Analysis

  • max time kernel
    136s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 08:36

General

  • Target

    96bbb3b7ff3cff1fef808aef53a8fb57.html

  • Size

    9KB

  • MD5

    96bbb3b7ff3cff1fef808aef53a8fb57

  • SHA1

    276fb7fd9656dec323f5f0d94a3496af81278eb5

  • SHA256

    e8e0ad2086aefd9e80f18c032a22bfeab15432d85684169b572a9d0d0e7657da

  • SHA512

    5c7d750feea9aa33efff5f265f8cf61768074e5e0a7cb7c822720394e6b366ecda3a717f91951a452e3a3f47b5d8640e3b18f1b9d13e9e43518ea0ac4feab0ee

  • SSDEEP

    192:f41w13IGKCZjLAvqPhyU7dupkUz9q9HQhPQ96Hz03soHS/No/R:f41w1BdjLIqPdUhOHQhs6Hz03soH1R

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\96bbb3b7ff3cff1fef808aef53a8fb57.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2392
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2392 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2096aaa4fae4b18db7754dee821d18a0

    SHA1

    902b38c0ed7cc5e543594f3acfa38e0b17ee23dc

    SHA256

    1807c64be1001ef6416c72e3d5403f120de57f4f2aee2d48c976e78ef37b0261

    SHA512

    ede6bab273da678fe3307cad295132418c6275cc9f57a5f3f97d47a9f4f500ddba25bc3477dfa04b9ad512f66e7ef58526663fddc9501cb7b047a3986d9e0248

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8c731233ee8a53c2cd308001c1dabf2

    SHA1

    02be4cf2bb6631dd31f7ca0ba3313a772e75fec1

    SHA256

    91d56a7900e90c7a7ff96640ef7cb99cc12cc2577eb785b22f7c5bf32b41c9a4

    SHA512

    7ae21331152e86f262c6e378deac0b33f6dae6c30a2c2288d6642510db3d700bdb3428ce9edf196e44925cf4b99a67b4f189becdc4a9c1f2b9713962eec5f814

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3facc919b91d57bd4799d7fdeb3d893

    SHA1

    49314a5d8ad1ef91fc49cae4650250f8a4601581

    SHA256

    c1687865951ab24f94b0bea74f046628cafda3977ae289e8c113a271c8e248ee

    SHA512

    b9ea3e5cfdfd9eb209c0113a58485c0b652af7ed313d0fbc06e8d0ac4a5bbfba1a0c65175f067f9bb44b729248d5d1a7d54d714b5b3c42be9ddbd026dc2b8c1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce0af66a09fc9add44cc537758abbbde

    SHA1

    15c528bb3c2f04733e582647e0cbc0b47e01e3ac

    SHA256

    8c20bbc16b777d73142c469ba7ebdf0eabf3f69486272707db4774df20d0b7a3

    SHA512

    d81e3a3095ca561f605c3b0680f2acabee8db616f7d7db3442af466a49eb50d96295a141da2af0f269b73183d55b02f3a4e74497e8aed732e5e112caa0102b24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5a4544f413b648e0673b0eb9e0c5c84

    SHA1

    6cce526f4a1643a4d25a3406a8c43e917d9e2ac5

    SHA256

    7e21bc49afddede37bd4ad258e53cb63f61f4159582c826b45e73f548e558d8c

    SHA512

    2a5e467ac73836582f10167e50925889050083ea9ca1f1a6fdca2ed190efb3d8332aa25097b3aa6b52d6858414b59f6f51780f35e3271337fff33107ca92ac99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8767f71142d60e0f7ee8d7b30d674014

    SHA1

    b64300c83a0e3d7e5262b1ee68d0224111374f1e

    SHA256

    a483a8a31b657e3001f984f65447ef1a409ef36b17c409edaa3fd7c0272a5142

    SHA512

    e33f2d403e9dc08e378ad98a0878202a9126c64ce8627ebb39263f77bc9364513197fc6c8ed423d4206b33e0a0c9909c9d3e4b0e976bb39aa8ab3ce6ef361878

