Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12-02-2024 22:37

General

  • Target

    97c9717dd2a6a47e5f6d15b4c960f7de.html

  • Size

    83KB

  • MD5

    97c9717dd2a6a47e5f6d15b4c960f7de

  • SHA1

    8a8fc71409d01c951a12bfa6e0d47b97016b5728

  • SHA256

    31d28ea76b3a555d79619237b2a1a09411b911e399e8bc7649b10921db51caf0

  • SHA512

    b34667059fb88975a579a6d5dcd155f8396987caaf8c4d56b7b496b5fcf6f3e78cccb420043b0e4548a6e987f278ac6c4a39a250aec5f40c54a4fb0f09672c96

  • SSDEEP

    1536:dzzXirHPbsecoU8oU0X2kP9tnmEPmy7gKmgNqvmuMWrzaGyFMyUfIrPBwMVgqqLp:0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\97c9717dd2a6a47e5f6d15b4c960f7de.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1380
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1380 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2608

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c2a85f217e9e513bcdc963475c4bfb4

    SHA1

    52eeef4303c6b54f0e69562db8ef579eccb2a3ba

    SHA256

    da8280fbd1cbefc6df3bb48cf0ba13a9d2a70318e7675e4477c4d1ca29f9da6f

    SHA512

    4e337851ba8efa5b854d1a6271dc195cdcf2d87b456691b6cec52b73dcf4787f88a7e44b90b561a10ea41be89639f00c91176b1e1b2084d48d8a89e3164228e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3050be83e22fa7b9be09afe4dfd9750a

    SHA1

    b322dd2a4b00e083f5deb35c5679340f11a13892

    SHA256

    f4c9ff12a3d40c0c4919a8cf17e9b25d5bfc099ed7f8d7fd234e7957956199df

    SHA512

    c1ea2b3b4b417a1da888bd508d1846d74368a635481a03e2f2fc13cc8a0762e47184c7dc999fd39da8f8a8a7d1d4ee7fd3dadeec54c123f338499260ca583b48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7cdab90847be1147692f361c5dd4907

    SHA1

    85fd5d9fece708bbdd7f964ba2456202083624e0

    SHA256

    e6ac459085c048f245e4bdb0f2961da7f8089d1d420548978d2294f92d6262fb

    SHA512

    ed4bd276792e23ad78dc27954566b57a68b9530aac8df795c2c75d91f294e774e30b8ee0a0a0d3680517fc5c19e538ba6531e140decc17c77aae11c8dd60990d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2aaf64db196029d166a9fb9f034fa74f

    SHA1

    487bb80cd583937608e07aba341c2ad3a573e3c4

    SHA256

    7bf41c086b97dbc6ebbc4588742ab488d9a4787492500821ef713b484358f3c1

    SHA512

    da00b1f120fc79589e879be1ea2095a807c24f32d4344987459462ec81a4e55af460ed62072011374a33893fb7c81d8bd8fce2f92b20a13e754398da2ba84340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    125adf7b6ba8735d9afd46eae6461caf

    SHA1

    f1585857037858f2b188d66b630362fec1e8cfd5

    SHA256

    9dea34beb8e8f079c976576839c54da1ab71c73561b635d04e090a9cfaad0add

    SHA512

    40599547218fa785ac33a3ebff5b7383a01bbee12038f635356d45a3a1ae86ed1f9dde9aa65cbb633edaf3bb2417a5a475b0a8400e8a4a7ef33b62ba66d6ac09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe1d3882c32bd1762e563ab3b0971294

    SHA1

    94c2877d1a2bb30d4bfd93aca249ac2dab21201f

    SHA256

    6c388ed33cfb1bf59c11b015a07e149c556fc30a85ec52a898a6de28d785f30d

    SHA512

    eb198d09c497c4e417f027f7652d64430fafbdea6cf37e000b6f95c1b9c7e772c9a4a015be3852a89302695ae6d09029e73909447a3be2c941fae00e88eda36d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e34f4ccae172495c7dc04ada46dc7d02

    SHA1

    4db22e53b6c32762a1bede207022bc6b7f3705b4

    SHA256

    fd496037d0bbdfc02dacfb49f27dae7d12fe2c8d685141d4e6c4e177c2a7e37a

    SHA512

    91dfc62ec94250ec661bb83ab74644a1a7f86608b511fa9cacbc1cb0b1b284e050c552d3b1b63b9c9d9d541491e00398fe25c841be984ebeb9a4668b9899a280

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7320c0bb1d528cca168bdc5a47bb3fec

    SHA1

    51f918a13f19ae0c09e07c846811faa1753932f2

    SHA256

    6d694e813a8ae61452f74b79ff1df8dbc7a1c1101cf912c4fdeceebb2ffd57e3

    SHA512

    c37f16cda8b50ce2323ae8b847f304d39485225a5703cc55b99b99330fd156ec815d5629c48ffc7f9476c0b1f8dcfb85b485d71015793f28f7924242d2953147

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bc4fb749b650e78054a93ed3eb9ba37

    SHA1

    40c087e35448f8b8bbe551088d3c48607e5ea287

    SHA256

    cce00f9e09d677f5f8b3be0d3d6bf83df5d6618edfd06e9b8347a389f696522e

    SHA512

    c18ec72e262a9db870f257be6475e389e3536ec7a9049c2e960ce43ea048ea689db5bdfd80f96b8819175da3bd16e649464ec84482f1da1f0f5fd19431d727b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f7ebfc369842bbafde34f5723c7e97d

