Analysis

  • max time kernel
    195s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 04:54

General

  • Target

    4fac8a51a15f0f5f62b88dddfbf23c45fb15eb191e1cfff1134bc0b066a81552.html

  • Size

    473KB

  • MD5

    0102c9e65aae24ca51fd8e9ab9131f6a

  • SHA1

    08a1b87a859d0806e8f70f4c293d5526301f5a71

  • SHA256

    4fac8a51a15f0f5f62b88dddfbf23c45fb15eb191e1cfff1134bc0b066a81552

  • SHA512

    749bcbd28a0331479c1e52df841191f3a6bcd880684f05639cb374f39e4f7a8827e5850b5435222de8d7c0877b372c63a5c915b77672a58cbe41a5e832276190

  • SSDEEP

    12288:W17gcXdawXnkZi7Gyha6qr5hlxoOHQG6a:W1sp

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4fac8a51a15f0f5f62b88dddfbf23c45fb15eb191e1cfff1134bc0b066a81552.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2288
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2288 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2284

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7485144A5B4D372ADAA5516E91DBB900

    Filesize

    1KB

    MD5

    fb569c18c7ac1580f179a121e80de0d0

    SHA1

    f3b009a3bab3c7da20f204c3426730bce677d5f7

    SHA256

    9d80a9514e2c4aa061c76f4219ff2d80327a6d83cc4b32781e8c9ac304bc8e5e

    SHA512

    34b25b7494afc434d9cc5f353ca74f7edb61fbdb145a4937b443ff268d5e1752f60928a933eb2490b034816d3f4a0b45a9891d1fb91c611c2ddacfdc5e4d916e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\ACF244F1A10D4DBED0D88EBA0C43A9B5_16756CC7371BB76A269719AA1471E96C

    Filesize

    1KB

    MD5

    82cf4378a8f040a87121bc1301eef5d9

    SHA1

    b4ced070113aea3255afb9146833594b11e61466

    SHA256

    bd0b420276c4ea31c7de1f20d73a01dab39350599aecdce35f85576b2fa70b4a

    SHA512

    f756f94badfaefb9cb36ca499452a8aef3567139dd2f55bbcb09bdb07a58cdb3c9d83993c223097929ee291db52e1aa30ca2927bf025d991e997a7349f894ee7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    1320427eee48990130b49cdf50368052

    SHA1

    e752f2d673c4d87584947278d44767a9c949477e

    SHA256

    cfd32422c224cea57362265ea0aa1c33c609e74868bcb66688d2fa242a4b7297

    SHA512

    b1155f3601082122395f67d2dbb6c47bd1dba1d6383482e0b226046b848d8b5d8484e3476e335b5a9240d0ef94707bc673e6a8b09e208f3c53b2a8f6eb23962c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7485144A5B4D372ADAA5516E91DBB900

    Filesize

    532B

    MD5

    d127296f6c0f0a2f848a4f887f126a91

    SHA1

    e08b4c5035fdd347573b4f6dba103c091f803a82

    SHA256

    8b271ded8151b364e806aa33637a81fd66132d1fc02d0d69b5a84a2cb741d9a5

    SHA512

    2669cdc71749ac63e9fa4025062104a306f2ca56140423080b96f25367dca7e6bf1ed4b9295216daf93687089c7e3c4310cd779b25101e9fbf36b5db02e252dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    658c4111d729da181e22f97437dfdfd8

    SHA1

    5064510fd58af38bb8833c43ada4961a06f616cc

    SHA256

    9ecd34714534fd6be20ed57a419c0ef52b20fec054fcc70888baa1066e5dd2cc

    SHA512

    7a812fdf6d96d14032bb3ce6658ce5b906b6fa03d8bf6b943177d957132b5e29a8f00435457ab6b6a84066ef1918fc6db8a9e648d9240d9c6da7380419e263f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b21364bd8ca89e2f3347f0dd2d804bc6

