Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 02:45

General

  • Target

    8e0625557c52408665fe37de43690384.html

  • Size

    14KB

  • MD5

    8e0625557c52408665fe37de43690384

  • SHA1

    7b1ebb404c58104782a01cdd2d51dd65ce4f4843

  • SHA256

    4e3c89d26c793c66db78cd6904fe8dd04b621c4ec8a28b886b171567687ec0e9

  • SHA512

    fe27d8a92b8214b21a1f64c5393b31cf6f556393de60e3abe246ce8d0eccb8654f444730c0324420abfe73d859ee5865bbff9f99db3738f5d1771af61af15dc7

  • SSDEEP

    192:+yEioELD/ZmXg8oWllefMJkZQ3wf1vqmlKt6DvE:aioWD/ZmXg8SZQpmlXrE

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8e0625557c52408665fe37de43690384.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1672
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1672 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2936

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d45316cb6809416188f79a465ff4e996

    SHA1

    afd999aa1879335e9b6c6c0896302dacaf813114

    SHA256

    b0b52d2dd911e21bbe746756bd66f18b0e16c39946fc12b8c04ea86148a4e6ce

    SHA512

    e8bc517c21fd301ae49e9be9ad08f07f5ed686992ec0248039c91a5df47439f4d56e45c3d62ca2163aef356ef9340f2d2e2c62c8ea451bd55d7f0515ff464c0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f5933b15fc03e8b49faa9c3013fe5ec3

    SHA1

    6191bc6397a6007c016699b0d602303147ceb9d1

    SHA256

    48a23ba1dd1063c388825f12af20f72f0f92e07c615fddd9c5c88d220c177f53

    SHA512

    4749f8607c65931cf2ecb40a236d0b2c3472d111a7cb266b8fff0840a1612b2b2cf2b8ccd78a6c501a6c9e2b84ef08188c10cf78d44df3377ada7ccde7702b42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    648df9acb810fb368f8d2093d14249df

    SHA1

    fc1d442d410d973f5f01c1b18136d6fc49e88af9

    SHA256

    e029acb7a905ab613cfd2b73479713b9c6c7ed0db626c9239684f4c893aeb36a

    SHA512

    2b4133898f0d9814cbfb2b130a04f134c886b76605cddb0045596d551368f41876887b1b925c90994ec8f35b19ad9f7b6df339c0c4c040d03a7b4a38fabd79b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5fcca13d340bad262029db862d45c15f

    SHA1

    4fba05fe3d257dcfe82096c3e0e598c6d8cfc8b9

    SHA256

    990bb78b427344094398294b6ae34cc8bc3330aee73d7ca192316b432cf1d06f

    SHA512

    4ae723d074cb495c11ae7208de4ff6e74aaa44f8dd44b62252a813939be340f8826bbfb6a14b91caba7c83316c32c1308b000729efe84e9099fe79a3adb738a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b91fb12034d1959d5388673a112e2370

    SHA1

    71f6e5c1eaddf4915d750da3b258dd84c1baf3ec

    SHA256

    569fa5074bce8094f70e24930f85a9fb957e5eed5de0b58be7355361050ff8c6

    SHA512

    2420f735433d474723144f410def0817d70579680cc5d0eeafed87f88e1f24c69a1c8eedd2de06ec77bceede826028149ba2b4c995f885720aa8fe26d22c15b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1a29536c5a127c5edd92c2b8602d9e9f

    SHA1

    868584efe4bedfe3513279690776a3c82780531e

    SHA256

    2daaf00110c01f601d7dd07068b3137c1906b6c959994fb0876c5ca9a120a190

    SHA512

    ca0081ae635b0c6967d98cc4686d44d0dd841309f5fac93acdbde26803964dea58c46fd0da0bf58b299877d7b16fe8cf21121ec3365368238c0d3918f26c9a2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    941436a34be2d8ca2da084ecdd3a7717

    SHA1

    9fe7edfdd8d953f83387e9096f23d85fd3364d8f

    SHA256

    4c1eea38d9a77ea9b9c2a46f8dc6bc00e74f14badfef6707c525047b9506341b

    SHA512

    9dae8de1b24a6356c1ed2c7a157b346ec6296d6206139540e459bc63f256c1ca6fc8ce237174c77eb49d310826b070c28b0883c77ce0e98262b315068bdb9cbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d6076b9a5cf3dd56292a2d6ee574d838

    SHA1

    cc4afa3c1c306b00b3425558a647071505ad4c6f

    SHA256

    57e741df8ed58aea2be601c4e0642f2b69102eaad03ec20438f68aa924f54c00

    SHA512

    9a6acec189c77b40381154a3254a4f9b41f7c4f19ab36e188d48ee60c95ec57b13982186ce000e8851f34e6575f00bf4882f2ab1b369d49567235adf9a7882dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e61b626e39e536e3971537eb134e6a98

    SHA1

    0743d13723d5a712d0b0a44dfc3b3cfee279f88d

    SHA256

    1fed0c1c20f41d0fe10e14646b5fbb8b4f7623b3fdd47b8501ffdd468e9c1084

    SHA512

    a34660ba6c39eab0af5a0c08a7691539744910e3f3650fa03aad3bdf1641e04a444c69164154bdaa0e2bd60e57bb1e8d4a3116c0dd5da915407a6597e71625d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4280e4ae41628f046b83457e1f4544c4

    SHA1

    b8bed705cf0c4804ada372533b0ec4090fdc6e64

    SHA256

    20612f22c654831f078c2c1b560be66e9260123b60b00721cadacbff8f69a061

    SHA512

    47945b91955cc3c815232141ee51fd4bb3ce6edb95b797628a1f3d4583da58c7ba20597daf3b4e9319c0124eea4a1a010ef4b50b21e5c11f93991de093968115

