Analysis

  • max time kernel
    121s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 21:39

General

  • Target

    8d69773ac4de4f3b59e059f091801c56.html

  • Size

    4KB

  • MD5

    8d69773ac4de4f3b59e059f091801c56

  • SHA1

    cc7043022ca42a3692234be2698bf54987808d66

  • SHA256

    92a3138469e2ed1d9d710cf9981ea3dc0198b128511f313e734fe21db4d570f5

  • SHA512

    eae7d7048587e3820d9288b77ce39235b033f674caf9e8f2503bd1125b9b77ef5d8cce0e58a1de181f3f23c11d597820a8a366e15996872cd624bec11522b832

  • SSDEEP

    96:rf9seakGiwLsvfpFFOxUEoXvBUqsOeN0Eg9jag0MwU:rf9FaL7LQFIaTvBRlVEg9+g0MwU

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8d69773ac4de4f3b59e059f091801c56.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1072
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1072 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1972

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05836dffed87e0e496ccbcff803821f4

    SHA1

    ac7bb941106058b59ded2e7fc7565160991d432a

    SHA256

    8ffb3162a683f1a32dc4223ea2d0cb2c1ecbdefd0ac970625276236c01337dad

    SHA512

    23aa0550221ccf0041f0d2180350e1df9c83ad518bac50373bd3caad87beaeacdefc6fcf292ff778256e4c8d75e5a9dee59df3bab26f2becf888c138776d108e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44d7da662d11e4b54a0d0d40bc3cb7d0

    SHA1

    1bf10c984e893fb2a50742b2d93ae66a908fb344

    SHA256

    5889c9e1edecf53461a570aa225afd44672b1ac126c46bb9661344658c23c596

    SHA512

    6a0a9bae48666f4676a8788e0f1ecacce66d86c0dc125f2a6ed1e760915efc7be78f72e0fdf8292c821622781010168b0088e50ac12e5c5a596e8b6e8c9f42b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e38e1485c76e606a8f01b76cbd3d213

    SHA1

    6d71e5d75cb726495c07ba09ead38c82806cff3b

    SHA256

    994aac9548585f745e123a44ad5ae2c1581fdae20e05829f38ad86a0a32968b7

    SHA512

    e409cf8688eae8ab02068a5d6d1bd7c64958d7339bf6a6cb772fe95a3401be51f05cb8a3da1261898a05373cdcdb882df760f00818e8dae89f2f178395ab897d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df2ecde1775bac4c3d58a562ee18fb05

    SHA1

    6a05e9e14476ce13f92c58be97f1183e4d0f0a45

    SHA256

    f659dd2698a9e74a5f46bab44c9ccbe280f8df24f5aa552a3daa6e2f17007a2f

    SHA512

    2d9d58db5c278719ef9c08436271ca4927bacd629f18484346c495383a5e68d0ee2de9344698d167ab07eb03912fada2e41d26ce93f58ddc97a2424f807deb4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74e376cab8ef9bc790b1c0660ef0e087

    SHA1

    167c86d2dca2bc4df0181732c709bc39d1889186

    SHA256

    3d58cdccb2ca9ddf68843c1f23d02ec9d175f89fd6fe165075dd8069787c356d

    SHA512

    67088dbdaf96a32634c48d15ed14044e917d30a3029b0a30f209791d9f3cbfe14371a93eb9a0bd2f3ece9680165ba143956957db2f7b9fe0618bdd10ff6db0e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81fa6cc66f58f89685f499aace6fd603

    SHA1

    c1ec39579cd760f5c8f7464a91c7656b714deebb

    SHA256

    f9dfa0491b30d186c101ef868ff4eaf463abb2a87c5e1eb8deefd90fca70e661

    SHA512

    23970f1b91f8f5b9748be52beb7aa99b10eb1fddccd95b373e9f63090ac55b0e7f2f8e433d4c72636e72df009e5703c1ca711d5781f841364a02ce08aa86e1e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3afe6d07de395ad782b3f4061b5cd3c

    SHA1

    4f8fc66972b3c02b3b9ba1b8c0aa417334f1d5a5

    SHA256

    b28ebae5c688125d51a4e8f6e73720e9c283c9c2628204cf9dbd759e5674c573

    SHA512

    4680243a46a2980dbee44da0d3ad22eb11fb72b8ea56c85db25de539c5fa61fca2de3cdc81906fb42cd9e68b30ff9c68a14a3f6fa642716f941f485a5542b1dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0aec1d1451f672b77d2ca7de5e9064a

    SHA1

    43a634305ce428a5710ff6cb6ef74cce985d0e3f

    SHA256

    2ad1b888be796fa6be9de18166d3a6bf8e15778e84497452af14ef41ef334218

    SHA512

    10a1470906bec0c14612d4fdde359c730e012079141f2645abe9731b309dceae2e7940b1718bf87ec63438e80d6c59d5f37c5e1fa056776b66290370663fb752

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74d84900b84573d53a9b13c1e74edadb

    SHA1

    b35da9c096b43d0576c385f9df3dd9db4caac744

    SHA256

    861cfa6a4fa393f7c97d07f343a0137739b8680996eb243d7568f69d3564a3b9

    SHA512

    1ff8bec3b412c84fbec793626f6d465d64aa87111beacd4f214e24e1a79ed3ee6fe9b3fcf1dc7b81642ab6301468afa58bf68288cbd24226614248d32463b986

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    602451aa34ed2dbd6ee84ca1f9685b8e

