Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/01/2024, 16:54

General

  • Target

    805d8796abb4eb94a7f8590b841e33a0.html

  • Size

    29KB

  • MD5

    805d8796abb4eb94a7f8590b841e33a0

  • SHA1

    52192c0a1357221f080d3c52f229a668e3e756a7

  • SHA256

    e5760cfbc720228820d3eaca1de06c4f86cd9aaeccce1fd4dc81ee94420afa8a

  • SHA512

    558fff2f9783a7ba503bdcca3d9bf18df6804b6d78d6e4c25be1a3056af030a6ffe8274d5475c9c9cf42d14a09248f585a4fb9002cdee7cbd29704972fca8620

  • SSDEEP

    384:zS1GpCkFXph0agVdjIoxGSgGWzdPQ+dXsizmfzm3zJNLDNj8X2BdllYKU4KcT/v:zS8pC+hgVCEgGSPQ+dXbCz+tS2Bf4+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\805d8796abb4eb94a7f8590b841e33a0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3016 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2776

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    85b04c6bbbe22968ac6763d820ca68db

    SHA1

    c565c78289ab5e5f7ea8072290bc101059e99c4f

    SHA256

    363d9c3d30569a7bfb1d34b9d6d7599ece2d256eb3cba17de8c7dcf3ebbdee24

    SHA512

    c1b2b7c09178086ff01cf9a0c57301b37e5ec02414153134a6c0de86af0b45a7ead67e92d8710b35c8fab96076f9a45b4209d42ebe1e94223071894a0dd61dcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b935aecd4d6caa72b85350365f325130

    SHA1

    7be2c426d7bacf58a65ef1d243baac56db3a75ec

    SHA256

    6ee42b034ecd7d2a6cc7c2dfb3c2006d17e44184f7369d31bcacfd4948da8be7

    SHA512

    3d1d11dfe4ce742c38eec0895566ae85215fa164da16339d56e00901a294bee3a8a24ff077de269be0c6b75b7769dfe45386cc044695402cbe5c45bccf2bd399

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a96c67818a07f2f555469db988fce3ab

    SHA1

    1d3f44a219b66aa4ae58bf389f424aa23e26c21a

    SHA256

    d2b2e324d0e1cbf832596f9379155d2b8cf2c74c6212b20f9af764e359de67be

    SHA512

    04f9f295cee78a054f216bfff76ae611df6672a0c749a429673fe1b6e2a903af8eaa158db7b16b53339f8533d247170a21f62e0f3433cfbaf455f57a2e188c91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b1cba3aeaaf7b315598235b7c8c0141

    SHA1

    9adb3aa0ede3ebfe092c7b873e88b4aadbde77ea

    SHA256

    6b88490c8f722b8c2b09f1001d732587abb6636dde3409df7167f29ccff2ae2a

    SHA512

    c9bc800104137281e4c870f70beeacd01723d748519f2afca4e33ce71f1bb26e6c36fa5d8e57e2a402b5dbc42beb6bea48d807f811a2c32be92fdfa32f3078fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b563e9847c969e2ba298f149f7b645d

    SHA1

    a5a5ab4654032eb893c6bc3308fdba9c7b05185f

    SHA256

    b1acb65a88c784f0798dc36f925cdf0670f87d1dcb8baa24ed78821149b2f74a

    SHA512

    963fcbbdf69bc451f5ddbf8a7cac843fd7247e4a48ef219b2bbb12ae89e666b3eae8b9421f61a9d7fc3b8f93b5b24d04be319e774f511a67e493f581a303daff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c1de1f723f02094a45e5459eb4de2d4

    SHA1

    78977549f6d822fd369562809e50d0306aa8d805

    SHA256

    dcaaa81ca6e2d1b6f8d1c47b8e20e03e4676cf5e6a4aafe55cd1ed58da953995

    SHA512

    3a55042addc14233dc29858a9f81a65ac688913dec256af02f4be82401e3b3179c6f0ec93424a8a833ec424526d079f1a3b45e0ddadcd4d9ec601726a9356ed8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e12cfee4e023224f74f19567444352cf