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64441e7a5436827287cf70bb8671b55c

    SHA1

    dc0c31561235241eafa82cc7cc7f3d966e5fa350

    SHA256

    02c5483363d35db36ddd17880e64ed7e28a0d3ec826b263df4ff669e2f0aa2bf

    SHA512

    49ddf68feb90ad5f603dfd79cca5350d8f18930c05f7c7d799901b64a10bb9bcaee9010e121a5116022deaf374928de756e73045c8cb1877d4ca2084e2db1505

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ab0876ef064b04bc84716c5ed09e856

    SHA1

    683f6a48b43560ba27e2414adac7510cb7f85a17

    SHA256

    27fc27c9399424a1707e945cedc969e3eb3335535bcba23b7a9d49ad35d4970f

    SHA512

    536a3cf5aac9ca14b13a8721dbd6805a4919c4f5a9c0aeea7ca05570297dc28bf87169275c77e9b811e543137a3df6f325d6c98b4d3396675964ba6bcd1774cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d79b8597c66e6add6565d710aa46bcb

    SHA1

    78aae8fbc41a451832812e608c927340346f26b1

    SHA256

    bbb7b5e026c719cbbc47ed25ad7241e47555fca473b410ec0bb39b058b78bfe1

    SHA512

    fefa47277393aef027446d99b6d874425324fef87a1b621f3c502b4078dfb6671b5bad9271781a2ec3537281654fb5b99b3ae7bb9114168b423608caaf828160

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ad0321569c53bad4e53ece2f0ee8c4f

    SHA1

    5d3746e869402d548d402f4b4ceb24034f9a47b6

    SHA256

    ed173b8db8ce93f9177ec9caefb28f3b6672e6f84a746fb8768df8986a19af73

    SHA512

    958c2040c07d084768ea729c0bcb15ffd003b54a8647dfa4bf92e28dfc00461f23defcd6f4eb1d8636523b11f2cf903a0b7699ff7936b3a58622fb34ed66dd41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e42f8cb8bd4751af8986cff752663323

    SHA1

    af324b9f9dbd473afa7883f5a474ecadead50a4a

    SHA256

    6cfb1396e67ad037af2835e6bd88802157cc9c5ed3f5c1917dcbcbe3f3bbc9db

    SHA512

    e3a46740e279657cc9358ab477d364abbe1080d20a5e9db1fb9e162ed99e1070bef05fd4f8a8763bd842eb93c8ba841428a1d01edf2c9982fd23d135d0b717f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5e3b93080d9f34f0af4e1b1efbd6f21

    SHA1

    3b372290fabcb2bc914d534b6e85196f0be717d3

    SHA256

    e47ecb4b3dffb54c4c10bfbca72d79c4f7ea9b9ca11674f96f3a1791524a6db7

    SHA512

    5493a3fcdda98dc0a3778943d71d21363fd719def3f342b6e9bdd8c9323f6396be015f61e921088f05833da6666e9442ce23068481b27ed7c6a934a76c891254

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    030f9321a0ccf154f1bc7b354e0b3748

    SHA1

    7dce684e78d643c41bdf7cf30986a687f541c5f0

    SHA256

    9d6d145607eeefe99f3e7ac9fb448aeac74774625f65f6e427d27dc173d3e249

    SHA512

    56eb3cace6975bcd3e97a9df4fb3442a24491344c2addc890468ff03cf23dba2fa4c12d4c53d2b6335b3dbfdf01ac886ccd11e1da31982a04881c4792ece784d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02c1c5a77f3b9b338bf1fc63161fcb54

    SHA1

    5c771634ed67c806e43616de4a1b36b00f6e92e5

    SHA256

    90cdeb140a83b6abe4ba67a1834cadc661c622d440af7ccf6d4cf2b14ec74326

    SHA512

    409f35f4e788255939d30b586ecb04eea4924cb8a55beab3f6bfec640846e4d185ea499b878198b89da427c6fe3d5ae91033b601dac0fb3a507412ed86fab8eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    680239c5d316b6a29e591ee165051119

