Analysis

  • max time kernel
    136s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03-02-2024 01:07

General

  • Target

    8afede30440062ca84bca38ae51ea5c4.html

  • Size

    53KB

  • MD5

    8afede30440062ca84bca38ae51ea5c4

  • SHA1

    f83c29157206eca1fa403519f4e973aacf525247

  • SHA256

    e4d6522b49f207f350578ead18a2f875594a14f9172e3e8d18b093fe2064bfd4

  • SHA512

    4e042e8cd7815494dd855332a77c9d07997a45df4b2f7438e4fc1575ef584b065804d29d7a245f47cefaaeb020c3274ba6d5077d9ca91e3acd03b26d5c31557e

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUerunlYA63Nj+q5VyvR0w2AzTICbbWod/t9M/dNwIUTDmDu:CkgUiIakTqGivi+PyUerunlYA63Nj+qI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8afede30440062ca84bca38ae51ea5c4.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2908
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2908 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2764

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27d61d14e057e49a2a96bb7b4d510974

    SHA1

    cbd6c657b0b32323d71ecef2622c9bae4b3601f5

    SHA256

    e222fe128571a7e50e1b9b0c767fe133d8481984a5ec9937f96303c05ee72a0d

    SHA512

    6ac805bc07d51f30fe7bf161ac14d74babb398ea2a06b1967be63542d676b6a6db4a492770990d2f864bc8d42944f9f3e3539bb1ec3165502b0500ed1ee52009

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c41912c19a1e93f1aea2877d4ad2804f

    SHA1

    7046260c86fc8c7db87b235c2017ed078dd785b7

    SHA256

    2e8f5944abd226f7b24b123d369be6f0ce5f6ac887ddd8ea6a9f2151f40bce6e

    SHA512

    f8e2a724a8c1170c4f506c9149beaf4d9ece058d0d04e8904d052fb18dd3606cda9517b94c6bda24bd1d90f08329d8bb32f7cb543d2e6e3e8ac969fb72d18f4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1098e6e859942b086c062a2fbe92acff

    SHA1

    d1fe5803c79a37b68881271dd86f008a459d1f98

    SHA256

    4ffeecdef4e78e1036706a91fed667efd213192be464c0c1e3ea35e4635aee34

    SHA512

    f748452ce5ff4df86047923b28aadf1e6dced0827e8a37960c1183a5eaa8adad4b456a64a8b6fe3dc261506a79046781ff152aebc0a3ef70d3944f7f4ba149b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19f0d6b8112796ba56b37aa41a3596fe

    SHA1

    9e02e0678e9c252f7ebcde2e1b988d486283089e

    SHA256

    de02548c0d0697aa4a625ec9d94b2adc4e779107c5dae8e1f2744d48a2cf17f1

    SHA512

    24b4dd12fa4fe979cbc25376e01ad8cf258f12d7625ffff306a4b4aeeedc143f6659633c1ba256af5e322004b931f790084c5c3e46c2773e92e995963f637ac9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d06d79dfc71fb211038059e71244893

    SHA1

    4dc8488d45fabed36ca9abf2326815e1aac274c7

    SHA256

    3d51728f7d1b8d973bc0c0d33b0d1ba7693df77625d149039266b05435abd287

    SHA512

    06c2a0926c14505f52ad21c550dbe74ad19b2c4b54f81cc4b05e7026239855526e85f2be7e3a2393335ce854c33a38b98c505808f2773a22fcbae9d73ddfdc42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a08b3b69e0c71ed7bd6c5b188744c995

    SHA1

    3a92112052eefb70e98db8414247aef239292157

    SHA256

    74177a8918da5fc27f8863993a9dc2a0b08c10ccd2b5ef5676337ce6fbea6a20

    SHA512

    b89c7d1a0185b11821d8d2569e772e6681df2b1e1040b74f20e949b3dd8e02486c3758ce5d19a67fd75a15e67a3d098250e7e897e602962422175b62ee4ca460

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ac04c0ac144e107e376448c6075b134

    SHA1

    74dca86dfeb46b6f5439fa6499cb8964c219fd47

    SHA256

    1060e310c547cf941eda558922446e7db8ed86ef3c7fe05c5cc5c4e022f438ec

    SHA512

    3a4ed11b2ce08fdfe4bd9cbd49143e0c495a0633aacc88821ae4a2cbf0872d96c39d713be8b86094324ed28ba8adb1a25aaea7e975c2d3ac60943abbca328759

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46802a8927457ce175a6448b1d39aaa8

    SHA1

    44d32da804f350ccbba60db26218b3007a54f6bc

    SHA256

    4af12592246f973d4d15fd099a29657520dd4cdc621e209e7b95fc9afe914c8b

    SHA512

    af8696abe39e1b02235fb4451e4c3ab5f5a4518617f29739afca35fd53569307a41531777b39c9e918ed08d77e8bfb610a97283a1b504065012c392a0359ab3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d1992a39e12359aa949d7caffc1b096

    SHA1

    e0663a558bce2e2ab99ab302e166dac24e077a83

    SHA256

    356ccdae9b2aebf30203547d132141b573a277f266442517dc9f677faaffdd53

    SHA512

    1069d3e3b3bc9682b6483a11ffc6f3561ed79b7a6c355e96a0a46f19ddd4653d9ceff9a93f95a26d615dc89ed2cdad68463900636d72bbaa702a7c30336e33cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a881a4de62b3a8db25e996d1b6476ad9