    SHA1

    89045e6e27541f57535ccc5b01348c45d016c0fc

    SHA256

    2d4a0c270e6083df4cec4465ad0d6f6596a038bc85dbdbf63572710474721370

    SHA512

    5b396ce5e8072b28e2aa2642f072f534b28853dd534244333b3aa7ec34daf1b751517e8f92bab5e25a6dbef1d61e3ce3c83d5c8bd2fa00fa0e21fcee217f8552

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ca92703b9aedf23a2dc9dad4b7e9dc2

    SHA1

    289b29490621b1bef661cecd4a061b9ca986910a

    SHA256

    b54bfac9f463b7b70dcf3f03ce2bdffc733b6df0a4e837d6b1361ee1275b2630

    SHA512

    a478576c15f138b16129c92fdee96cb9dc224d3cfb9b11b7a14b05d49b93c6fc05175f595a8dfd1b32fd0dc08428061f2e7e649085a9eccf0d0c49bd2feb1073

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    482fc4b7e16d5c2b8661a9ec030de5cc

    SHA1

    2bb6f98f39f88ede17f007c33a7f32e789c1881d

    SHA256

    5aa0c4c80aa4e2a4805558026a21d34613a6b6d61197da3b6a691fc42a9ae2f4

    SHA512

    1be6d8f2d7e79a5312c712ee4a0437805351d7235daeaa9f6ffcb2434b33ec269b4be9b527c4e918bff62265230f341e54532625e495cfd60391a66251992275

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    252d8e21c5051da093ba4fe2284a61bf

    SHA1

    49b145634cf83c4f11eccdb5132f1e24238890d7

    SHA256

    449d25ae90ad019ebf9c7019f09c2b8bd60a588825a00312c6d4308b56e67d8e

    SHA512

    eebef5c9f1136049c05d93ed5f9591dd3033fa933b5a1c89c157c95ea5ade8afd006c96b1e4e2a522395fea67a72c407ddc17d947c7a446e7450e4039a68dcfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ed185a21ea99799a5c3393455b8a4e2

    SHA1

    d9d8803b5f774545524c1f3b0289a1c16f928298

    SHA256

    1f3cd36604bf8779c5be2442d4dfe6e18d5cddd8d80f26e3d9cd3bf36707d198

    SHA512

    7795e57d2b76df31019eba032eabd31f2cba060152787a2872d2c531e4debf33a21fcf753fa4f4094e4da011b6837b4a0009f6ce2d091d7f2ac85a477f7b8edb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c235356faee6885cb092f0f5d8a70887

    SHA1

    f31914eb9f63032c22268c5fac474328b3b71fde

    SHA256

    0147aba8f82caabcd69dbd771f9fb150c68e4c4a28065457b0e664cd1e11f5a5

    SHA512

    e8d30b27a5c7908324d374bc5ae636d24ffd4a8589a3f5060e1d0fb1953e805fbae78aa709089ff47401e97a82f5fc9a56cfa6dfc2e2902087fda53e858f63c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13cd35508732ac595bbc3e40c152ee32

    SHA1

    c33bb82b155e2b3257021e78f5ac803a45ac11a5

    SHA256

    dd3fb245d87c182740af629f966db2bc8593ca292179aba8b133117e019ea31a

    SHA512

    c509c8e6e51f20d2d7beb57970bb1f6c8d0575533a103c4336065a4dd69f4b89864aa5f54e7811dbbbee5d7eedfe68f5fea45a25f68c4250aa484fb0a7a07ad6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bade8e5c37a6da5ca0813783f47bf835

    SHA1

    b092cd8464720637933420fd29b5f59685cdebd7

    SHA256

    cffdd533fe1599d4ba09d4a24ee625de57e20e849a91ec6332f235a2ed0f2a5e

    SHA512

    446df53558bd658b6472900888493649fbfc2c103671f25dedd81fcf5b54ee7df83d6bac8b8317fc0eb6df32710d5b653e15adf14b8f973ca237f3addf76b42c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6babae736287641848a866c9030dc548