    SHA1

    ffad08e34a7e1168cc2e66225d78376f3b70c155

    SHA256

    8918f8c40a95cf7bfac156faaa582585ff25192ecb85df75a39240db4b123fdd

    SHA512

    accc264af45e880525fcd8e8116c4675a8b9fffda5d58e5125a0c95c7629762cad1ea6891b502b96cedc9a4a22066e02491e264c9fbea750ae6b85ebe04fd064

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b5667f645e28575ab3c195466d01e39

    SHA1

    3f9b7d951e4aeb7873b0c17f054974bb8a51ed5d

    SHA256

    10f509411eeefe513d8eff90d160c6c8d65c7ad927f861a9d81d12fc7389c4fc

    SHA512

    621d27748489be92b10b824ff0c0c654f9251d56d3185e5b9ecd26c9528a5aa1feb5f8bc74400760ffcbf0fab6bf1bc59559181a5ce9b7203b86a1c81c7cef3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3d690479b891006d19bedac9c269296

    SHA1

    fed978bf120ac058bb191820ad4825f9c129e19c

    SHA256

    749d2cfcee7a90e1fa236220098b8012f30868533113f5f88d2f541f3a3230d2

    SHA512

    ea21082000c495f66230d34a7986cae45949c050617eabc6d28fa1aee4219633049a05fb165dc4c80b7d461fd11fffad8f65e9979f003bc16bee0718b91f7f78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6cb239dbbaf0f6f0e7faa75e6a3588ec

    SHA1

    2937a1e2a65fc05611b91bedb76466c85922670a

    SHA256

    50bb955ab0fa55ad2c8ed1c8d89a96126cfd58b7969993465ddfd15fc71dee86

    SHA512

    f151cce520b954d33625a3e655dde2fbe84324bf4ef34656b5f570949bcc44c02a3f2c4110436d9413164309ad1fd672c8bb7327608caa09939324f248780c86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cac1b8ab3500e3afc61ad0c8ed3a09bb

    SHA1

    791ac09bf14a432b13541c00a094f6b2f61c8342

    SHA256

    89122d55669bc112545bcf3dd76394705a6a0a0464c6cab273a34e0bd47d340e

    SHA512

    f128d7952f6e45ed1d004fb67f95f61dc313fca54681c3901b0bd7f6978e2751ebbe99866957e6da6ffcb7ff5987b0b4317db75391f66bcc5cfb43bec274261c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    211d6418a67047d74319a880c228a7b7

    SHA1

    2460499bca9fcc1d8adea4a88dcec9179357d53a

    SHA256

    8cf669b35bfd406af0642f900adcb2570cd414a725e31565573d3a84188aad6e

    SHA512

    96f39033d6726494aefecb4ff2613ab1437ee88eb8e4d8bb085daa5954099e49eba9ac3821985e938b9b45ddbeba912e41e2868fab7d9e4122b301ba57a1d60b

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\t83hqs9\imagestore.dat

    Filesize

    992B

    MD5

    f6fd3083e1d34469a568808d22861ced

    SHA1

    bcf3bd261e967570dcbcb914370bc3f26cee4c80

    SHA256

    86030bfca2c6446c8bb5996f778438b0bd56a15b5c9ae0306bd37078487bf769

    SHA512

    08547187484543093035333a0e63af083c43b68615650185491e0c28e647197387e468947b82a9c4fb864b35cb97d3f964302580de3bde1777b46719431a54f8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6WEH2YLI\favicon[2].ico

    Filesize

    894B

    MD5

    d23f2856926460496f8e85908f47948d

    SHA1

    67f7b75c627bbb5290ba1eb0a8de4da1f077f370

    SHA256

    3a05f15b6b4fab7d817ee01626cd447a0e94b9b819198a7de313c96d841db8dc

    SHA512

    664b35ada335406f2768d1594d84d5eb39a27b81e53260c636c7d68b091d0104e69489ae9270f5f050a41a180f112335b5fa7b1d678839cef996a579387e0ad9

  • C:\Users\Admin\AppData\Local\Temp\Cab6A3A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6A3C.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06