    SHA1

    d2c3d69e7ef99eb1c0e5b9fdd3ef7513e06dc03c

    SHA256

    09ccae15fa18f9a4c5ecaab4d8f33a61afb9459ed1729fb412097a2b4f49fb9a

    SHA512

    7c0129c9a2105ee1759014e24604cb96d76274a417a0874aa5a3414c272d002bfa7c9ffc083ef899ebecb8346fb1b8959473295073216769f5efc2fc21c650d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df61849e247c87d0f6b7638805f457d2

    SHA1

    4a03c297fd9fae930b05e1c06a5fb6a5e6010421

    SHA256

    899d34a27ee8b1a72ca73a738e5b38734822b44a4e6456d6d313add59d6f5e49

    SHA512

    932cd860d8be7d765150ae6815ea19375ff3e730ebbadbb14ee2e8690d2acb46f2c52acf6d08c8e8dc2115a30d17538dad39ae90808c4a6f3d1528f9ae48ca61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db95bc2b529098021e468366380fa2d3

    SHA1

    4e620f59df8b9500dfbf8dbd87e5690a6f99efaf

    SHA256

    b1c21949a59e354bd2b9dec2f0ae981bdef1b03a89d363657f23572355b3cc2b

    SHA512

    392bcb5394c0f898fd426171d52417c1a55f4d549f02a81c73619c8dd04a1f8c8983b920a49d6823c8cabc40e61d12f898f114880129c533309d77e951aaf0f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    115df072ea86d1cd0783c3e40133bb06

    SHA1

    0cd3182b4c712b8ce116eae4a21185c2a2349cd5

    SHA256

    65144a3d7d6ca93b2696628fdeba13cebb72d5f9c4a9d10465e7d04c6bd4c199

    SHA512

    01a961dc59388fa11998249fbb3d48d180e68677efa690e5fad5235e9b8a2ad4a99ddda07160c60e1ebd1701f9728a9ec30ef416dc959714d15bbaae95d2e170

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb87353ff3f6aa605422eafaa26ab972

    SHA1

    16dd565db4d1e71c7d26a71a2a15aad442bbbdb3

    SHA256

    8808a1912864fa5fd440f267b0881fc392795ec8757bcc6e85f55dce8bb92318

    SHA512

    b3c4e88853a912b0bbb45c9144c0455edcd89440b45d8d2c6dc073eaad8e19f0a84baab9c6ef8b2e76d94334fe53659074a823eebbf26ac5483eb603ed74ea34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86e98f483d9e04c0542ee0695e04d4ab

    SHA1

    751d51af308b8d7b698c78919a0af594dd56c804

    SHA256

    c6d123db3bd29a5692305b5e0522f3f8601caac67272653829f86b934fe49078

    SHA512

    2e3418dccf4904b39a0d47092ab8cab4c9c0e29239d2751bba53411d91c7bc1bc9e70cac8061ccfb8606526de6ce3cb4ea591abb752f2740c4f2d94e9e251f2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cee401d39f699086c1c2538b4245838

    SHA1

    c8f993e6f8da2ac896ada68594ab954547290ba8

    SHA256

    d29a3c3f04f3c4c738542e97b4a50c724fe9aec8f46801ebd4a4f60ddee197da

    SHA512

    64cd17f410894a79f813e566be14b7d051d4f986f94f81a3e8b0eed7daf0fd1f562f6e5fa0502b958f70e1005c4f139ded9f093f1910002b520afe936d1e3c24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fbd3ed408cd1efab0a8dc0f1d01b45a

    SHA1

    4ae0941beb3cca532f7d70e5cefc2b6ffcc55731

    SHA256

    b9c586a770ed67906ddf42ae1e9a29278dff4866193d1d1cdd9d9adc78e9c21c

    SHA512

    96f98da2b8e35cf0cb99370e0b8e5949837ca83a23e07c7d899f2d137858cdddb1c3875caf63a08c1a787505408b4e1f3d00053ccd83aa10bf8a946b7786f91e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b4f48f699eacd99848393bd1e491ad0

