Analysis

  • max time kernel
    120s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03-02-2024 11:53

General

  • Target

    8c41ac05616b79ff5b65a50e3fef86b5.html

  • Size

    110KB

  • MD5

    8c41ac05616b79ff5b65a50e3fef86b5

  • SHA1

    3a650ad296549cdedf3461ce5f6fc24749b7a08c

  • SHA256

    afde33ac38ddaa33097eb4fa1da2d7e135ef8d6ea85c2091755e6d76f4789e3a

  • SHA512

    a9e09f8ef0d68e2c6a79851a5c4ea5515856ee2d5bc10043183af70eec6fb74d4a0e9887d4ba5e7d063632f05ead003d960cc4a988624713668bdb41b40701ad

  • SSDEEP

    768:p497dQHovsAFBAXKfQW0zTrw00GRTSyXaO2/DeVCclIG2uErCWW9EAhrs:p4t/BAXTG/Idn2uErYOYs

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8c41ac05616b79ff5b65a50e3fef86b5.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2544
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2544 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2860

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f12fa138976a4d8358c1a7d58fe0fedc

    SHA1

    cf20dbd0e559268b95b806d4bd2cc7b4ffea984d

    SHA256

    7a72feb5e73a225a7e903e7be097e16b43c7813ff29a1bd1e05c05bffba75291

    SHA512

    92c8c070b83f5eba9f23e4e1a74d973864b4f72ff6a34621d2d6437b5290724cc9c1b5e6c8e4c399e31be7ea436d640ed78cc0544655fa318371a8145e992887

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b06f0a57a04b5538fa78e879d79d702

    SHA1

    54faad370dc3e6cf6788279fbeb914f0502a3976

    SHA256

    8be045cd9b36c2ee452745ff56cbdb4c327631411a36596b708144617ad84d87

    SHA512

    87b66f37711e71c4211fcfa0c5d11918d878d66cf7a30c8853ff0dca0a04324deccd563e2c122b097dc8d45bc71ce6eda31c583efc2aad8daf3c15d3a9a38a40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36c18af3a7998abf1497c3acae0daf48

    SHA1

    74315f9d660889221b1437b577fdfdc440137d49

    SHA256

    a09473a300d7bb4b0b37f4d90640c56dcdbf8931242c549609a30df2e7ae0ab5

    SHA512

    baa835ff18b74953539437a0ad8e3d4b13f8f944acb7d8528ce3864543642f00f625bdc2ff8a378cc960ef2254e938692b8947541f3b791f6bd9092ecff20782

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae1ecd46b7676294ae2dfbec661d91f8

    SHA1

    b6dd2747c584d68728004da989d34e7925276b92

    SHA256

    fa0904f465aab063cbf049c0d91ac7dac8065947233d38bb74d07db08e644c8a

    SHA512

    601db8eecff7ac52dad79773467273261331436df6f12e4eda46ef81a991080b2f36618ab243d10edfe0569d2bd0fef1480ffaca39c49650467d2da7296fa4f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    029eb9a3f7da631e82c664dcd358e5d3

    SHA1

    8f31781ce9a2cbf77dacdb6c393cfd9ea3bb5bcf

    SHA256

    ca57eb26685cbfff1057ce114b80d1a721172409203c56c7fc3dfd0170802cc3

    SHA512

    8f5d84a6db886a6671de78714d8d8339908677c2ac9262e43bcbff69c3fedc6ead280be832e8176bb7197b7f468d5fa13a62f1c20174977db29f6b3ea0a82811

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00700974cea640f1636cad31631efa6a

    SHA1

    b8a266298da49ddbc5ebde49e54fc98c810760d8

    SHA256

    be703e5653f58e8e9b3ae6f678f3fa1b134d1e1e36952a3847b6ffa1924b0050

    SHA512

    9961feb85a3e5b8cdbbf3584d45a2ac56b46e9bd726ee3505ffa0c014c9cc56ea6d32d5aeee5ce1f4cb18864e924da0f6eb66c4be76f042a78ada3b381754f0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e618986561fe70df6173d661c86744e

    SHA1

    cfb2e3691dd8f34f9e18db6b1ac5f4df11eaca5d

    SHA256

    0b6df206c59cff5f837291ce149cd10a0dddbf6f23000741c48c4b04b11ee367

    SHA512

    adf0663b5b7ffa925c5a99c7ad0674ac107a770d40cf67b1b19d5ebb92f1b12ae1212813ce6586a08b58c38949160f244cffcca7a047a8103d74d11f7830b098

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbe058f6d27759db66371add290648bb

    SHA1

    17adfda683849380ea2b5cc8bf1e604b1c74ed05

    SHA256

    f2b1df0c44d68fec8d43ee837cc81a4d37fc88db7bf6d8ab337e608e5b0ef530

    SHA512

    b542cb9db9761d6752ca7792c321c781baa13f8a791776b1692e3af7f1ac02191915cf36483fe89cf1123394afd8296a151315115f60ec98badd59b3188b98bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a74f51afb6cc78ab1526e7755e87944c

