Analysis

  • max time kernel
    117s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 18:01

General

  • Target

    7da57491076e2736773b50b7b5125662.html

  • Size

    5KB

  • MD5

    7da57491076e2736773b50b7b5125662

  • SHA1

    2dec49f94bccba15bcc734051255afd00d01f7d3

  • SHA256

    d9e1d9a4050bc2d649f727688e1740cc773a1c146cfff119024f0aff4dabac23

  • SHA512

    71dae69252b861f019e2d399229ecd85673951b327ac60d086b77036b10667e2a1943f5058186245503fb986e99393e1f98dcee902d28b78e0122b20a3e431b9

  • SSDEEP

    96:1IPyCQ6oISUKzvehCZGaXbrI/zvXdK+ioAaKLah3xVFBcD:1Ie6XS47aXb4zea1q

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7da57491076e2736773b50b7b5125662.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2212
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2212 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2840

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0de48229e1bce8f2045c4414004bacdf

    SHA1

    31bb521e1d06e1bf0c27e2e9e57fd614c0c5a226

    SHA256

    4038074ff7177471ffde1a613df742a63131964296a329cc9f327a30a5e81b73

    SHA512

    fca06ac18b153776e70203c0f47352338030d18a31a1b15f85d3f7fa8c9c215313da3e3b83c5bea8e8516fba05160aafe9172a3a081d74ad8e05dc977bcc83e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1588ac76d94b8a06c2b895bf559460c8

    SHA1

    0ec0df9e2a1ca0e391183b4bdad43c45980e783a

    SHA256

    c29cc35a086bbaa17ffa19d6491f8c5c5cce83b65a74fc449819f92aec5ddb10

    SHA512

    d2332172cfa016c233868fc6f1559a191b0e934b90b6d1b9fdb2db629f1d141df3c6d75b7055086ab70aa0ea619ff3c1060b4e7cae49d916b88850afe5dd6168

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    030d1e23eea1c00174358dec279bd85e

    SHA1

    f004ec5400828e9e574b832ac9112c15e89ea613

    SHA256

    f9ac4da644d69b6e813daf5de4a69c83f6dd03958ef9be4b507e6c36452bef38

    SHA512

    b6c6424153f9e66903d7c3493f162d801d176eb01cb7313d90287d5c079daa1703c1549d6465dd4e6a7a05a057133764cefbf4b5112524ecbd643b83ae3be408

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0de9e392b81c0ca223d62a0249fa73b

    SHA1

    e9c482b1ea3e20a35df574649f45131184400b9f

    SHA256

    9a904eac84dd0a06f0fddcfdd1c46f58774705d72cfa6900e9b75f0160e78608

    SHA512

    495cb3532b1015414191ff5f74157bdc7361a6f2b343d8ac7cd609018ea12c8903ce66ba1ee9c0b29fd2a133ad61ed8d64789da84c96c6622f68b572fc7a6835

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f3e16500e0e4f73e917a91a6794d558

    SHA1

    eed5977f825c7957e5de5eff2d61071bb98b8f01

    SHA256

    c2aa0c305b692e4e5b8b5a54a6f7f01cf92200f466e821d51883667ea6f99728

    SHA512

    f1b5ab986cc013fb777e34c513ef4bd663aad2320b57c3e8cea9c98b7dad2b2c01817af3615419012de12d43244af166120da95bc0e1c9b4108468b49c817d41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    578668982a94540a9e5d09b28283a0ea

    SHA1

    1d29187cd8f30a36de706f2ab77790399784dfc8

    SHA256

    a3aa127a52a23508541d7b95a42f73c14a8fa3558461b9b436d63dc902cc3ab7

    SHA512

    a7cb83b5667c687e2d7f95f8effc728fdce56b4073175766684b637bdfa50ec5af0afeb6963df44682accbf640fe380056b412433da3da604447b40b347310d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    393de0e997e59f78b0e059562f01f430

    SHA1

    3933a5c2b83c2982a3e48d3e3634d95550f92747

    SHA256

    8ef212b3d83309ff055ca8ecaaab4a34e310e76c3944cc0168f5aebfd4f43fa0

    SHA512

    1d73473b0c367ce7077eb33f0d33ac8ff987e2a69953a9d3adc30ff0ae609476b79aa27424eb6d7c9eef0310f9976424670350a9b981169542eaba3882371994

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8aa179f6515a5516727ad1a086bb1ce4

    SHA1

    91fafdc84c995e862aad78f19d93212c9778fd70

    SHA256

    df4a5ebb57e55c321abf449b36f1765cba05c4388bb9f5af2fc57deaa1d39982

    SHA512

    23daf1a85931173805262ebda9c802c89e6a3199ed31280acc98bbd112b787b6fc54990895adaafa20e0f1d2e0998bbc45829f39591385295bcd5897c2e20b0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f71dd0e96d06949f7382f47c502f151

