Analysis

  • max time kernel
    120s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 20:38

General

  • Target

    webweb/Html/Article/2/20071126/News_100.html

  • Size

    25KB

  • MD5

    8487e888b5a2eabf4dd536a221afb734

  • SHA1

    abe27fc71310f1cfd6c0637b5505407f47b1f497

  • SHA256

    d46f7b5f1ef71fb9c99372889b8e27f615d6b95f238d8f744ac6e9a8c5ed4cfc

  • SHA512

    9e6d2895c158c8621da31117911dda81866ac504aa7623f52bea6bc1d3f98a18f0adf47480bfe0689e3b77d1a341eb5e5308017863b90169fe4f842699dcd273

  • SSDEEP

    768:YnLUrrhQNglGS5TEkbLR4OWZ2yqvLhMFKSdDfbbNU1+OVWAsPswUud0bDRu3uzpJ:aLUrrhQNglGS5TE8LR4OWZ2yqvLhMFKn

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\webweb\Html\Article\2\20071126\News_100.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1664
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1664 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2200

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b9bbd0bbed831cd470eb31e176a102b

    SHA1

    4462f68ee7f7152779e88a272fc9c8a8945c5620

    SHA256

    a752b0ecc37d4a6cdee2134749144a2f73a1fa409a443f33e324c75490cf481f

    SHA512

    c9145c7258cead46fcb2bf02c4f2c0e206ce66f7dee1e7fe58c3f89bf79b6397e293e0dd3638dbd257b08f03929d6d3e14bd426a24b9a1948f7f8fd039edb7ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1034112d24e1bfc8ed83669fbace807

    SHA1

    d7693e9f60fe31a1ef0abd94f9ca72c73c0b865c

    SHA256

    e6978994b161ac286d323fac7b6767af1baf8fe88aac1572f74311d49b0d7cc6

    SHA512

    4cd6eeae376dcae54a1b4d2d1b584520915e79aef16773394d3a01cd09ee895b55594eecde38f1125ea272bd00ad0dadfa71ab3801fa9a7d7914188fe5d08898

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff5594808ac5248603a94d103cca24f8

    SHA1

    991004c0639dded631d8545f2bbf4ebcbf3c90b4

    SHA256

    1cfa6e5897ad75055fbd5b49ee4370678a72caee872b9ab49f91009f1bcaa29b

    SHA512

    e3426337c0f3036b101de07643f530e7f7da832f831de22cf2288ca759538a4440039034a37c4ed67d0d0c444fc12ef128e357cc670aa87c48bb972a424f35b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bc5a111ef5663c6d8266efefec5e444

    SHA1

    9f1c572ec34c613d9cd65cf7bbe1fb41b9e08cae

    SHA256

    a8bf14ec60584f18144ffcbcccb0592b4c3839f31bdc602b82aaab4600cb4e10

    SHA512

    a0cb6c9c4e66c930ab1dc6c0958d017bd1b96dd71ed8408ec062e40b922b104b7f21cb6f044a2b4832928fdcb659b33858a37de855b010f6335cc7ee11893803

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b59faac4e820b316a8250d189c3bed7

    SHA1

    60f31095965f71eb32db0a4dae89b8b8ebc36fc8

    SHA256

    0362edbdf503612b086a3dbf286de654e5ffea9645929a383a675934652b1401

    SHA512

    6bc2793493e35d056f894bf2415d630fa475390b5622afcd0d18c1cc51aaee4b77977f15acda6002f5c60190f8eb7488fc3a081acad82fe56903c889488ba387

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6054be084b1d03bc469442740070f200

    SHA1

    bb6ff42dda426b88c9fd9373c76c9f2abfd54c18

    SHA256

    daf0cea232927f35efd8f7545e3212a36d3299644837b359f0a1b733757b2e47

    SHA512

    21ea7c8bc22608828cec5897e40b6055f261282183d8ad5411960b908748802a3fdc163ddaaf4c734d02183e9071bb8a1eabde1e63172a8b02b1f313578e5bf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be04562a3bae4d8c542da5f1f2914ef4

    SHA1

    b735c50f45b869c24cb36058ccf5d9c7dcd6db67

    SHA256

    aaa41e81f7564e959fd98ff43c81712c38bb7b6f34bf398a4c73ab9cd2123030

    SHA512

    285d5c7f137d95cff264ce1d028709228133933cf8ff575cf850cee4351da71b3eacf0db439dda3900006225c8aa8a0e6195edd985728525fa2b03c0f158cdc6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d7861e46514120ad5bcd48020dd924f

    SHA1

    6c395cb98e68e00d3a35be30ef2334eedf7d4d78

    SHA256

    8fd2e35568c7a9482c747e14cca03f3bc1fd50b977b5efbcb70a6cd8a65d5e18

    SHA512

    eefdcf10518b7d0ddf4d4716dbe5ce895f6de7785ed1ff6dcb3cf0f6a0d7f5cceeafaca19e36a4266c9ad10aa18e9c6d639d881d5b557602e2f4814d89cb6401

