Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/02/2024, 09:36

General

  • Target

    892bdd60bef945169dbcaea41e0e7eca.html

  • Size

    13KB

  • MD5

    892bdd60bef945169dbcaea41e0e7eca

  • SHA1

    65d2fd0c325082b50f2a64301cd1140fe7c06bf8

  • SHA256

    202c87511e9a00799ca6c4f2b353b478676bdf53991e841a64e59188e9d24a70

  • SHA512

    76edd891839ed892963ea3602c3e9b1f9e941cbd160ece88077679aed2617647680dad42710a589b4c729c70b8106d67700036b6d05c5779a123c57ff72f0c26

  • SSDEEP

    384:iBA/AEAW286PmjWTWHYOzR6V3HYoAt3HYoAcp:GODOoU7V3bg3bJ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\892bdd60bef945169dbcaea41e0e7eca.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2316
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2316 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2668

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          858bc620cf0977a1a56cc267a10cb19d

          SHA1

          17b888be04777729b5565b70480cb797d5e77e79

          SHA256

          15470a49ea6f81d54b7bbceedb6bf0aa64bdd9ccbd3e8dace70dd2d8e1bff42b

          SHA512

          ba140a671de3d47d57a757728bb31ac36059aa8685696f8d4e116282181d30c0eafd7e614896aea4b2eb3bc939841fe9cc6cd5a9f5c93d63b9c7a36490209ed2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          63e50fbb4eebee943daeb14d21477f64

          SHA1

          86cd9112bf83257c517fb9d1b7b7d00c40d2c7a6

          SHA256

          53b5aa466339991e7d73e468eab521cddfdfc5a375d01f85e7c5218a4a4d2909

          SHA512

          766df66c2591a70a0c112267a6d476118924aada3e3e8ea024314c8b149a0f2408cf041d11f31481b1860d36d0ec4e9de395a633495437c058652d7261429558

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          402c807ee664ebda43e9349b45ffed12

          SHA1

          38501c9cb621332cc486582d2ef651a688520ce3

          SHA256

          18089bfcfb4971a0dfb972f4395181161c288f125fac79a635a488ce579d0dd9

          SHA512

          e78cb4483502f1b4e564cd0a800e6a05275ab989f68c2935408df6288dd90ca9c062389d5009d9e5502c623bcf1b9fae246b936e23416e4cce2353db4e75292d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b74a77289eaf29da88e3e73d2825b943

          SHA1

          c5185a7df7f9b72f25305202ca63f64c352dc915

          SHA256

          d90b4c14502f6e8f2f37b1b5fec8f61a7b47b882993878c38262c39fd0a07431

          SHA512

          3ffd5df2c9aec8e220bc3858a28c91743163149fc748c7bc7a43b23bdb3f978c2e16b84a9310d15630914fc854364e0a18ffaf70fd0dbf29236fd683d5e72ad3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          00b538bb8aa63ca74c06f28fe7797c7b

          SHA1

          fc098d3c4e1df04a932b68677b191b4816935062

          SHA256

          2d272992294bf4f1801f4345184d2a91db1c8fb5472c3fa7408a91ddc97fec07

          SHA512

          9c051391446f5c1aa29a38e5b41468394efbd1218552cc7ea94ebf47d6c8ee7391dee34f611563e57a217d8639dac8d05a7ea70ebf1ebcb71f9c1d54fe15e778

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          53de722eb82a2dc45e570efaac3118e6

          SHA1

          932735770392749040225aff71b41f9a97a8f1ca

          SHA256

          ecf4a8241a13d3d61a08d99a124dc4a990933b554f960edb1f43b1b36f05211c

          SHA512

          412ffd1d3733fc0bfac9c431099236ea0d2c1ffe7753e859c84224c3184909c4cf9b6e4440f5d5b1ef39a2e62a7be081acb2a0bbd06636a822534b270cef2595

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          286f036138a5faeaf8df07f3245ad7e0

          SHA1

          77b27a7b864fcb592e75925d5b892c0377be29d3

          SHA256

          a2e7dd94f760254ef1e600a6af49082bb00045e4c5529e5372dd8b4b00b1671f

          SHA512

          cd9a013734fa949b709ae91e46190e243bd7c3b615bdcd44b078f2b24bfdcc61328b28f74d67eb3c6de66eb35a99348be39f66559989540f27e1e8410aa7821f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          80a9995e2a5620a721b3316bbcd50371

          SHA1

          bbef527761f56e42ae22d3e13ae3494714cc64c6

          SHA256

          6df67e46ff2df004c605189961d9820fac59131a8b79fc42211e9f23a8393208

          SHA512

          332343b531656150c4615a5589d8a45c119c25253e3871dc0130f4bd0723a3255ca28c4210086dbf5cfc450a1de4f25be534b25f8ae98c5fa911523301890efb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b9ec045ce89a02d770df60fd4b6bbff7

          SHA1

          99569e718086acb4baa49e8e1c11a54321af62ba

          SHA256

          3b48de5338a559cc35892852ee9acf03ac3eafa95a55ab72d71046476aec3540

          SHA512

          1e7f93200a62fe436faec9355d539407f91b02979f05692bbbfa27620e43a7bbe3d4edcb5955cb8eb2e49c1c1ea63f343633e897c7bc33c0a7a251729e3cabcf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fd038d35419d1dc360e5e61239bf2d58