    SHA1

    c2c727c61fd8779f97cc67ad8ef1069b55027f7f

    SHA256

    ce46d3d4d14fe57314065c67b7a4c81b3111e0b82531c830b2db1ccaee0df850

    SHA512

    e2e9eaf17ca2a532ba848963a7f63313f0accf296a201609e958497055ad1238efd9e90d9433b830b86d7b30b45e7dd734135d60d603d785e64bdc0e58aead09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bf181b5af99763cfb16b5be8477d63b

    SHA1

    fb1032fe5c4070c2a7d5d451d2e1e5a33e488420

    SHA256

    643387a513692e9d9b42faecf714c88aa08d0319247c121bbc6af288574b2843

    SHA512

    64fd98a5c9a1e86597a4a02987fdbe2844b8a40d1f389a79d36210d0d2f233bb348031de94e272c59069beec9a202a46b12deaea9eb036241502bbec2e7b3d8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1afc869078f04e8b4fcfc6a4763b6445

    SHA1

    c6ca4ab63defdf6d51c2b454b2a07c3b7cfc0008

    SHA256

    1fd3f1611161f94f9e7af826d779c397a79cf5fc21c1ab1e01b72db7c1f865e9

    SHA512

    0b13f03988b70b3b2303ea6f482092e18ab1b7f6e2c5a52ae2b26dfd3c431fe739bd0a9d953e2702b4fec18c8084c3dbc03a5f1ca8415866bbb4c82320f3f441

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b10e42d0c4500a99114d462df6af8ca4

    SHA1

    94f708b516574f46b381257e7d0aac23a3cdda44

    SHA256

    123c4b9aa0c528646150c461fff7ccaa20ee7b43e460203fd359d987b39284ea

    SHA512

    d7e8a31c51b75601da1b9c7e31f052a6d5f2336b9eb5e17c8ac5cff6798c0c515eb6b22715385d23d16c0813cc2939c522131406e86f58cdfb4a92e8d5f64037

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85526fc7ac3fe68afcfda6e517d120c2

    SHA1

    26168b0ac6733b2a6bd594cc72cbfe2e756394e7

    SHA256

    ceb28ecdb03763fbb0b8c815abbc729c72005a09f7269f48247339aa566de23b

    SHA512

    4a3cda70d837ecbd9bcb9bd9af8bc26256b71c75984759730dbd0228feb450c663ab2bead398a044b84ffe39d40c6978551913bcb98a025b0376a401aa16e451

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6da2e005b5b3fbeddf3a6f03950f98b9

    SHA1

    ab1513a2b5dd14b737a67c295684d8804e713cc6

    SHA256

    c987627e61f4e407584e9a8f4acb4853bafcf7c54795a89b2161c380af82fe12

    SHA512

    a0d0098b0fc29608debd7bc4fc88ce48e6e33a4c18fb5fa05a0ddb9e986a144246e7e4e0ea5e4afbe9c69b68e077b051209580640c9937e81f15978ecb38e9a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    595638a9ebe07a0704f0a10f987b3407

    SHA1

    4ee91679370d07febaafad37973c53249d73655f

    SHA256

    5ae94407763553ba33c7c95c8544ff55e3ee7e35a4e31cc2132b6ffd60a11a14

    SHA512

    d00af46872b5cf26010b9e3c03226de1ac26c505e5e13cdc8b1d41ba882a424204532a4d4a6e10780f5c319fccbbda56ce76e379fff23432d7bf1f41c2565140

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c21181167018abb664c46719d5f7da9

    SHA1

    5b9d60488f781d55ddc38d9a941911576da34b6b

    SHA256

    0adc72a2054e79cb18f6c709ee52d3238c7ee832cea97d21177b212838188ab6

    SHA512

    2f0ccdae91c3c0cb0d724d101c93b59dfeac217d7a8c99ed5fd7f6263445d88d3f474ed3a62246202a9b0a4b3fb7f31838a3224cc4fe8389f6d301f9e8fd29d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5c5ddc3ec1b4684c92e1c30223ce30f

    SHA1

    fd2482617d8f083b6cad14a54937af0ad15604f8

    SHA256

    28435af1c045b8bcd754199767934f08b0e29c6aa4d901b2f2a709182fc777dc

    SHA512

    1bd70be419383764808f05ceabdf12d7a0465c00364693d136e3a0dd0f0d9c85c6036c97083c49fc6dc9734c2f991e84479dc75fe134d88263368e3834bf227d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13d72edf6265597e3f0ab3dde77bb6bb

    SHA1

    ff436ad7bcd45eef1935146686c6308bc2d980e3

    SHA256

    725950fcb1a9f9cddd9404a4b098882263e0f6eae4981e8d6c175a1869ea4f4d

    SHA512

    409c529fda785609f185ada139e261bf229bb700aad19b476dadb339fd4abe3f14744e4729cd543f8450f0dc73fe541fc0468ec531df6638868ea1f64bd4205c

  • C:\Users\Admin\AppData\Local\Temp\Cab7E18.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7EA8.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06