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5f3406ccacb013690f60a6c0e0d8f11

    SHA1

    7b9b1aee99308e8d8b0b424e04c123ca469634e9

    SHA256

    dbabdd64f4a3578ec3fe15c363bc607ee9f2d802d7c41cdcf1be3bca54c0c97a

    SHA512

    edcf465ec7acee2850970fd7a8c43eef213c92bbd8bfda1947f6e42e57f5df57f91a3e4716abb64643c60bceae5d83065275de86bbffd50d280969d6db7e6e15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc09aee0ca08307a4ea882ac2d77b411

    SHA1

    643bd1f851eb0ce9399102f40920206ad0079d1c

    SHA256

    d81ca17dce819671e053a3990e69d78c3c347f7f8e6ba2653e7a8eb2b92a070d

    SHA512

    b0a78803f28c5fecea3da353ac6d334fc802475783f07596d20a02d17248baf2016cfbe43327ec831ea8d78a669c0556a443283ecd61ed792cb257036e9c8d90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6dce08c2c455c47cc76b85f9a281daf

    SHA1

    9ffe5e6489eff0949f7d1382cc50dda381334f53

    SHA256

    c5a94b0331ab5bff70af296dcb76d0b5d434d2a83a84517ba392442cf09659b0

    SHA512

    6e1fb62f980f5161b8c4c7dfda46f80c344431c5e4dbc2b9bfd84ad29e34e7158255c991a05d242df083721201919bce498c985474b3dc934c8e8443c811c305

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dbee0bcf3e88a3eded9c3cce0f3a11c

    SHA1

    ca8de8e77be28e8799a7a58fd592dfafa5fd34d0

    SHA256

    827f14efa02be9960b4d8038227fe8759f69cba365c4b40b3fcc62d6ed737aae

    SHA512

    b5ce981c2ffbec03065b80ca74b2d3d1347f8d8e48afc05bfc056057ce0a17ae5231fc4785a7b769f93234c585fe3bd437aa67e9759d60d82bc1416ad710348a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f86a20d35e6c70a50c2b611e41684710

    SHA1

    e0f9cc96140f08035e7ad6a409a015e58ec86dbb

    SHA256

    662c26fa927ebd580ab38e132f5285838190fb6f1ccb9816038fbb1447bf4ff8

    SHA512

    919f0e68f3fc82cb2e223a3e0f3188699ecb2f78c0df8581de388b8f6a2f3504ddf9ff32bdaefcde2620100d7d368f1ce2c1713693c5e60cd15e488156d4e11c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2200ba2fc0ed67ad88bfc9c682bb584

    SHA1

    6346f7e4250c93349ca39b84fdee6e1b21046676

    SHA256

    33a033b4375feac363615cee2716ac8d384fb8fa7404bd93bcba749df3261436

    SHA512

    02b809cfd1cf5e6a55bde6b93d2a1f3ec950d410563acb3bf375666e3b0ccbe5ebe98eb80622371ab020923080b9b1ffa3631f1c0e9ce19bdd454ab5325c77c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66b06cad228005e454a8b60169506e8a

    SHA1

    6089e597695c9d4f902662e4149b42ca2feb8e78

    SHA256

    43a10c99f6e8dd7570e56ffc0d955c5a0baedd23fee6d71b6811a8ec595f6e50

    SHA512

    592bc1e75ab890800c3754d05d5bbdc8ca24c28d24523509f12417beb8a658a3288added4b8906462c4cce7f409e007bd6cbf4a0bd8ea52eb00f8482af744043

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9269110f40391f73560f62b7e9bdeb3

    SHA1

    f0eb9dde1b35534cca44216f7aca28100dddcffb

    SHA256

    84c2d645690c6adc42a51193ea3998a476df934755d1fe96f6145fb480e1856b

    SHA512

    141ef2847351c751e51419efc02122af41c8f650b46ce61b231740316b7af55fd5f9c31bf56262a4996fad04eb9c83fe151388009d5bd75bdba9820a86038ee5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9040937285805022bd6d668de57ea42

    SHA1

    e2af162237b7acfe5ad4010fdd49a99932c04864

    SHA256

    95e7d0e333bb9fac54aeaffb256aefa58b358a2fcafc4d117e1996eb12197f6a

    SHA512

    81b07bebf16fcbadab8fe81f572ad733c5d6bc82483de8fa0da866edfd04a9de97659918cd7c69854fa4d0720c1b72cd715d01d2de212b981e1cb5b0e3913185

  • C:\Users\Admin\AppData\Local\Temp\Cab9F4C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA0A9.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06