Analysis

  • max time kernel
    125s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/01/2024, 06:02

General

  • Target

    7c55860bcec5d32601223ac4b0f5165b.html

  • Size

    14KB

  • MD5

    7c55860bcec5d32601223ac4b0f5165b

  • SHA1

    a56c5f456ecaf1319ac2d8a8490d67fcbcb7f2da

  • SHA256

    e08c1a263dcba94c2062cad9cd41c513ad14901bbe86b876a384aedaf1be0e51

  • SHA512

    fd3fe123ebd03663ac1ecdf1c415f41030df9159498700784b051288f403b130b75d167641b05ea4bfb6dcac9f71639c219cd4ce903e8e0b8fe5f33ef9a7ca62

  • SSDEEP

    384:hJxFNYJnM6cbntVsHuSvNp4+mTqSeAneZ02V:puJcbte1p5aeZF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7c55860bcec5d32601223ac4b0f5165b.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3304
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3304 CREDAT:17410 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:2200

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    471B

    MD5

    55adff48fbcd7763c70a0d51d485d24f

    SHA1

    8ba66cb09d8e16d22c35931083d443155d3a04fa

    SHA256

    801c05af90120efdf31e4dfdcc5e7f2b76b9ca0e0746f58fdf12bf99287d8aca

    SHA512

    a3151d562469fd2412c237bb5646bb214a9a9f8664be4eb48fdf704d9710872e41947669f770ac74d9d1eb5d6ea5953e40cc5a85d57e56fc82708341154eee7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776

    Filesize

    404B

    MD5

    b7ab7e574b79beeed2d1066a1071c13b

    SHA1

    a03adfe5bf505ebe7dead31c3a25f637844eb3a9

    SHA256

    2bd66877eb75f895854cc1807903fc90fd0a5f0dfb60bcf5d93d5b4fc9ca0268

    SHA512

    0a2ed3548b6a3ea982707adf26a5a6734cec23d802af5b23734e316ddf5b08bd971cf941fae60ae91296d7a9d841bcdcf87f0899e3ea87cc639acef0913b015c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    85112e4cb7aed594c20c3f33597c23e4

    SHA1

    69228e6783dc05ab1e18b32680ab097d2b23bf65

    SHA256

    dfe13a90b1202397c4459a232cd32c4a8dd752044dba6bd31fce35041c88aba9

    SHA512

    0d2962ff74f79d32ea95eafb8303fcafba7ad01b9e5fb5569b71c1696e4c74009bfc0476b8e8a4f27a395b92c31a847c750d9e0bbd8b0471fe04b58fa0cada89

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\JR16SGTE\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\JR16SGTE\www.youtube[1].xml

    Filesize

    19KB

    MD5

    81f6cd1ec7aeb8ae92123866b7f62f9b

    SHA1

    9c47739916ab1cd30a122ca515803590f6959256

    SHA256

    f9274adebe802c1cee7e371fc5209e2d2673c7e69eab14d329d5fa5d5815fc08

    SHA512

    5270959b8b7c5cc5f1bee3678160f21bd1f79b23d831d3459719282dbdcce8a32d4d0c2d334436ca598bcfe11b909a6f7b4a6b105f1ad0f9bb9e3ebcedb7c927

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\JR16SGTE\www.youtube[1].xml

    Filesize

    578B

    MD5

    8a73af20c93d3ada8627b22f8599c11e

    SHA1

    abd3ed27984d6a2ad1cd20bc8d2b4ebbff8f7ef4

    SHA256

    23a76302f7efaa9154e18af8caea7800e1622406aa8e2ad36c68b7cf8737718b

    SHA512

    f6890392881fd38dc4d2414ce1d158214e156e9eac749767b4198647a3365b0c55daeb303cc725c0575efdec738283fe3370efbc12e8df79a906678aba4839cd

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\JR16SGTE\www.youtube[1].xml

