Analysis

  • max time kernel
    117s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03-02-2024 20:38

General

  • Target

    webweb/Article.html

  • Size

    19KB

  • MD5

    4af49394a230b93d300aa3de1302a695

  • SHA1

    1896b1f4c24142b5d2f2fd7b477b80375afe25bd

  • SHA256

    d5f7928832875f19ff8306cc28489bbdeacd5642d82cd838e90a5ab5c92e6cd5

  • SHA512

    afbf5b1565691b6f04f21f5252622a42410c3a5f0e9420cff5891baa7f003c635628d33a960183398e4be1425529f0c94cc64f912c62b88d4902bc073c37cd63

  • SSDEEP

    384:2nLg/8YhuUT2ZVPXQIn0mlGpK1pdTIz1plGOOdTVPpKInXQInUT0Bvk4YanQTgVL:2nLg/XhuUT2ZVPXQA0mlGpK1pdTIz1pO

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\webweb\Article.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1388
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1388 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2404

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0cb6a9613424fee0900a92cf60697d5

    SHA1

    d742c483c73e0572f5873db010b9bdbc3d44dec1

    SHA256

    c3d2a2d1028441c681376140cfa5d545ee23431dbc411df1b5e3cc87c725aa20

    SHA512

    30a8e40cec9edcc1be00665402d35f38baddadcd30c743ce80b108cde0212a2183645961f2db78f0ab049a173ad820f8edf11892a9c761750ae0021daf078a78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1268b3409b49729de2df09161d72a20a

    SHA1

    ec171ecbc3326d3e70f210a0f6fc8e7a986b36bb

    SHA256

    91b872551c96bcc440fb90020077204d17185036e206b6c894c1b699b77a1d43

    SHA512

    1744ad775d9c52544a504d1dd91feecf2ded55912a98a400117802c04f477e1f1445807351a19021c33d6c94ff61542fd67543daae4125c66603dc47ea673b9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fad6519b5ceb8492e1612d4714a082c

    SHA1

    21216a00be2543d9258b17d4df6cacf1bb1ee82a

    SHA256

    13875f1a6bdc75749b97a7054a4a8cd7a9cc15e86e582480ad020de55a9a651d

    SHA512

    d48500825e98ffd7053490c4bf27f1f3f04144615e8d1b4ab71e4fd89d4ca45ef651b96f6e8053f6abec59187a14326ed7889dd8ca4ef37bf1b8b34a6f5a4cce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ec018db890e24d9d1403e6cf535f359

    SHA1

    74ba686aa931d20ada9bff7afacc0aaa6a3f72bb

    SHA256

    c2c519562dbab950c5e11e64d8e16676cd920a4a75ded358509c2d17bb311b2e

    SHA512

    9ac6b35f8532263772f9f9847f13673360c6e8171859fcc23d09bbe903a987ebf73658d181a2e2d731130ec8700af75756f198316fc69613ddf96098d4e819c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2e83f74428fd4472ed8f7101510b384

    SHA1

    d9afe05d9c8d0707bc33bd47b531e298432bb179

    SHA256

    d2b4952ba2e155fcba7f36b4274d23cef0a0618383fa0e23c72865bf1e75aeaf

    SHA512

    4c8e9fb513bf175473d3b53a10089c99802401f6ca2271bb5e8eb43e652cacea39ee215fed4a830a03fc0e33e1af3a3d6edc5d09451d6e9abbd6d2e176174282

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    612d2ddf8ee9b0db9d4da3b1fde140bb

    SHA1

    804baaeeef3c29df4b6d48cc2790286c50440307

    SHA256

    5dbb20e90c980b57d93393520f4025f40dfce307099a07052ea10e2918178b4e

    SHA512

    734362be65050be0effbf497157cbbc92a0d5cfcd9461668202e2e1426f44ade3ddb278416bec60742c2ba4e2c4f21788b8a972d45347ceea88dc5e2a2829215

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7815ce70503ff146101c67e7e13b0d0

    SHA1

    ab4c6a0ea33bfee4f91173c47c76cf3717509888

    SHA256

    7efc16d18267cd2694babe118dff46ff0e0a1efbcf1729fc80e4c56c20d84edb

    SHA512

    7bc26312f1fc337628bb8b9f69230022300dff7aec6a05efb004a4b5da4caa7d8dd30c66edc9cc32d8d427bb0bd5ef5dcc87a6771316b4b8f2a62414ae77f234

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1549b2433b4ee9fa023fc2f60017704

    SHA1

    c209bea8a963efcc05f8f5859ea23a05651baeab

    SHA256

    85ee041c16256c7128ea0d8d451391f53b4a64be41a4620c151992678349a5ba

    SHA512

    11dd70fea59dcab2d925c1fbca4e348f923365faeb44654449af794e60fdacaf7a8f74f9f40621536a4dc48df6ec6926338d139f7b585eeb585112cd6f61f76d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    109f443be2e0147083f1650cb0a0c309

