Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 05:48

General

  • Target

    8b8dad2fb16a662d6c2e943ea179e1c2.html

  • Size

    6KB

  • MD5

    8b8dad2fb16a662d6c2e943ea179e1c2

  • SHA1

    caef91eed43c346df3df401ad1239b9d42bd4ceb

  • SHA256

    dc2597dd92fc880a54c8ed66f02fc972773f2ef3f7a454c7644023a8eba1f545

  • SHA512

    ceeb23585264cdc11d6c3d99aa6946209de36d24f02facbd4bd8dacd2b6817517a1b419e7d3d75c969a4b56c180759ba0a4527ffb291bc7d15e20f849f87e0f8

  • SSDEEP

    96:uzVs+ux7rdLLY1k9o84d12ef7CSTUnZcEZ7ru7f:csz7rdAYS/+b76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8b8dad2fb16a662d6c2e943ea179e1c2.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1984
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1984 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2068

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcab685880608eca26884d9308cfde55

    SHA1

    2af33557cbe72b70a16b2844118485a79b38d577

    SHA256

    1dc5516d8dea3b13975b85f2eac1587f9faef5624fd8d82c25b346a30def34ad

    SHA512

    f2712d70008d1cb80e0ba6baae37000f68c7030b5d267a221dd84d67d4170dcadf3bd22319c845b5e1bd665bf017e75b50df01b50bfb44eeee74e009754ed7cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdd5bcb3bed7e955b36d8ccd46de346c

    SHA1

    6197964903c9c7642ad2a5109fce33dddee5546d

    SHA256

    8ed0e2efdeee17d3a315341f09fcd0115a12468d683f356e17912fd6dbe3364e

    SHA512

    00c6f1ee3639c927227305f8aabe709a0de32ffe25d42d6f252ca4ed633f7edd32c52e81a19a20f3dcc3f244f238344fced47e6c4c55fb4297f9b73c22da5161

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    688ab29f9d5ccf571eff4abc9e94a678

    SHA1

    a02643d6de3c39f196650e87638ba9297b8770e9

    SHA256

    40db02068082edcaa99171f824be8fb5c6326a319f9c5123658d683bc6a2a5e6

    SHA512

    b0349bbf906e3b49c0507fa168c4a43c126d57f31920b109a7ff0b01262aae21cb441752161e6933e6dbc47e8db996975ac698705f9e163003a37765eecf8973

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04413b060f888f798861a58675b31a9a

    SHA1

    6eb69681133af277d4825e4073129d1637990cd6

    SHA256

    2190394a32a0a764578c61bfbaccc41f19bc6c2f94e7877a8bb26f9ab00e1853

    SHA512

    53ccc09d910d92cda31aa2c83cf51f955b57d75a426074b3cfb6b905e18e715476931c29f04b81f36b8abbf852975c0c88c525ef579340e705db80060c3e03f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d1692aa12393377a55c66821ed7768f

    SHA1

    c14a04c13a0cdf4a7e3df927b7545928777398fa

    SHA256

    45a7e89c6f56b46528ed08ce083091490809b25401f0fd6e0e9ae53025cca4f1

    SHA512

    0cb20336311796d62bc533b3100ea60d62504c5db48181465f6861bfa873d1e3a6caf71a295378073fc7829c601094fcce3aee58b9f7e64ce4afa6fb74ddf817

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02fb73e0b66dca4ddf9b26b9f3417cfb

    SHA1

    997341344074dc2d89c5f5c90a92acecc4c80650

    SHA256

    627b81f96627470cd36bb61ad71b363ad0ec2adbd0df249cc0f2cdf4e09f25ca

    SHA512

    158f8ebc631178c882d54f3d9d88e6bd25ff643e4e714cc4f2e0a31952cee619ecf44ec37e20655c96257d60ee8e2044ebec321b585d298b64d3a44c1998a0f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8bc3b9cf2b90894aff629c8a9eb3f88

    SHA1

    359d6d2fdf6e493d51e3b446b771835659777478

    SHA256

    93330d3c997a8b19240885966429ad0c57ba6a784dd61a776dfeb21076342644

    SHA512

    a695061f25d640c3e2031592248168944cc838467862021c033bd43c9f00b8e646c545ae0b26c0b38274e1997a51b3a5a51a96a44e7b7c092fa14eccbc31ffaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa31c31157750a1c24c98127602e62bd

    SHA1

    1744dbb85029f10469d773e32c95fa36cd72878c

    SHA256

    256b8f36bc0b15139fce713e4715630d933a5ad8b956174650f0e11f941370bc

    SHA512

    567decb5f9b7ff9e1dc2ca7b05650b8a1d8746ada493741edd70f80ffbb10e8731de39492228f1cd7abf5e6ef189431c43ca3e71e68f1a1c5afb45f5c412936a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a83ac8178fc2535314588016141c8a16

    SHA1

    f7390acdf0a9fc0c2ce3a9c6a8f2c95b85061c6b

    SHA256

    29c32e9578fb26f82b91b21a8473ec09b94c35733b4cb2b40bafe0cb51c8ae5a

    SHA512

    f695e8de956786c86720e4a13fd109d53dd6d0bd4705913bdadfbe9847de06137aa0ce4d5859d43f0dd15ca9154dc8e283ecd4b996009dc5af0ddf590d0fbac4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2586406d98e470b553f4103949f19653