    Filesize

    578B

    MD5

    24d24395f5860b8bf155538bf77d55cc

    SHA1

    c1eb44ff886641503b683200851f4f1d67e0bbd0

    SHA256

    41f4de42447c12ef636e402a45f73defc86a0a5a4cdf0ca434c7782c8c47d147

    SHA512

    4176697b392b64739b8072e4f6c1e818780f1fca8eac9fd1385fbdbed01a5fcb1bddf2a9ba477b62cf83dd54a0019c04fdf08389e1834fc4ae8bfa1a3a5c11c2

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\9owjsyb\imagestore.dat

    Filesize

    1KB

    MD5

    b56ba3c168c0674236832b016b2d70ec

    SHA1

    b16cba7079b5ee38ff4e3b8acca8cf0a9d8a8c1d

    SHA256

    cb0bec99a53db267cc3bf856a34c8f1c2d1058a5826365b21f0b737558974290

    SHA512

    d898556fa5404cb029c2ea217b3de1f8604b1189e32dd5f165e2e43373e45faa1a75b8636babb6dcf1a2a93981d1a8020e1e75d233111a666f2587227b723c2b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\1RIAF1U2\common[1].js

    Filesize

    8KB

    MD5

    56b21f24437bfc88afae189f4c9a40ff

    SHA1

    a9d3acad3d4c35da454e4a654bdd38f8d2c4e9d0

    SHA256

    cfece1b609f896c5cd5e6dbe86be3ba30a444426a139aec7490305ebf4753ed4

    SHA512

    53d4718e60a47526be027c7829f9ad48f381e22765790f20db35ff646bd994f8085b12b8fbeefd5b29ecda8f71f4c6c62b64652bc9a7256e001b5e4047c21651

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\1RIAF1U2\css[1].css

    Filesize

    530B

    MD5

    0a127ad39a8ebe4207492293b556adf6

    SHA1

    17d3dad64e4f9139cfb85bbcca6659a8aa532a48

    SHA256

    c1294965425b5028a83bbe5eeed0cd9b92733ec41efd07e34532522d4c97b6e1

    SHA512

    5aa845c5c6c20259d9c6bc0c9fdbd13ff178ba4008865f7113387767db0ad39cd53c1d276cfa4997186fd39f21d30bf00caf8d092e5c04119d992368b1563df3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\1RIAF1U2\favicon[1].ico

    Filesize

    1KB

    MD5

    0106d4fd24f36c561cf3e33bea3973e4

    SHA1

    84572f2157c0ac8bacc38b563069b223f93cb23c

    SHA256

    5a6c5f7923c7b5ba984f3c4b79b5c3005f3c2f1347a84a6a7b3c16ffbf11777d

    SHA512

    57b77c5d345eca415257e708a52a96e71d3ddf4a781c1f60e8ba175ea0c60b1d74749cd3fa2e33f56642ce42b7221f16491cf666dc4e795ecc6d1fbfdb54ab98

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\1RIAF1U2\hd-style[1].css

    Filesize

    40KB

    MD5

    ba5e3c24714a4387a4599df6af480707

    SHA1

    296a00039438cba9fdbad4449da6a2bb177e8a3d

    SHA256

    8f47473f38e4e314afbfbf59e9fbf5d4436f83586cf1452570fc0bd62e63f5a6

    SHA512

    973533abb115208529464b6801422fc5ea9426a0d639c3d46633a8e2a6fcdb25d8756c792243e3b1465363b7faa575ac59687cf3a9a1c1a14bb0ea3e16ba650f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\1RIAF1U2\js[1].js

    Filesize

    188KB

    MD5

    052a72cc2f56c0aec06fa6f69352d624

    SHA1

    b4cc0fb35fd7da7b360f27293ce338496106c279

    SHA256

    d8c82c889f4c8eaf0bd8cf6c1487c8b0077c59f53f5e0d94687e12d5e9f63379

    SHA512

    cbd81391ef6555ec3856cf96787e75bf1bbf984c7ae5d4ca56e6d2b4e70b2521ab5c6d48771b9517151667a543491c3c15a07fcf5717db57981b555f348d5821