    SHA1

    e718acedb56d42b1f07b8a36a12b7a69179ce5e3

    SHA256

    a0743fe4ed0a8c0e0f966c5e0959f3a0d789d421a22af37036d4c3bacbaf2294

    SHA512

    4eb12c6d1e27608bed65f136be51789105e4c14305042d4c392c06abc2a67f8559ac76dd231402e04fb8ffc06b447ba986c43a92c22576f1815fa5d97c6756ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b80be05d007add3d50c00439fe9d4628

    SHA1

    f07c6e9f585238c3016c1e6f7eb5663e71ed08e9

    SHA256

    d9be0e232765e71f9d64e7d55836cb72438f30ae3f8c19a0a020800e3972dea5

    SHA512

    1d9328f767496c214563182ef6a24efcc4c31cd14af7144bdddc31c93da4691e2cb35bd920e11642657e39869538b714e95491c90ba0d3aba12067c26d50f5c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d6dfd073501bf98c3c6cf893ce969dd

    SHA1

    44f56a94a9c10e0f38149438bdf837bfd36c8d8f

    SHA256

    0d78e5f381a79a79d948fe515461e70e94f163ed87b0eb5285f49a16a85a8685

    SHA512

    42f345b14f88846200d288e8b1dc6c5446412526c73305da10cb9df6df982f72b6023484a1e7a20b2d1443f5af3df90188165771e0fd67f6efeb5b3b46a95e69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1feea82616d939d45db22d564233dce

    SHA1

    6bfec4748e6d6aa5af715a0c397b6cfa11d5e847

    SHA256

    aeb2cdf3b68e3a1b8b8adfb60857f1853cb5213f0f59302125d516b1b3235622

    SHA512

    50cb21fca0ed2a1b3730709403afdc5857d4a62ed1ed311bbf1652d6eabee9e45f452c144979a03e21425eb11775b16e290b039c140c2a9e54fb5bfc8ebb24ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c48480cb95fb142f7603767696706546

    SHA1

    6788279cfebfb981c477d3c1a656053db9cc9b5f

    SHA256

    b63a3dce6f23b43b9321dcf816dab8f9ec10ee1c183a7e38a8788e5e65ff7b02

    SHA512

    2d3623bc46322b42f4b684c3d95f694a18457c42622d7e1c66ea84c131a92ed2e08661507434f786638aad43f39fc77927fb998898c7ee72c7f8a39d4ef3c5ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5403213cc2f9763834b717610c52a474

    SHA1

    09d63d64c37fc3479b0a548a85fa0857d334aa69

    SHA256

    ac4da8ef04bb1876dc059a96afdc9a51c904b0c89210752db417563d3e702ee9

    SHA512

    61c33f16921b6a28524b70b36b4826beb6ed39a3849f992be334cfc303b991c20c22c0e3eb74b5544faedc4a0d1c85b5606d877da18a321fcee83d77021984e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3405b5890ca639ab0e2fe7231156161

    SHA1

    15ea140edd446b10439831d0961de5755afe3ee9

    SHA256

    68eee93d9bfee0baf1b409b91abe6bb5d941a82d83a4a6432ed008c365d8f596

    SHA512

    c619b829158f406ba0f3407d63ab25276e98fb820703c984497b28090f8ff24bafefdbd7adbbbe25cc1c3b8f4b7bb6114875a5b39dcf902988518e763624ba10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b408b9ffe5302600e218266b4b69a7fa

    SHA1

    e82ece414f57f1b5ed578509bf841e81d0930d9d

    SHA256

    50314c47b8006b4c929d3dd820e3d3468a8aea90a0c59fe79ccec1b5cfc55ea1

    SHA512

    f08026d8262ac8de72989c72dee2619bf346c95ad545c55c10aa59efa89569d3b515701cbb5869757e6a12189083732de02934f1fb06d59e6f693dd1a9fb74bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69260beb3989db875915a509a26ba886

    SHA1

    0707687c72de55fc813499c341162b0d012c5b4e

    SHA256

    ee908e99aadae5001cb952a2d36c86d33647280ad1e0d4fe8c9fbbf9dae2e2db

    SHA512

    a1403358a4be143fc12ff3106c7324a0a958ac45b2c75992a7724b8cd6b4718d6f946ab624ba115fce2f50e16a001efa4ee8cf057ba94a887999ed135b673049

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9576f034bc41ebf75cc83badb77cbe86

    SHA1

    08be56798a05715e8d96326de03e879846ec3b0f

    SHA256

    9867b85ecbd5ef2134df2a306fb3a91953ab6e33a2e79c1a2bf84d727ec2b87f

    SHA512

    fb92bf6147184dd0ce14390b481318db1ddf24e52a941d6710629fe4b72eff7bd460bf88c1d58e8df436b3146c23945fef90a2e1a5c800eb37040d473a535bb5

  • C:\Users\Admin\AppData\Local\Temp\Cab9474.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9505.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06