    SHA1

    d36fc66d90307087af029dcdbe57abdd498c5b38

    SHA256

    0a2332337fd967b4ea873dd64e2ae900b8cc94178c6507bffe854857c4254cfa

    SHA512

    668b110a3c923b6ea2da12b67b56f4df1896b10b4e5b94755b05421c43a19c711aac9a7b11636f970bb33f1c4e0352549055deb2daec81523182befb1db3f616

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38da50303f19a87a87edaecfbaa14494

    SHA1

    cf6ca9560fcb5192d510fc6a5e86e20acdb1f3d5

    SHA256

    a8d80576fbe0cbc4c98eac21a39fc03dca4b50fb47d823ab30be4000ec88f980

    SHA512

    7d711fe463fd3084261bcdffab6d8f560553f553c7919043ad9582dac9679829233def96b8aeb85d91c6fa1079f3b88ec667199c7974fd798a850f0f5c7dd923

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0888038c5bcee653e84b6442ed2bb7bd

    SHA1

    e59630274a7b182a10ba19576b9237a656fd788b

    SHA256

    2993f24c0aa431dc429f6fc6107e97336b43cd73dc4c3170831fa948910db5df

    SHA512

    fe054e4de60d1fa99824d39129a7c6f2905a6833d923ad2bda7d2aa80520339e83fbd9d008cc2b12a1e2f1269d95eef645ad8327c77941893c30d0f98fa2d975

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4db57dd55aa571db82daab7e6212abe

    SHA1

    ce15eccc046b135b6d3f3c599a624e2572fbf637

    SHA256

    4638d950335d77f09ccd39210740319b1e19d4f0ba688a5ec67924858096164c

    SHA512

    786895ff32930938608d0a29874bcb7ae1bc613e8382bb3fe7e98baa68ff06e9bd499b8052dd375ec1cdfb50b448906e17b8312127a6bfbd6748f84ed9652d1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2db7076e01cc6045c0b8a9fd2c8b0b0

    SHA1

    3bba4d87d31ded57296f32eb99f3156c7b86096b

    SHA256

    b90a549e1b84801fa1d0c81d2387c69a4aefce3a10de2a05e1cd32f7dc793a2a

    SHA512

    2cdac80bc6908d1af1922472d42fc707316d4f5b5776dd8ddc32f9c61d9dc9fbcf0feb427aac36b3d5192d2ebb5036efd599163d58bdf211f7797d84e7691707

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79b77c4703e931a3716868aa907e80d7

    SHA1

    84718adf57c2de8dd21659331af1c055bfa9d74a

    SHA256

    35e28ecf11e19428764c742931793faa5e53f18601c82b836a5ca3318859a6d7

    SHA512

    8741ccb368dc2dc7e5ec1ebf3aa6d4950fe994fe2e5215be4f38bbf91010d76cb613670b5014d9c07f47a714b275979535b5c31568fd208c6cb9bdb7ee759cae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cc0af6a77dda6e24e59200a580d840f

    SHA1

    4288c0f8ddcc73f94c9aecbdaa2289ac2972711a

    SHA256

    dac03a7b5bd46de090179a3fec213ade4ac816c187e3a94116067f5b812b6772

    SHA512

    ed3c8b56606a785049a71ba73119f621be132750c24c2729fdd661fc4be37b08aa700f000d32360e1b0271603e24996ddb12973b3cd026cf699a01ed6608b67e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df8a3f3e7d66102e9fd262f1eca31c20

    SHA1

    a22bd8c117b72ec10c6d2382eeb9691ce2ece004

    SHA256

    7b9436a0180aad2eb09cab15023924e1f7c358f8a4c7525de32d94c203ddd634

    SHA512

    c48c58b0eaf198070fbb295eb2acfb75f9b6a9820afe034dbfd444f7408cec4f850fa905e243f6549a36f427d264ba109e41752493cbc677d3003a259c0914b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bd751592eac3961b0e1e451a52bf4cd

    SHA1

    6aee93fa18ab1f248ccdd04578ddbb306aeb7948

    SHA256

    d869fe1bf5c6d622f8d1661ee75be21587cece968988dda128fc8c4ca842c03b

    SHA512

    c834321edd0b5e5278edfb865d007775f8612c088e5d8841005d97c3ea42c6aa32302a747e1d134091cb42b772becd0162c5bef55600b10b10db990a10e6769d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80f91ccfde2ee5d684fd614de74cb851

    SHA1

    cb7b74ac4a0eaec6d4347a8b00022394910ec573

    SHA256

    d73ea3a20eb47066804a101bc96d9c50624488bd5778e56851524c5cef23b3ca

    SHA512

    60ab2e94c838d1619b37d0945c1c01fd4f8e749a93cf9cddc3e20d6e0d1c5f7e079c107c62a04212a1677d7f8108b1a5487e97ee88426bcae1f616315bbf3a56

  • C:\Users\Admin\AppData\Local\Temp\CabAA27.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarAAC6.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06