    SHA1

    69028c241c0ef2e783d2059397eb3f6d6da22e8c

    SHA256

    a995414062ff587b9e61afb0e600e601ad30289f517c048b8f2fb96ee9ed65d2

    SHA512

    b87c37fea4da59cb2e6c7eb7fc9ff56f7d91b37b12078beb6dcc793c3d42aef011470b94f5d0416c29c8d1ea8465ea17e18a45dbc9aa0da042a278b64575b7e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b7106e995a4881671d32b9b9b231967

    SHA1

    29fc0563e3870e4d5ac14560134b74881939cb5f

    SHA256

    8ad4596aa0ee3b4934e540ec85ecbd0964365e7ba90f8b47f08edb84b9936ded

    SHA512

    b7d7e5fc5886a8bfdd300a5d652e549fd7ed82c1141e01ce2746ab15b8621fab37df2697f9aae39082fbe946b70620fd23e2233b717eef13f515140c489dc680

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b490be84c63b4b59ca467a4b84cbbbaf

    SHA1

    6018bcfed69097cb6e477c0b26850a97ac425a7c

    SHA256

    1acdfc7fe2a1c8968aa975b3f41e9664dff3fc2549a8891f72acab689be48d70

    SHA512

    4e13546351997a1de3d0cf53d81f43be674392ae767f14e6c841b0705b13d79af6a0340e1891e5403a80e83d892dc60787757f1346e2f853442acc14dd73e825

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60c59acb031e15d02c627cc3121e3ffc

    SHA1

    52b850b3f6e4c04a4ce283ce99b46944d3e280af

    SHA256

    7582c80d8f1bf32298ed954db798fe1ae2eb359690a070293fd043e4a0865bef

    SHA512

    e97cc1092b412ae19ce796c35093c7400a041e8877cb0e4b7148b35e35003b628360a34b3b6c022f8aeaf7c09aaf1bf5ddf07a29c89669b891e4a3e6884f9359

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0816df1064664e0770633268eef963ab

    SHA1

    fa95ebc5909ac699015bbe8ed48d0a0b4da413f2

    SHA256

    c5c8a58a1bc86432ab88fadc1b8dd4f1077e97feb5399b1f27c154608545f324

    SHA512

    99931d02c8b33fba096d2d9532b52a33c8c2f54c3a625559b732351c5a3d13d0b2d1553a21845ca974239a87c8bfc650292b77d12374a15f600df15b0d9276b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4318686e5d495d6849b3776cb6aefcf

    SHA1

    056a341cf549f1b7bb42915dfb7ff24c0160c589

    SHA256

    eadb5d6a190c4afae4d25ab34b08b4330cb2c9e539436bdeeafcb9a6dd372a1e

    SHA512

    5251cde5855783bb89ad92717e52622ad0a51307d2cd0709c0897854f45ac404d5883859cc4ca55eef29fb6503445887ec6364997688d8ec082139bf65b6621e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2040eb8e52252bfcc93fdb2c3b2df400

    SHA1

    ff19078016927d146c3a413d8eb742b1be3de3d7

    SHA256

    a24531029c9673747e16a8cf51be685f9c42db22dda60503ec43d35d97c0e097

    SHA512

    9d9c0c3523ccd75d997d48e2ba83c658f0a88176af55aee85ee670cdfd184303b47b95a131dea00624e7f0123a81ff5f713dd5859e5c31585d45470d1bf36b0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    553e0ca14d1845e4f2da65c4194d73fd

    SHA1

    9ec3408f293354836181a2543d831a0196983e4e

    SHA256

    d71e4d71220baa8eaadaaf81dc02d63aea33937bbef7ddce88d723bd2983f982

    SHA512

    6e0701721d03f66ad1b142ee5961b305452f9f703b8d8ec7e7f00c8ca963a01dcc81239ba80d3b333bcda4abe752679133dbd538e1ee6a8de03716aa3e1e0d0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25ec4171d41486e672dabedbfcfb290c

    SHA1

    37cdcebfa1a78f5d5ff6b22e5e46ff020ae65d89

    SHA256

    ea568ede3350f07aeeceed8b6fb91279f52f8b6c5bb51f570070f6816f87ce92

    SHA512

    9327002f7e179dc3dec3b282c92b987b70a8556e7cf487b39d94f04a9e04010698fadd7ee4879b7ef64ac8434b0ec78c074499824d004b423214ed7b89fad465

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d52562903ca5c9733dea7ac4a139313d

    SHA1

    2eb24dcdb445a05b239dd330bdb4293a9c7e1d77

    SHA256

    a2d45e2a08033623b813db5e57413dcc959961427a03fbb392ab3e26a63521c0

    SHA512

    3ccb51d87dcc5212cf3db9b5c913103bf4daf7074b6299a6cde0904b137d48a75c12a370a7a158bf68da904f6aafa69d45d2e5e21f3650f04a53e162f423051d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HJ0GGVIM\glossar-js[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab84F9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar85D9.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06