    SHA1

    3d2571c8262c967923af2dceacc9f7d408c15a72

    SHA256

    e3a5e901f002fe3b755fbd366a194fd94294987261d407ac97f125d336f91d86

    SHA512

    9e28c9e744fa149c51b76469d2ee7b93f5404b7ef9e831f4b9a787c480ca9ef65851d1f61e9567559c89533997af5eaa074dce0db68eb15ca374867033ffe288

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6aaad193b4ceb6d88f614dc8e2e340eb

    SHA1

    589961b65168da173efd0d3d88bec22b5aa22386

    SHA256

    8b81be78e1500cc6dd072da5cd043e697000c795c05ee536bee00130390e3ede

    SHA512

    c97971ddc9fd28f1d4ba85bc80c74de976582b90500f979f6c25782a99793d375ed29e55e1974f65811a6a7d032bb9649ea9040baa05c79aa77da093c314cfcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4807b0b58d4f75aae4f6c40b219762a3

    SHA1

    8240f4c2a9720b9111dd1d080a2fc128a97fdd90

    SHA256

    ef75d02d1f845e9ec723b2c25df0afa042c8fce8245b0688e1765562c280baeb

    SHA512

    b0a1b8bf02d06342bf863a366d4aa81f462783e05fc6e644a70759427a999e335b60990f67822e774676b69f49dcaf9e4fdab3ea53e23148e04d1022c6fca550

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4cba6d04ca729a787b68d682282410fc

    SHA1

    89c1b80adba71080936a59d4ac98b84246aee2e0

    SHA256

    2eb06d753bdd11f5e835bb7995a3906ebcd6e1d325c43d6d09b9b7442de9b138

    SHA512

    e82770520d4ac915df73463d636a7adddd2fd0dced84069b8cd23ff895d3c97795d103b55e997beaf4e404b32dfc0513f3da27fb12e8b45b86330fa019c10e65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01363beb7fc1515e9027b087c811d13a

    SHA1

    7dbb778928c165844a10c394d2e97378299d4b44

    SHA256

    4ada7a1104e6bb9e7c88f1f949a30ae06054735f6d6e6d8ea8c431a1c95e8018

    SHA512

    d21565be4e70b23cb2efb0c0baa992f91b6baea7e63201f2b665c6cc7a9327068f7b55cf75d594ee19da2920ae837eff0cebc6c331ff81439735a6449b5256b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa88c3cafd47a5e67d5d4d5876a5285f

    SHA1

    3f18a6b3837b469bb6d8a8ecd0575ff5774a9733

    SHA256

    44dd9d68e8ed1828b5f326783df67c4e136048edfe730f250ed39e72e643d013

    SHA512

    a482ce76952eafb12ccf4094678397d6d514f073ef9dc12f634e0ff313ac3ee3265b5cb0c3ef9b20bb3c6d46976626a67966bc1873339cb192f1cd3f21bd41b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36c390488ed66a5d9d5f945c13d72f1c

    SHA1

    b5019096cb70183830d9ed064c98dd259f147e15

    SHA256

    ee7345271c16e1fab93b7cadfd13d0bd373669ff644020899936869d3bee4ac4

    SHA512

    37bc66374a6590d89397ee4ae660c70cdc849aa1fcab6d270a3204cfae469797b0f29699dbed3ef68783f0df6185897da26b2b22c3c43b8caa30a253718d32ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de248378d5115732f219b24d82c53c9d

    SHA1

    f0177dc993dfb1c0d422bdb1aaff38945088c8e2

    SHA256

    13aacb4d96345fe02d0cf8aae1385c8e4d7343777c924f15880b7bef2512ca9c

    SHA512

    31a7d270cbd9633277be6921c55e864bf5176c56ec0807d8f84ed1d252c6becf382d3b2bea94621d7e8afa752de2ce316a30e9cc6a3dbca09d36b020d646dd8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5061f613788e4fa9bd8d4cd6d9c328dc

    SHA1

    4aa13b3c7c1b5e141b2de15b5f5d182a555799ff

    SHA256

    69b3385891c608ed938cdbccec89221b534bb7206f9278cec6eeb26095de6bae

    SHA512

    aab52d4a7f02b8771129d2379bcf8688bd674ec0ceea6b051be9beae37203d5ad1582ab6a7ec4c26cbf0b6880dfc161e35ea4c8ae9ebe17e2183a1ba54a90777

