855faf8af37562931a261c5ca8b94dbfb7d9323d1dabb0c01943ead852c320952840a68b84f76cf42ed00dd2e99d01cc806cc528ca85a3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3290d483f64be9f95daff5f25d6ed7de

          SHA1

          363dfc68ef2a649dfe642ec717352b9ff0be775b

          SHA256

          b67752e1f8ecece9419c6125487944152b1a93a7151dff71250bd8679474998a

          SHA512

          095101a4a0003ff0d52160d4004bac3a2fd575ac7c91514b62e2f5ffc028807e612b691c0065920bb19e153d6019a8d0424e56e36abcc4d5dd3ff9e8a3d34aed

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          46005171ef4e65dce75f70575ee1e35f

          SHA1

          a0262abad0a76909619db6ccf809993ff0abc0f3

          SHA256

          aeeb44b07d37bd764cfeb5831f208e54c11d145c53606c58b5d446a54c16518e

          SHA512

          9fab95be61522c16718b349f4d17496422f061fbc391f0ed5662f3698fe23917956539446af878774ecffbe637fce0f6cd87daf6fa27b167e21684b9e8171db9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          24299cb8589fd4abc920d94f7420863c

          SHA1

          108ed96ebd00b7d871967d4887ae92925c60a412

          SHA256

          1e706d0492163c1b27a52116a60896fd26d13b3ddd558ef4fae1d5b0c57fe1fc

          SHA512

          14a61bc6708b186e2c18eba2f4d957f0961ee3c947af8503a1ffe59484a5777013779590fd812d06bf9efd16e9d7a0400dff60ad3183289fe1f94246eb3fed35

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e7463be99e555793fac51edf260c78c6

          SHA1

          c283e6c0f8611cbacd47e3a0f81d504eb52a0df4

          SHA256

          9fc90cab64af0b745bf939b4e8aea4530449907720c0121ce49327d1a5f08832

          SHA512

          bbba91488abf17e61ab140c97717473290acde9cfd9becb3462d7fb7ddcb0bbe5312929fc62df847b528ae840b22119edd74f9535e9ad075580d3c19df3f1b09

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6c74da9e07253eabfec48bb669bcdd84

          SHA1

          889c6efd9dfc71b275cc5dd9c4248f2c2d04b7af

          SHA256

          7b4deafc35b46a1feb187ec413624a2cb4eaf6dd33291f2f616adf241ae8d9b7

          SHA512

          93f8573d27ce85054be6c7b045178d36e28963b4aa0f95305c961ceba2da43cbf0b347c1edf2e20eb766eb07162453a7b91d13ecaf1ff00679e1c61c6db25400

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a35184d2b0388d7d6d8843da1c9f972a

          SHA1

          92543263b3dfcf1646cd193904bb81aa689cb799

          SHA256

          5941708d174fd40cfc3e59d867eeeacacd4baa21756a1c6a463580d533f3d410

          SHA512

          efa6c7adfa5fd95a882ee484a9d700ed49a2bcc2d1db7d70bc84837de2f562b1f79735346602ae11446234882623812b8ffe74869bf51b05c0159105cf8acf46

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d9c6d964ab17efd6b2f9d48992f0ffd9

          SHA1

          6bee571523d821f34036a452e1366f2917ade0a2

          SHA256

          c5dae19588985623c0e2536e409631eaa7d4ed03f6141f03c8d07eacb3ca6492

          SHA512

          ea48d47039f55ad513833335750e31f25535123cee3313b262c8744b81dc0901457e07de04498c4c97dbacb765223e73350a781e1ffa352f6d6a83e3b2113014

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          becfbe31d17c70803a2be4372c7ded44

          SHA1

          909e02fccbb99ded6cf4096f73831b062423b7ea

          SHA256

          96ed6681655859ac1f3f749a0b6253dcf76bdc1ad96ae196ac891cf5984d2182

          SHA512

          4aaec8fc6ff8a80210d63cd6dbbcd90898de9632000f9f76a393115c81f3ed67dc0f3c1b2aff74465c64da2f01259c15dd418cad92145551121be47e14d2323f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4457c16b7c3905f937c2b265bf91aa84

          SHA1

          8892b68f9a0304df27332ce35ef1f76be016f6a7

          SHA256

          efb5da63bf5f1109035763a3cefc610da52211ce64a9a1be39bba6fb7f468163

          SHA512

          3e8848d8866e5cc9cc3899d43ff15ba0e79927ea2dd6b81a1ceb3a0c0336d5b8b359c0d00d5d02748deadbe27941f6c6918cee7ef6a65a3bfec7297c0fb11b64

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d3d49f6bda3843d80c54ed1650094c63

          SHA1

          8a6e2383206e430fc2fbfb05716e872744b3fa59

          SHA256

          d9e3311b129db72e3034465d1f37cb71329e89d6a2787211658275643e20de03

          SHA512

          1c37cc800ec3452f67f447e9c3c68782e9f2af35a88f55645aba8ab0e65a3a9b8dd02cc973db96e00b1dbbc9b86b0cf5784f2f32d9ebaf23bc20647f71f09e5d

        • C:\Users\Admin\AppData\Local\Temp\CabF105.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarF1B5.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06