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\1RIAF1U2\js[2].js

    Filesize

    243KB

    MD5

    8f5707bd693e5bd9d3900d12b8db387a

    SHA1

    8cbf05ce5d49377b8627824641b7ae9981107a7c

    SHA256

    9b2248459e5e97dfd3c5de64fa1373780195087306c0651435c2bae3ef3698df

    SHA512

    ff728e9fb1cfac377229c1b655cb253046c12e737f3d266cec1435ff36c37a8544ab45ff169123d13898b6fcaac39262127db887ced71dfc8df7f30c8355e74c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\1RIAF1U2\script[1].js

    Filesize

    9KB

    MD5

    defee0a43f53c0bd24b5420db2325418

    SHA1

    55e3fdbced6fb04f1a2a664209f6117110b206f3

    SHA256

    c1f8e55b298dc653477b557d4d9ef04951b3b8ba8362a836c54e2db10cda4d09

    SHA512

    33d1a6753a32ec06dcfc07637e9654af9321fe9fa2590efc70893eb58c8603505f2be69084fb2bcbf929218c4e7df9f7a8bc3f17a5b41ed38c4d8645296ebab5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\1RIAF1U2\zyw6mds[1].css

    Filesize

    1KB

    MD5

    a5bb75d5bd1b19def25c1dd4f3d4e09c

    SHA1

    d0c1457e8f357c964b9d4b6c0788e89717fe651f

    SHA256

    ff0689879c72300a01eae0c05c3205e2ca57c4bc1a6bfa0718fa6fea4a51627e

    SHA512

    b9fc57f7ade8f34cb02ece2935acb30757ed846e4bcf81d3fcf5bfcb45611d386bd337a6337e9945c5654cf044dce4dd3fafd60a2b42ed5bdc857ef96d077a69

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\SB302YPZ\enterprise[1].js

    Filesize

    974B

    MD5

    8d9d9e42a7e0e5930095e8be013c6db5

    SHA1

    24ee8d2f387cf0cda4164389eb269a3a8aade613

    SHA256

    5deea3cf19064feb2cdd00f4b269a54d5cf37149e9448e9921628d3d51654a76

    SHA512

    53ba368eba6b2390c5f83310e6240e0933af59fac8a4a8b6046eac5ce63041e95dbb6274f53010d19dddedb12e73f9632967d67aed5919ff6a2fba67ec22c42b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\SB302YPZ\hd-style-print[1].css

    Filesize

    1KB

    MD5

    7878fda89f8e725fa06880d1890f9c00

    SHA1

    3f8e8aa44d26d3cff13159830cf50aa651299043

    SHA256

    6d17b244f2b4b8a93886dbe5cffad1cbe8fc9079495fb972a10fac1eda0a16ce

    SHA512

    392d457f4c54088abef2b4deeb042220ab318d00d1157fc27386a5faac821c70c78c8452c99bc75758fa36643932938274c171589307919ec01e293010ea35fd

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\SB302YPZ\reboot.min[1].css

    Filesize

    3KB

    MD5

    51b8b71098eeed2c55a4534e48579a16

    SHA1

    2ec1922d2bfaf67bf3ffabe43a11e3bf481dc5d7

    SHA256

    bd78e3bcc569d029e7c709144e4038dede4d92a143e77bc46e4f15913769758b

    SHA512

    2597223e603e095bf405998aacd8585f85e66de8d992a9078951dd85f462217305e215b4828188bf7840368d8116ed8fb5d95f3bfab00240b4a8ddab71ac760d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\SB302YPZ\style[1].css

    Filesize

    165KB

    MD5

    65760e3b3b198746b7e73e4de28efea1

    SHA1

    1d1a2cce09b28cffc89378b0a60cbb1aa8a08c4f

    SHA256

    10e40ea3a2ad69c08d13e194cf13eb4a28a093c939758a17a6a775ef603ac4fc

    SHA512

    fbcb91f26b7bd874d6a6a3b1d4d6f7277ded091cdae5706c285b4d5d17446a1bf58572c224af38393ce49b310a51d5c5d60711c7094e5d32abbaaf10d1107e1b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\SB302YPZ\suggestions[1].en-US