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0acc961563c26753809e8b600b01e05

    SHA1

    203100e86f0473055e9861d345136b27252af264

    SHA256

    4b1ce03847bf54580401e299ef7d33aea45ea3e4eca7c30317da73d373791375

    SHA512

    c316b09cb68f15b7c3b64eefa439e38aab84e2c989ca46321f5cc18ef51d11521bebadd8243b4cbb4fd575c3d8548f4d6f14a1c55622a390fa596fa356b6e5ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2571739adfc1521d57330db9982fd394

    SHA1

    a2b78f6536690cd1b875756cf9bd20748b0e4e14

    SHA256

    ca530ef58880d49468659d70f2aea867f64613f53ff9e89c2983d14b6dbcfb6d

    SHA512

    72195bf4ee97d977009378479b91b20c81011daa5962e82d05c20fb65552db41e6ad16b1c9f7a0eb91d02929a8f7b0dd56c0de6b816bea39d9e5de07f2b621ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58f33186d95319feedaf76886a4730e4

    SHA1

    277799e1fa5b0536074d11af0fb2ce0db5d0e506

    SHA256

    f5626ff2e9efaea5c4abdbf3b33220c359729da5ec5dac660af69f7138f4628e

    SHA512

    9d82dad79bf167e6c5c8285731ace5edc074a8d34c2601d3fe24398238681509d9106fb2127be1b457fc88ccf1b6535fc0000de08f9e7c6e29390fe42ef3b0ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\ACF244F1A10D4DBED0D88EBA0C43A9B5_16756CC7371BB76A269719AA1471E96C

    Filesize

    492B

    MD5

    9cad7aa5a40d250f528e85e74ca240e7

    SHA1

    b16408f89df16251ac5ee64ddc81fbb07a275e16

    SHA256

    338463bd2119127505f251736bc31b8caeab7ca8ef6225982f95f47558a0e0e2

    SHA512

    f73c89c03c4b3f241ce77b71e86d91ad63c572bd5b3bc9e2f8b069b46993b2377d11bbfafaecacc9b4f6a3e6d39c2a5ec7d3f2d4680c0571bd6a83a0e51603a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    236ac0281b391388ac4141eabfe81a76

    SHA1

    1ca0f282343cde0baa601fc346a42cdbc9e8cf69

    SHA256

    3300077353d6f7d2768cf66b7c9a7c27cd7a5488f38a365aadd550769c309924

    SHA512

    553caff99704443be5e42d3cbcee070021b1820dc8ee01c7149b647ca8e678491d1ffa2649ab6aafe68d58ff687df5a6529017ee51e1b6c51ef555581da2431c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    5242956c596e0dff8a2a42506e6d2446

    SHA1

    4b036aa6356b55d0483bf59d6d277e1ba3b593d8

    SHA256

    437c8fc7c3113c06c8416a17d1a9e2e8fb4d7cd4d2c99152b52dba0a0bbc2bb6

    SHA512

    fc27658c84acf8f006efc0e24ea03efb3a2dde1f76ce5cb8d23da849a67ea85770d1133ba26a0fbe021a0c02ac873deee35e6dbaf11ac73503d5d90198122d99

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D0I6KXNQ\ui_common.43d06ff5[1].css

    Filesize

    422B

    MD5

    cfecb8ef6e9c75e4a39397dd3bec8438

    SHA1

    d6be820385c161cad93de0b73d37528dd1c960dc

    SHA256

    b81eb89bd6746d7dd93586ea983ac075bd6d7e2dde632a7c722d5f9eb5301233

    SHA512

    a726490a3765408166e183c62c0eff587478a94ea00ff72bc959ff9ed37a1cbdb5d0f7fae53b7c894e3e402cbc889cdd1f4b07aa5b4c9c8320922d7ec07d6f23

  • C:\Users\Admin\AppData\Local\Temp\Cab4107.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar61E0.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06