    SHA1

    99be59c286fa06bef86ad892c49e9021d835d88b

    SHA256

    6784ba303ef46a71a3c0b0a8694f72fa002fec2cbdd08354be039c083689c301

    SHA512

    0f4559dbf873267836fd4531bd7f8e38d13de0d251de86bfb08865077200228fd1d692c7fdcaabdf23ec18ccf246bb2f180dee895291cb5ee9bd2daaba3bdcd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fe62d10c831fdb5914147f08f2baafb

    SHA1

    1f210c12283830b3ffba030139e9d18d263e56cb

    SHA256

    2663d5c7d12c9f65fdae6a620c63f8c558d41df563248b59477439a202d2cee3

    SHA512

    490153bbdf3b2766bfff3049610386bc32e086e4f04295ec7c3e0c19a83507ec477bc96e49536729fb51c40aa3115e0f00b7cc511ef01d1b958c9da032989a74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f61600db073c45b78678bd6b77d8c24

    SHA1

    a03ef4dee9dee4200dc58a3f26287fd561d81fdc

    SHA256

    b9a7b652b0a8d0d0c1a73f1e707a100dfd0bf6746e41bb5e76e54501b8345328

    SHA512

    c77f6ef964b529d9d288f9358dc536ffcfdf0d77877d4723b09b80ac9ffcae8b431cefcd05dad0745393714a98746667e3fb3e4a40a21ab45213a50c13b40a3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe43abaab1e5082c44fbd64c18702868

    SHA1

    416eca5971c7b27e3c57c36035736f3655c6829c

    SHA256

    c8be6a150f9aece7f609fc14b4068eaaf26495d6b27f8df0dec2b8c76298629a

    SHA512

    a89a5f13cfc62726e7617a4c7191b8d611ba004f96a90ee5d526c32a7dc6112f752e4eb6bb8bd2a8ced058f433cdfcff983a8fd1d26c328db06ef9c73a4b9898

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58e45de9761a069871aada09349a819d

    SHA1

    9edb1d51188a6d486af0a25711743e3b4eb6ef2a

    SHA256

    ea7ccfc7090a3935a3c3c25a74137b032d286f4c747168b9e2ebe1e3d20ed45e

    SHA512

    264562599f7922fe95f950e58f29a505a6e28ddb4cc61046686d82bc80e2978b2310b614e16052f3a56b9c3f74f738bda3e12ea438d5b320805a2e5dad54fdc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97640003a54ed49b19a1aa608d6901f1

    SHA1

    bf5a1d9a394a85fe7dd202fbaeb358159b9691b4

    SHA256

    7319799616882ae0bba816006468d719acb7db1aa0e8c4a560be1d3b0c1261f7

    SHA512

    020cecfef6a3f9943cd6896aabf092c281698d295b62aa0863a7625474665e0de18eafe4f85379b95628c3a2df89b926ea2d2c172dd4b391acad3ca5b443fe9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    d790b737cc438c0674b87d424a27a944

    SHA1

    59a34b93e1a2458cc81c03a058504b4eaa81adab

    SHA256

    0911a138cd6efb19fa5d1cc37130f4eed89063c3ad8ca383bba075d704c6856e

    SHA512

    44baedae57a551fec05e8db7398771d67a5d2136acfd441be433b3920d0d936832e89bcd20e36c44a6a06f0f237232c2abcc2bf5f73a82996cbd451cf9b5d698

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    97e6b140960b0981e4bbc635dab4d775

    SHA1

    b126ceed030107422d3dd2ec17e193b2bb2e2459

    SHA256

    0447d49bbab613d44b4a20abd3e4e025dc91c0314861f16cc28a0f47f7b870ba

    SHA512

    45afa577fbc4ecb6c23dd928ba7bc51962deb29f6c563b1f5c6d76d3a3bf5fd2dd93a62d196a1d1db48f89175be5410626af228939ef296f626f689243b0d264

  • C:\Users\Admin\AppData\Local\Temp\Cab346B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar346C.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06