Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 08:42

General

  • Target

    96bdeb4519b728cf3e8f0054dc192060.html

  • Size

    37KB

  • MD5

    96bdeb4519b728cf3e8f0054dc192060

  • SHA1

    08551b8b942cdb01447e204ee2cb3416c85c8878

  • SHA256

    bf6e6341a51fec4fd5d01bd3e84403be7f8494f3aaa416b1b8c8a776bfa9891a

  • SHA512

    34e5d1c747066773bdccff8820962a3c963c81ad1a04d23d840787e0808875cca5556c5e32bbbc7a8f3a541ea3477a011d0e103352ea0824308ac3d574f6e1fa

  • SSDEEP

    768:XDMasXV/+GBcfaEtVCyxBxxF96xB42Zr7rjUsekHNW2hgwWQwWPNA57:XDMasXh+GBcfaEtVCyxBnF96xB42Zr74

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\96bdeb4519b728cf3e8f0054dc192060.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2828

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          006c5e134d034f29e57788d740f1e7d0

          SHA1

          c6f05555d1670097b030fcff919ed992ccd18e02

          SHA256

          adc734969851301dcf92d8f58fb795a0d11f8e97a77afa8d6da2888bd9cc35a1

          SHA512

          663e7e453800bce668ab3e1daf6c3f1a715969988234014f7c98c2e9ea17f51631c381bcf2d58b5bdf44411d892162c37fe0e6d3249cfdd85af6fe0dec076ae9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2fa04b96af79a96b04ac8eb578b27d56

          SHA1

          4128f49b310eab7e6e5297b8186ca670fee1e58c

          SHA256

          e795dd8b52c37bf81bec81c77bb56c7728a3865d9edff381feefcf34db0647cb

          SHA512

          7b74d604b981f58a467e5d072b90313758eaf51110da029ac7b75d2df4fe59c725d6effc42f92cd1dcb109f37530a7beb8901671549b3fd3950196d95589b232

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          26144c64ef5cbf64e5d46c627f20d9da

          SHA1

          f0b8d0516341a8ff641f1015bb7d383d87ee297c

          SHA256

          41c8767d383b5ce7421db467dab0f295a645fb51d52b401f0c82b79773af01e0

          SHA512

          d22b85811824ef0505c2ce2f5926473de499e4b71ae096a426bce3bee8606eed1f02e42837fcc3468cb0ac85c8032595ade4ec8081b330c8ec7a2ebed32e9b40

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bb6966a1341d917e768f130860a95494

          SHA1

          8b4678d4acc69a7c133ce085849fe9c220ea45b4

          SHA256

          bdc6199aeb0bbe510e0ab07b1ee50933b2ddd1ba7f420bbfb00fb96b860fd6fb

          SHA512

          4989c6ec70508c9773d88cffb16fd0d999c127724f0d27705b2d1530f348e2014f7cb321ccaf61234596b0c85a6f882017b22170462d6aae190ee9398f3e9a38

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          aa2decbcdcd2aeeff49eb02049bddb0c

          SHA1

          91b91c591225e4cf69f41597efd843e02c88e091

          SHA256

          19430162192c8e134278e9b6769842a353c1230f11541b731f231c07c92dd755

          SHA512

          9ab9756923440a31cdc328c91908e3676e245dc5bec7dd2f127c8a3bbc64e333edbd24fcc56f3c5c8c196b34d4e9f8acfaec855515afdd3395e69e1a0ae8cd10

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          39cf3591714b33607a325fbad59fca2e

          SHA1

          fddb1e7a4691ebfb1e0eacc47394f79ae8b1ad2a

          SHA256

          9b7af1c1a1767e52d686ba055ea65ecfacb6f0dd7ed35d6f417e693cab01f7e3

          SHA512

          6d2fd74e6447a2a75ad0d078dbad33afe60abd75ddcc9c6b7a5c795de8a3ac46f5e9d7f39e5e982640d291e90d36ecd991e0aa7bdb6e0ddfd5c8064ee9232eca

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6e2d65b21ead9f0a22353cc54d5d016a

          SHA1

          12c363307ac3f7643b7635d5ae292554c053d635

          SHA256

          ea133eb17a412f93769fb76692720f9fa92cf3e49b155bec1a9e8ad54d74dfb2

          SHA512

          9ac3d23ad982ad09efd5ca4db1979696e8119a70bf5ae67776aa8fb0b5cbe02f5dc9d946a2bb4b372b5e0fadb6029df14ae7c6b5dfca995761f13434575457e3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e475dd71606bec2ef29e00bf0f6400b7

          SHA1

          0cd0ecff62405b4ee7eb732d9c72d50b15781103

          SHA256

          fdc170dcfc4ee8056fca88d1ff86517d8a9087b57178cf6d87638c191dca89cf

          SHA512

          e42aa6f58fd4468f31b6dc12c14e06314f84fcf8c91543dec7dcc1853c1a2f9540f459028f293e2418b72addba15c07a8ac28a1715b802044f6ac04abdabbf17

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3767380f7f4d15b7de27b42350d160c9