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    17d76be31ab614ad222919ae6c6a8a08

    SHA1

    6f3793c49ea0373d3e21a18382c9c159203c8af6

    SHA256

    117054255c5050da167005c199a9995e653191711f1a42cb4cd769962766b0e7

    SHA512

    8845251c388525551cf947af7ee33d24c5676179a0aa93c5643a11c5f44d7761328299c40697eba08b3a31882e78adf394a9d68b2c82c400bf341f7807d18d54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    219824e2641bb2f0f906c040576cdef2

    SHA1

    956b23a34f00c037955f5a5c6ae2ba9040a3736e

    SHA256

    fd782be91751c8da4e9d468f3b4104126929719424bbc632628599e30a62fdf6

    SHA512

    2236cd461f1f3b515b479a5fae7356cb72fc6cd9266a266865363b6c3a3119f0cc273f1e02a435dbe969eb1e3ec177b9e26c0fb466a664b31327c4854a28f881

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    107a87897ce8db4617a2b21b646decca

    SHA1

    e4fb81496c63d91a74ba24b8b008387df4c7a0b0

    SHA256

    c25b1e3dba31fb688671cc715d3a439dc9c9fa8b67d5e7ff1710b5f0ac6ecd66

    SHA512

    b6088e9cdb66362b539679f94860569d064ca7273b41218bfb7958457cb2752fb17a74d2f341aab9ad5e109f48926d42a70cfe022fef35fac4d6119368f8d4eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6f0e0731f11aea3cb2b172efd7968b12

    SHA1

    35df72d3bd2be8760009c343a5895ca38f836b93

    SHA256

    44f18fdc352c85a7f57f52a9ae18bedc852b6766c24018e6792829e603afe999

    SHA512

    875e277f55ad6214f1c6e8047f43d65436bbb32f729e0fdef3ed12672d402a16dd6762a4fa65193b21b478ba7924199590828748193910193ba6babfd4ce9e70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ee9326ed630094e3e0bfd41a2f5f283c

    SHA1

    5e41c396b7519b9b3a337e961a33e10f71a03db5

    SHA256

    dc6fb5a11da36c87acdd8f30a0c8aee388285929df3e109e207b3d7d19e7cd24

    SHA512

    dd3b60ea8bdbf95a858531b288cecc8a259230b593c9f8e25bd4ce3e505298d6b93d8b4961a152967c7e3c7857929b6cad79f91b204eebe78a5baee71712797d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5220bc87f9796ad90d6c9c397971e9c0

    SHA1

    fee3e376b259a6c9cce1e946874486462ecd6e05

    SHA256

    751717ee896087c623a840e7687c8f9a91442afec2dc0a7ddde62cc62b098861

    SHA512

    0e910f9c97e0c0fcc9bc652af8849cdb46e8da29533011f8f98f42867cf5dfa44138f1e9b8267f272566899f17970345bd977501af016cfe3dac966264d18b92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    42e98a88edb32a9f4f396d3ade9bb726

    SHA1

    fe5075f24ffecdbc87db0520d3061b81c4c1f525

    SHA256

    180169da3a26563825f8a0c0142323682e4938b72109fd3555b0c9a3ceb5fa70

    SHA512

    c35b2a40517017614d9648973e233d00060c2a07affe498c96b9ac6efcfac0570a9b54eb60a40f73635d605dcd67f151e75a5673eaf36a5286d5f57e7a390c0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4225c481bf8010da34a24b59aa92fb85

    SHA1

    39c6f30d7176e25a7a6d9a59e16715b160febfa1

    SHA256

    eae1fc6c0ffc607367c8334f7048de8f28d8df657e3f0c89a8cf9f60324ee91a

    SHA512

    61c184532e90d60f1f3cbfe26572ff7b7e333df71770babb6328203c069385472a992fc1d064f034c16658e63518df2a814d7298b87fb89bfffb4ddcdcfd9d30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a14353311931e5f177d15876c5baa7f4

    SHA1

    8c928caffa131a6db0583915531c9712e6ae5862

    SHA256

    b0ec7ea0059cd62b7dc4392fa68ea4af37b14fce8e7f13c02977a2cc8b4a5f7e

    SHA512

    284e268429d95e0d6074cab7514f7ae2ae28f1290bf0af78250b4cfc995692a829d5d1785af44e4f4903ae9a302bfcecd12234b26293968e3d6d5d340733f842

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4b31492da2d0196d470abab148a11f7f

    SHA1

    a73e91cfd556034022f18a8bffbd9043fff50591

    SHA256

    8ae8f60d358326d6cd97f795d820c56ee390e5f3bc5aee01efc2aaf0801c3fe1

    SHA512

    f5247996a2a86423d561b05a6a31bb3c8a591d2114dc14faecb952bb9973230813d0b1498fc346573fd5dd59a2d2a7f1f86332b2f5be3a8892fc0ac04544c74e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    b4dfd73ea792a8d162701ba4703fa88f

    SHA1

    3d203a183b9512a0d67948fd6b552d8d15795c47

    SHA256

    8687d70827193f7b27e59ddf7001c2c18120407c963424e092b3cc2e6d5a3f7a

    SHA512

    aa3c7b793e35a6e7a1459a4058d9f58f80e3a80ec35f83ac20a366ad2ddfdd1e70d20c86de0f84eabb1c39b18a5c6ba0119e8694820376597a0e6c9f86e1be46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab254D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar266B.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06