    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\UG0DPB4T\analytics[1].js

    Filesize

    51KB

    MD5

    575b5480531da4d14e7453e2016fe0bc

    SHA1

    e5c5f3134fe29e60b591c87ea85951f0aea36ee1

    SHA256

    de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd

    SHA512

    174e48f4fb2a7e7a0be1e16564f9ed2d0bbcc8b4af18cb89ad49cf42b1c3894c8f8e29ce673bc5d9bc8552f88d1d47294ee0e216402566a3f446f04aca24857a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\UG0DPB4T\banner[1].js

    Filesize

    95KB

    MD5

    2617fbe67f06b4f943b5fc8672bbe193

    SHA1

    98ccc655f61215f02dc43f0af6ca6320a8f0ac42

    SHA256

    c42431f1fdc3624846072164c0fd27f43af6582eab30d2c9658a159cb5a45931

    SHA512

    fcc3dc136a5ca96563e578f093f913e3e1920a142737a60edcb93e4adc6ce892748ce20e96449529d0bca5e38bf13fb8806b6bdc01b7d2e6c1e37f4fe1618dfe

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\UG0DPB4T\hd-js[1].js

    Filesize

    23KB

    MD5

    6761faa022e0371e84e74a5916ebaa44

    SHA1

    5320c3d53d5447bad2a02c63208deca7fb94b655

    SHA256

    da17fb5b54c0fcd77c7358ff274823cb6a02ba0c4b6fcdf347c1ef611818bd9e

    SHA512

    a8cdba92942f299b648e87109d193a1f7eeb8f243eb2bbe4224423b512c400fccf930d81cd403a925fdf99220fdffcf89da69305cdc054963a64da470072d019

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\UG0DPB4T\jquery.fancybox.min[1].css

    Filesize

    12KB

    MD5

    a2d42584292f64c5827e8b67b1b38726

    SHA1

    1be9b79be02a1cfc5d96c4a5e0feb8f472babd95

    SHA256

    5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0

    SHA512

    1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\W8BIYKF7\jquery.min[1].js

    Filesize

    84KB

    MD5

    c9f5aeeca3ad37bf2aa006139b935f0a

    SHA1

    1055018c28ab41087ef9ccefe411606893dabea2

    SHA256

    87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

    SHA512

    dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\W8BIYKF7\p[1].css

    Filesize

    5B

    MD5

    83d24d4b43cc7eef2b61e66c95f3d158

    SHA1

    f0cafc285ee23bb6c28c5166f305493c4331c84d

    SHA256

    1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb

    SHA512

    e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\W8BIYKF7\recaptcha__en[1].js

    Filesize

    481KB

    MD5

    2b4a2c0d107bc671d4b39568a47aad66

    SHA1

    779b0775413e557f972fb43d07c4e1a09d2dbf01

    SHA256

    cccbd316b2e050d41ebf62c8c613d5bfae33cd43104ac3b772c9e10950a3dbd2

    SHA512

    26d41601eabd090a6f6fb2e99d270f1631e2a4ecbade927705cc1ade3495757b097f0832a8a1f915688fb6072322b10071c93bf81d4304863ed53ec41c71fbd6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\W8BIYKF7\responsive[1].css

    Filesize

    66KB

    MD5

    4998fe22f90eacce5aa2ec3b3b37bd81

    SHA1

    f871e53836d5049ef2dafa26c3e20acab38a9155

    SHA256

    93fcbfca018780a8af6e48a2c4cd6f7ad314730440236c787d581e2cef1ab8f8

    SHA512

    822158dac2694341f6cf5c8f14f017ac877c00143194d3cd0a67ffd4d97f9bf8f2305e33b99fa12f62eee53ba18029541c0601ea5496ff50279d1200cfa03232

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\W8BIYKF7\script[1].js

    Filesize

    94KB

    MD5

    1382f09764f50b7e6b128cc70e6b3579

    SHA1

    c37e39f32968a394d854454c425dbb64afd0ab81

    SHA256

    5de1b6de9a88c7fa83b1b88e2aa160e39fd069e9a7ad0dce7f453ec02724abee

    SHA512

    6af4b902ef59ff58105eb9b70287492d7154f952fe525ec4ce1d743b72b979bd9b82b3c99fd5e05770b125f5295ef20470b1401dea5256e241129f98f4313e95