    SHA1

    03e9f6a5a4332eeb641d7b6b5aefee1db602c935

    SHA256

    d4333d4e74f6378689d525680c4cc1ee26b78986722261d533f5717541d46edf

    SHA512

    d67d6cc646a55ba1eceeb3ed298d3dcba096f4dbaef8d806d732bae56a3047200d3ea8501584266e9ccd1975010833e530303ba73a9999a3992476ff54e7a09d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84b65af292dc5a9635baff3a6f88e034

    SHA1

    24060283be5d9720df6f857bcc7dc00a643df918

    SHA256

    51a58d0cf086d845f7626b221525709bc20cce49076039c17c58c1986f952403

    SHA512

    80e01599bfd8d33dac738d8e37380294b4d1a5dd69b8ca6ee635b017674349a35644dbb8197d8cd5afa50bb3a69f903e6949de432d26fd5813413ada5e98c7be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd75999d022e8654eccea466d8097a75

    SHA1

    c8ee262b3444694bdc6ea709ef44bb8ee191d1ce

    SHA256

    bdf0c284b7f033a863e375ab369500b056a1bb4eca3eeec50fb50ac011883c52

    SHA512

    5161a1a2d037da84153620a2ed8ed5bd6a69a23249e55e9a6ff4ef1bb2f7d6ec8457a184170d7ced3f069b0dc4e1cbed5681b966b0d96e2cbd48dc98c7c3d4bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    695007f510df4f2b69593212809164a8

    SHA1

    f8c342e4720914af4990d767501e92e9dd7a0b6d

    SHA256

    7dc7ad49aee73dde7d09214b55e124f3180eec5fa95ecdb7777d695337034f85

    SHA512

    853f4faf39a8ca5c286bdcd1993c9d0b676b3cc72de9e4097ad12ebcea13705b987fca60993af33ec817e9b27c39c71d6133d2c8b02032e63bc3e8e2734c58f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82117df08f40ec4b63d4eb3d4ced78a7

    SHA1

    9c0ab451923e970a28fa76cdb5f872d7f8315c45

    SHA256

    17e7bed6b331009e64e912abeefd22a54f87e65a9cb9b953d41479765ddbd8d8

    SHA512

    49444e42f40dd3e6284ac9f483356fd3c152c52e462ea4f0e81e9923e8ba63495078847410c5c908f997f434a7a8d1443368f6e98b27fc57bce75bc5bdc8268b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44f4000603e259fdb1b3cf1b25982e7c

    SHA1

    8e1edbfa2d4713f84ad85e157c909ea09d7b483e

    SHA256

    6549a24793869a02b9334e96e4850a798504db56b0bc872fee7c585c8ff8c638

    SHA512

    04d18e4f42b7d5d455520205e8f8924c49574fe38861216018bbf7b6a36f9695e113e1a0399b7b79c26a463af43347b6390a471358eeeb406a7383b6b2ae2ab3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f794c97e3d512daef3c61dd22de746bd

    SHA1

    133b4504a12663734c0787e128cb01d1efd3f118

    SHA256

    262ad9925f12aa3f2aa3d4d015864084bb23eec9e96d12ad461df535ce8c8afb

    SHA512

    5bd0a6a10f788a44226a7fc0647784ddc729256620b82f0fbbc09698192afde20e064bbd81961df1b51f5eb269c352df63376feb88c7bb0dd8e77e5438be305f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e69b3e9903e4c732736329b793480d09

    SHA1

    b70181a3f3f9225b29a8ee5926e2bc5362f475d3

    SHA256

    70fe62c8022a955d866ffe6497d2c54bd402b183f9ca31cdf07551e1dcba1f4d

    SHA512

    323707db100408149e64346cc9684c8e65088284a221bdcdd57a0a58b184af5366a3bbe1d614812cca797d48c5ce9d9b9dce401a89ecd3a61e131fe10c1bdb69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbd2c34779e16d4cf6aaef4d637fdca5

    SHA1

    c7a37fefd9feb297030f55b0a90e321e49fb1295

    SHA256

    5609afebcd9925e2512cc3db7f9587257b416ede5b57cd770ea353c79d2e9201

    SHA512

    1e95e04ec2d2db4ddace4f1c4d871e7dc9fe4dc93100b6e75eb9c596ecfe5c1a002cc151cfb828dbb6922d744221af03da00cfde81ab20eb47acc125dfa915ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e920b6a5da6f122b8fe28a846a37d8ef

    SHA1

    364ec2973f4e6e7a25ae8a7029c8ab12d6961b9c

    SHA256

    4f04abd22367d2750b928360c8d3070960314a03680e3ef765376c70612d76c8

    SHA512

    e9887f8708167c145444e0c69ec71ccbc9d37699a369950436b708d9c0a4c6b24bf9fcf0aaaec4edaedc9406342233970afd6069fd0863704b74abd9938798bd

  • C:\Users\Admin\AppData\Local\Temp\CabBAAB.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarBB4A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06