    SHA1

    96ef586f24fc04b7bb7c682c78dda66da3216d36

    SHA256

    0136dac29b30c71988ed9436aa9ce78a479f14b6afcfb944012675acdc671072

    SHA512

    30589a07f4f19e99085302146b59cfd71cbeacfa55d01b7b9dda2aa80a964866853386e481f4ef72e33e77ccc9bff4f077441d8a79abf99c992a2baefb9956ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb45c229f738db82450975985ccb355b

    SHA1

    52cb5a037f1c073d528e6d1c7ab0ed243af067a9

    SHA256

    6189182da99495db01888ade710c4af5f81c2da3713d2870688ae2b674e911ce

    SHA512

    24b709836ca30fbc48d0e62fc8eb807d9df1ece9fc9bb6fe5b48f2fe9c4af065a8ba35ed8171ad55fcb3c5f091bc9e2438e479abe4079301ac2f2e6326c42cf5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c6eb3054afd4b8e6f8809afee7f603a

    SHA1

    de82f667154bf452d6e6a0d2011c6385ad7ad1d6

    SHA256

    f1027f9e31e7bcc7b7800a1f296a5880e75261d46275bff5298eb1a51e9c373e

    SHA512

    860c64c7cb0886ca711f95861f9e14fb82bef0dc9e221505b26c7a47b156112aca4d377109fbdbb909d6e76092b0acdcd5d2ce2fb688d857bdd8e57b9e5519ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6182812ed81dc3d6d657239ddcb9ea9

    SHA1

    f5dd3dd290383194e8bbc0b0f51e5d04df8784aa

    SHA256

    17f3a3d01c8feda293c0ca7af821a2906f14b577f1601218aef77a2a0578a42a

    SHA512

    6d15b54a4b28dc6a9e8959274ac4bbdb9be1e73321a1d7dfb83c643ac95cfb963522302be82ba904fae784b1f34feebbf809674fbd2b81e45549c6bbcbbd6799

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36deab198205deaf87d4d372d0bff805

    SHA1

    a09d0384b8aa3ab506057c7732d24ea08c3bdfca

    SHA256

    606f6738958beceab8f401768cec016cdf8467a071273581d8f1389732ab7d32

    SHA512

    540ea2e1e5c5f547d4ce6ae9fb06b2634e55ed5bb73f730de9c2e5d1ea7ae2c709fc89d0162789a64eb108106aa14b06f0ce8a3d71db069510bf67359d7933f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45475986530e430dae20b6d0d3474552

    SHA1

    b458063e7c6bac307bf9ed17c2d139764385090e

    SHA256

    6385e3eb7af4b8d1fe951b14fe02b8986a6eac76fca6010abdaabe3816da3a4d

    SHA512

    450a8285edd6aecde27db051dff5673ca0d11bb88e3d81f3a13fcde2d5c53afd9582a921bb82c91662e213ac2b818eba1e4186e461ee2f991ebca6e685faa473

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0fb759b6a78f72ba49a23d7c5362cf09

    SHA1

    6bfaeb0809add777eae66c7bee3db89e91e7a032

    SHA256

    cd47d42c94346bbd500354fcbca79885dc0205c9fe4f1e16bb7715aa164ba70c

    SHA512

    47f1c7dc26f25c1a3a972a434285a94e8996c22440193f0e49d1e8f31f13e01487a3b0981d0ab4566241733e263e5674a11eef69adcaf015f4cffe362af4c8ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c737e098aeedbcc9f1583cd2db84040d

    SHA1

    5ce91f70943ffb65737271dcdb54121e26ce3546

    SHA256

    40026aca36a1a699181e389ed03e622a4ca5ae05d8ba9fddd094015f78fd7077

    SHA512

    54e7bfa33b6f4149a9f9ffd401fc8c8c879b121eade60c8bc9421b93ca93341cb9757acbfbf999523a773c94ff0ab1569d2d154aa234b3464515554c2c8a1db8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb26ee35d48464811e623f8075e2fa68

    SHA1

    8e39b57aba65f4ec004f1aef752e944cd83540ec

    SHA256

    786ff009444f04b7ff77250fca55260558275773fa8e1bae3bedfb0726e6baee

    SHA512

    b428464231aacefda93a0de581ccf75ea917e4fd2bd75b06a1b3cb7e20da44686fad0107f19c02660a9663e6779e642a868195dcaceb96673eebbb6c970280df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    148fa39b4ca4e0f444e753ec2bb58c62

    SHA1

    68576b78103d1def918ccf4658a94f05ab91272e

    SHA256

    6c426dbd790761ec1548121487d559e7e25934674e57abc165736a81392591c5

    SHA512

    54a6cb05d8c3f7bb8126e6bb91d6c29e0ff21e8b5fe386ce51186ea6c1a3d5cdf457a929966f1e9538ca6af1436f503acc15071fd3ee8c939cedb7867aea0234

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf8c43225c6b0b48d20a1f87d36c367f

    SHA1

    c6e708fc00c81250361f5e11b81ca16b22c1759e

    SHA256

    26fbf961f11877c9fb82300363f29595dd0ebab9a66b441dd50c9a1ed5a15ddd

    SHA512

    0464f1d365d7f4b59f17587a71a1ee652b1984e55c2666711c268dadb3663cc1311517d101c30f0322f1d160c28191128f83f4a883b11ee576d941cc79c28359

  • C:\Users\Admin\AppData\Local\Temp\Cab5320.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar53D1.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06