          SHA1

          947d41adc66eaa77ded05bbffd7141287d47d706

          SHA256

          ff1d3d691eedd6ddbaffd64e2a81b9eaa51f00c032359f528e785528ac3f2ae2

          SHA512

          68f8c0cd84dbcbb8f5f65989e5b196c7b9d25885728f0cab09fddb4409bb334f55418044c15a167cd3c3ed11bbd5d1eb226f53ee46651a658b809e2f14a63dfb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          873f2c47d316121c54f94aa52d8062ec

          SHA1

          91052112e933d9f0bf102dbadedec3aa0700d657

          SHA256

          192042e4858e381319540b80b3447eed630d5b1b27e69e187a6977b1a02b9a81

          SHA512

          8fc5a3cb40cd6cc311d2d64e9cdc48beafb85f0a11542f223e943eec980d23b67900ec34f5ac2b7be64b2fb5ae775b1895737361b5da607cda22f1da3d88e7ae

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          776b4b664ee611c02c972b9ca56b0807

          SHA1

          c474a073f93d1350724088bc66f34e684b4ae771

          SHA256

          8b052981b6528bc4caa32e9c118c5347f91bb072606bd5624d9115a5e3fddea0

          SHA512

          fc01f6890d957ad9e1a8ecb8ff9fb5dc8c53bb1436c7f6462e41b427d1d88de4547a75fc62219ca35fd3af71bbda8444876589ba10ecc0e3344d96f5e5dc6fcf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          685478be2dee62895b79b30225685d69

          SHA1

          10aef0507e55ee17c84e1cfc897689cee43a4418

          SHA256

          67f14f21856ea0f640f2392cdf044b917da5e60d41500a1a084470700aceb4a8

          SHA512

          12cb50486fcc35d2f98de705ffb33b1916410b10de4c9f97cb42a29e3bd06de6f11ef783de57977bc9d4162d6e866a2c106b2734f8b664e2d0f2be111c0c8bca

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c5e96ead12e75eb44f3b1f05ae36aa11

          SHA1

          4dbf13dc8cc2594dccc9309153e23201b71048c9

          SHA256

          b619ab43a35cd363a665c9c4dc5601e0d02ebba8b81a63d9f2871f1434732a1e

          SHA512

          b705bb874748c92c886e4d688599306fa91037e72315142f61a5d7061dfe5ace09e88d842d2de8cbba730c0792172791204d2f9a8f2864bd8741e169cbb020cd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2310e23269623cbb8a7bb8a582a87f32

          SHA1

          e0b95eca78f5c08227ce17f58036bc5f02692490

          SHA256

          d03d6535b6cf893fe23344396b58b113a2d6ed7cd3b7d0effcdd4a3e4eba523c

          SHA512

          1a21b1c3c90f95170ac30bc2019ca4c0be4548638c2eea3461744aaec07342834bbd8c2ddf835260f14e8f162f843c89934620d6a3b60e5efa76f4dda9ba359d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          34c496636fb99c99e62cb249d25cb8a3

          SHA1

          518cbfedbbaa00e431df77fe85d03eccb058b796

          SHA256

          a995338622b1b12e0af90e5e9cf88ef3e1df925b8fec4690bdaeb960172e9153

          SHA512

          98518f8523bdcf21a801f316a74cf59f3ea4dccb11ce5a9252801bc9306129e035abc90d10de3cec9215069e011ad7eff9da8c09f359cc97156c8f7457608b48

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          753538c970ae59d27c298543a2e9763d

          SHA1

          d049d4d099609b9c47794a1f26f3b95da4e2e752

          SHA256

          c807ca380d9ef537e8ca2dd2a6c3e8dca56cdeea141ee8afff049fcd3e13bd4c

          SHA512

          0692daa044f70ace03252f3b2a985c892a0a8205c51ac46e47cecf1094e3d6ae5dccd31475d0ccfcc03e42e2f699aff1f105d37dba6fdf70fe7356a6681b880b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0c6facb22bb93172c9b49f5951c852db

          SHA1

          8d9ff4ec1b34cd5cc5ef30c4aa2637b167e01699

          SHA256

          7f9cbe044a15b93d797579b8ea1e2c536a00dfe9774393ecda3ec7992c6dac63

          SHA512

          1499c11e261b410021d0f0aeaec3d9c182396d0cb21ef4edb165cd161c3f34b7f0c13daa4566e0fa1fba7b842d6713dad0ecc521f4318dafb41be902065c08f4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b661bdf6ac65685d93626a633e07921c

          SHA1

          1720ab0566caa2b31b7679adf8cc81ee370dd37f

          SHA256

          f8c26b2baeaff20f92938563ae8396f9b84075f8c7f5854c4e7acd5162a85ad9

          SHA512

          1bb01e4a2c410fe8ad48e3a3bc5acd939c7755e7028da73e07f55aa7a8f54a64925092b30e11cad90a5ef24c7af39cc5705c5d60eaf374418a325f7b67dd9308

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d4dee99f92c2ebbc8bd2b987bd5df193

          SHA1

          8bcab9220e443b8f16032e280ccb2b4913ee93e8

          SHA256

          3e4c9e9967799cfa3b7befdc088265eb802c92ba66cc3a9c5e9c8de3e77c81b5

          SHA512

          aff920d1cac6f4349894ecd66f9df00d4c83b438d9c574e906e19ba1fcfa703c8def9c414eb25c677198b420c5f308470fa14270cbc1613e797eae8517c2483f

        • C:\Users\Admin\AppData\Local\Temp\Cab254E.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar260D.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06