    SHA1

    0e7fd43ff61c4554bea70aa168ed576a18bb9778

    SHA256

    ed13dc4b6afaa1415ea00a61d9eed2c3004c409a990b18384c8f0d5e5aacdf50

    SHA512

    9f48a68fd66a2386c13903acec1f698186c0b9b0409350bb4e6c5eeadb0379194373436ff9c5ee609844e30c4470254cfd61ae14115bf25b703ef05e7bdc8e14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3503aebffcb9a6e828ced28d37535d02

    SHA1

    49baabf8589b5238d1bc1d98bbd2687da7e402cc

    SHA256

    b93d1b3890c3d22ae791ade29a7f601601eef4dcbb8a4a14b22904b0f448759d

    SHA512

    6974f1034dee312127b7f4f7afbeb1d0c981aba1ae4d90ab21183e3a80c1fb15408edf271c0e3fb78c5ac9b106bb6020ac62c49b2c899d613ec9c1423e5b4daf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56fff467f027b56f4155b19d822b3597

    SHA1

    72b383effd63160f52b04c7f0b99c19b1dfa3bb3

    SHA256

    44bfa457069403399cb9b008e08d3da9d95a101e7162b49fb04e2c8a28d5f259

    SHA512

    03c6c665e086993b07ecc2dfd17e67fe92b79572fcae6b38dacf95421ec9ea7252d86d658b0c31466e2c4a2e8e616ede7186324998991719872473d02b66a43e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b52506414ec07d5c9cc7dbb15d4176b

    SHA1

    f91102c02426ac4fde0eeef8f037cf753c30720d

    SHA256

    664d47e2ffe43999f59a06c38a37a6830ade0aef3b959efb0871380440cd70d9

    SHA512

    88198dfff6221f8d80aa2cb8d9f18ed5628b0f18290b01a2e89158c1245001b354d6bd3e1e02925e83c8815db55edd6a4962ac520906625952129309fa0f6124

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2aac4b2f58f9e22d14fdde2038227c13

    SHA1

    206e06c3181b813d3b7adce934a8dd9ab520b29e

    SHA256

    115594608b36b8e02c95384a5be6d803ddb1d6ebf0e71c68787e2bb01aefb154

    SHA512

    4f64b3584df5039d513775967ad5477ceae8b6c518aa93d2423f2b0d99a9b37c5a699d03d4f226e80e0e12daab01f56feddf54ecd61cd01a7972f95739ebd911

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e6756183e8b6b9fdd4fd1bbf9866f77

    SHA1

    18433a067df83386965200bb29ded9e28522f984

    SHA256

    5cdcc9ab2c71871f2e0bb29a65c475eab98a177576400369fea4b9632d219a5d

    SHA512

    adeefc811da38379c1af54418d2f4c628c4733c40c6642e62308519b7c5dbad36b95a610e0abdadeeded95d0fbf593bfca4dfe786e201ba29f953d98804ddc80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8ea43b0c55d73a54051630673f1bbb2

    SHA1

    9aaf68b2cc67ad2371942ad912e5e9fd64051427

    SHA256

    9069219b4c7a056a073dd13ce3c21ae1c5b01510d52b62075ba263da7cd67723

    SHA512

    c21de9d267c70d9fa5f699000f2cc1906a5e4accab5c25d3ac9ebc332f2d6387c952f4fd496efca8872062aaf21b5782a1f8fcd633c629b7d7466874343c4e14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0b135ba87b931521dc7d242f4fda2f8

    SHA1

    3315117ac5fec84d1cbd2d9613b3ead80794e57a

    SHA256

    ae6c6291bfd01c1a0f93859d113d8bf41b0d4521f8c968a29e4e23d381221ebd

    SHA512

    39ecc7e3cda6f1709aa44893a951ab2a082a55df1c1853a8c917b774a1dcf7cd2c43f5caa171f4e05a1271dd78293a1ce3567dc6631460d547d50a0881eb4bab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37efdffa9cb83ccf24d43c339b0c7788

    SHA1

    36ddf5267f78857657689df8c7701fa314b24b4a

    SHA256

    86a9207b3f16d3613086db2c0d107ea54a75be2fa5de67aa2b7732dbf5251fdb

    SHA512

    9b93ff3f21ffade3e958a4dbdfd8f44f713655a198ecdf5aa4550f316adba95ff8232f3af7fd4d3c28cb604b3ec4413cef9a38029a83de5b20553221b7cc4922

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6350bf8287f0db0aacbc079a94207852

    SHA1

    17107dffe0930973e406e78a8e108882376c718c

    SHA256

    8632fe21e5f28ed5e897661cfca399cb7cfad1b1a5daf92ab1bf9feb66baa131

    SHA512

    1b1cd0c6aaa78dad80b9973a8acd392b5e3c62dba1d7830bdcfe79828e1e61f8a00dde18356dc66f0046ec34ede44ef753ea895e25819242e3d45b42b455d77a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    007173dc7cb6b9061fbc05fa76aa72d4

    SHA1

    9a418d2c7108c0f0fdd687fd44d15665a08af48b

    SHA256

    5718ea1f7ef5ee99301a7df0fd7445bcda1e60184515d2993f8a667a61bd970b

    SHA512

    91c476c6676ef51000cb2bafe8bedfaeba96f00416928316fbac6e6a759b15600a51028aa3d653fd4fe6eadc706efb545c853b095ebec4148fa0ac5396877fd7

  • C:\Users\Admin\AppData\Local\Temp\Cab8845.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8923.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06