          SHA1

          17eb8bd56ff8802c878e2464961758e3a8e58115

          SHA256

          54133f1ce90e75b7f5b6428f8c3500cbee08e8bbd8d685e0baf9abd8e111a7b7

          SHA512

          c39e26e3c1ab7d86b25f70d9677b7708e5b91951b89fee657b815eca87a13772f91fa4234a47b5d1c5aa754444416a8b8d4ba0077a07b9a591017fb961263922

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          744b47f3beaa56b0865edff59b676775

          SHA1

          16e0c7e5123b8fa88e19c07cd76f465d650515ce

          SHA256

          433b098132e17d7ee55133801fb1b0305d7fac5f1f6349b3e33aeef6f8aa78a8

          SHA512

          a31a2af7a70e075ec28e8d601ec1d40bfdc5467428625072393c394361b4a4f25c1f409d01cff54369dd1db0c5ad8a099e20be5b97246c0477f48a8db61a04cd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          03d5e7d5c2dd2d0eb5f9482b34de784d

          SHA1

          7c7b940f0ed6a2f5f645258e9e18da1b839f3acf

          SHA256

          7b7d5a0e482d9b1466c382412f5e7ecd06b309103000619f8296bb49adcc8f41

          SHA512

          197f0492a110ddc02a45e8f565d83692b50bb2b90560069d6881dd3961ab94920ed76226baa1610baa5487aa195ebb7649adf37ab1397aca75e2783004d216a1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8272bc52128706bbe505a7ef9d7308ac

          SHA1

          1655446db6d0d14659c756fc91c753130e4c9777

          SHA256

          2b2939a421b013bac8b58dce29b9ee9e1c3defc7e52e07b7160c2954c84651a8

          SHA512

          d3739fa7ba8aa3ab955b4eb57d2511c85b6b2293f12ddee29202f188a9a69721de7e3a980a03b87f739bc67b86846828584360b8e2b9844730a30bef7ab69a2b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          25856e66a46e2f990894c23b5779a9ee

          SHA1

          3c297f58b0cd3cd24257601a24d555f3c3205baf

          SHA256

          121130a740945b776a284539f2c165fcfb3551259d2229b11b873d48e703706a

          SHA512

          04ee1b3b4bd843b4c0a02a8c1967dfa8a8b571115aba8e51a9dde0ca8cd79dbd20beebd3e886565f535504a87165814e357599bb81a705cafa58e8eda5c4f9cb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ad3827c08f33e1b37ed044b92fe8dcf3

          SHA1

          e0a93a783d5ef2fb7e884a4556122d7d7bbe6720

          SHA256

          a77a8baa73277264bc8cdb514233c67f11b81c6a6a5f2a3f5497a1dc45950ffd

          SHA512

          3dccdad5db9ba7bb61195e8510fbc20dc3cc287dc370fc6265995168f7aa2a7401be91387fd17a35c35209c185b49c21b411213d4b8159d220fc63b4f09dd030

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          eaa78673c0365647befbac3a029d1b91

          SHA1

          410b5daca386c32878bf3ca72f8b6f5ccdea15e0

          SHA256

          65b36de8d8a04f3156ccdd61dab6199c6c0ef88398ea70df771cbb890f2b0dc6

          SHA512

          bfc9b605d34163784c0d2e229e116e4b98d10fdc46b70c91ee992194645f73ee4b0bd85b69ddc5047bd01904e32807427bd42b963ea8b82fa9b6609e57d2b30c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4e3c2b711039f604b28bf59f621254fe

          SHA1

          c49edd5bc9d61a74f5508d813c6385a43f03628a

          SHA256

          241926a43c4f1ee6304ec8e8fa89d5dc33d604983c9e441b5993193b05ef3da3

          SHA512

          e620a3720e2c2f05ca9d74fd19adad08fd06602c5e74d4596baedfe66f4b260c8899da312636c03c2ee53a3f5f8e0ef4cab4fb52157858756534f7db79056df5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          68039585a8f993f3721ed7a8f5d6b65e

          SHA1

          f9483ab5c6e96a99991ea760a77573b58a378283

          SHA256

          c5677eafd525788053c00a32e32d1184c26688f4b17ff358eb3a805042708831

          SHA512

          f9a5ce7732bfe8d7593a2850d967941f6331bf793dda1b8d2f44435e6c480cd61bb7b405ef0986932a8170e7d8fd67fbc9292f5e81249acee072aad8bc800d53

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ec4a2a4c36611bfa5321938d54ea20d2

          SHA1

          1482accf0812f7692c9d07ad8c033cfa7ff47422

          SHA256

          6b6cee30f03cebefe957d5735800f93c1be21e291be3154279ed52bf3978a7ff

          SHA512

          e51a398d2a33117d118a281ffbd30b881a4a76ecba907606ac7dcf03722ecb4ea1d5ca8f4e8581408857a53a6f7738162f790a5145f3ce2b9b5b4c7ae57a38df

        • C:\Users\Admin\AppData\Local\Temp\Cab39B7.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar3A48.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06