Analysis

  • max time kernel
    122s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13-02-2024 05:21

General

  • Target

    9893e902dc556cdc16cf86e7dce0c4f0.html

  • Size

    12KB

  • MD5

    9893e902dc556cdc16cf86e7dce0c4f0

  • SHA1

    b8cf79a1c2ceb12a921725ccd233f7429b8baf0a

  • SHA256

    d68e0584e72f7ccb0f3280a7be8a0deb11bdbd8e9715f3d4fb0b2ebd2fbf8f99

  • SHA512

    04430a659e85ffb94efde6daa1f888d29ea75b979f88b3f8003209ed0fa9845705bf9e2ab5a72788871e40409b0a6c10baf8191cdbcd548956181839046ab26f

  • SSDEEP

    192:gpMpV31rgTBtxvafB4mISEH2KkaYXSR41FYFcHoqcRHbroJPr42:goBytYRISEH2KDOiFcwRHwZ02

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9893e902dc556cdc16cf86e7dce0c4f0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1640
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1640 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2236

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28404ea661611a24146ed321663e3bcc

    SHA1

    38dd7cc16dbaed8f0a3c40c9006375b2c4b06a6f

    SHA256

    82d3f66981c524e0970d209b484bb0067b2161b226f50984f1253cf074bd0f06

    SHA512

    495fbc13dbd73b963855670f03bfac6cdd5961cd7dae58b318559c0e8295dec9f57347c7b475600eb74dbc06aaff5a6c3955bfa0cb34a45882eed834061ab8fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a581968329ef48f1c0fb0d873b908d39

    SHA1

    e5dd6620f3caa4dc64c9b4a71511420eee4116e2

    SHA256

    0d6cf89b7a5cbab5d3c15c8ed8c84fa2bccbceea445192611b997b146dc6fbfd

    SHA512

    1ce219d7dc0d18b4a18796403c5ea6cb378bcd457055d78526989fa78867a1099adc5bafd0652d0ce17aa46e8518a8a61748e6012c76eef5e0b583afd2a869b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6e13c1c881f2fd466c80dd98ab509c8

    SHA1

    d5c77d1f7449e8e5ae7946cd47579cc7751c53f4

    SHA256

    2d160f7095ffcbed5c6cfb1cf649560e56e163e27401051ad85eb8353a250f60

    SHA512

    6871c7b27bb61a26d34b12e3dd729427ff44f4fa9c8083a834c2b869c7423322e05deff4e10687cb61719c6b7f84d0b42d02d90d43eec9c34560b3a79a0f864f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f62322107b03c01a3e06f1a15416383

    SHA1

    9e848526fa1994cc0317ad97292e34c6efe31323

    SHA256

    64ac6d5004351291145d781dfda4ba1f054ad56617c8f03b14fea644c8367817

    SHA512

    0a9beec8d1d5d062ff40a369846b208b4ea460cc1ac522c72d4c5ae7a0c2133930367fd334e21789f8411db3363011e3cca415bc81e9457ae0dc39d65ab37f8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a57971ba0739c61fe94416dc6fea4d10

    SHA1

    3ab74ca0056cf9addaeea2ec3e3769be4607e79b

    SHA256

    8b7dbf9433a07f7215023d62488f2848fbd499e14a7e5384df329d48274460bc

    SHA512

    76e7c1ee8b9c22fea0b889b8d41ea60b6817e12607f7e60d0fdc2bfb3647295f0a883a540cc6c0570e9f03634dd00127f61b56ad9bb3f5ece38ce6e8fe94aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30081c2dacdccb6a4e08cb5a42de7b3f

    SHA1

    1fb03eaf82a4fe5d223994e61680246c6ae761b6

    SHA256

    bf22cb3071eccc3e1c0cefe0b2e25aaf213372da5a48bba631e5665dd096891b

    SHA512

    c26abf66bf11520783149b06431492801558d3559724a18dbd92da60fd2d89116e1b95567ee21b530eac6cd9ad69315bbdc444c51e8df7d8df64b939a229913c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e8f71868585f1a4c1ff70dc1c73b1d4

    SHA1

    93499c057e603b4cd568bd6c58eb80257a84cf7a

    SHA256

    07aaf4dd41c33e9c2b4ae79deae20b998d274a4068fd5a4ab240474f3ad1ff74

    SHA512

    1cc7e61f37095578fbf04bd8696926abc69a3943da8f56833c9b6f2a79ddecd727af7e8ba7af2c3ef9a65c9801e670de4fcee324d3e169b9c9c8229d09d73276

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    adf5af06256c4557ac142f42fc03a508

    SHA1

    0880633087d4601f4f7286c60a7feb20a47b08db

    SHA256

    007f9fa4b9feb4b4716ae5a0121682bfb20a2bd71e70c42c9bd077e1a65f4cbe

    SHA512

    7a1007986f62e8919676514ea95ccd1c60a9a65bcea4e7de32cbee0348bfa4be8233b6edd14d85f64bf1adf9b5092dd372983e97586a99cdbad4c53ee7e75a2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ca208ee829cfb46081520cfa16f4699

    SHA1

    25b9d93086b734e17962a1060d8803a3fff69623

    SHA256

    4b1cad0aa14f8117a7d8b65df61a217189a4ef8856017522704f368d19b6d5a5

    SHA512

    06e86caca591e466d67031a0e8196f5195b6bc8ee3a26e24abf709cd80d9791000aa286e5fea68b4b3f4afc0044ff09392aba7d62f06939534382ea5fbf6ca7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e507068db6add6f1c245498f0c9c196c

    SHA1

    da84bb5eddcb70508d3d60b4f8795b7f8c694864

    SHA256

    3a9495042260e26fbf6ad70677bd31935d9ef2f3de52dd603e432fc0fc14b76a

    SHA512

    c42365b7c8e0f7738e4b58a7b4073d9bb531d9a4eb22fe906bed63f88c20c9211e9316463a9a957d0ed12967d192b1cd1a10a88262b175dc241cd34c020c5b56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2baf9316b248fc8c1110c17051fe752d

    SHA1

    4907fe382695e58d42867e17545e441819ca9495

    SHA256

    927bd58440ce91691e95bb4d70f1101fa68bcfbc9b148376c4ef8a7e43f84fbf

    SHA512

    dfbe7ade53335182b858fcb24d1415fd911b01cedba1d99e937180d869aff5246a7f216211d338eeeca0398c011e8fc084a76103fc4e9c70661e1d8d827e8944

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a284328ff2509e6bf8dbba26b3dee21f

    SHA1

    2011d57b669c7f66c1d4a08c662d9889a43bc5b2

    SHA256

    4e57359d65e4bc04ceabfa9e970b093331d869e14692275e93365781576cb3cd

    SHA512

    c369a1f8939908879aa8fa43d7bc85639dee1cddb340b924047b73f175181bdd13cbc00c924b969c1b04cf4556cc690d18c51f106424ef71ba0998d4caf4c884

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7379b32d8feb8ec9dabd06aca87d5109

    SHA1

    3032f1b9dd9a0ef5fbe6d9fa25bfb08f36c976ed

    SHA256

    674d62444b6f605e6d2508c52f1db3d86f10b5f6a8fdf418d82fecca4119bcbc

    SHA512

    bd844205f7ed694b9ccc86a71b6f0fb2b76e1f246d842c8633699a4d2f9fd8f932281834f54462e7f8bb9ad8d11fa38b82bed79b9ff915dccd30730922bfceea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72ff5afc45e72966ed692446d968c1e4

    SHA1

    a386c0818264f8da1a11798800d85cf164c7e767

    SHA256

    06a4d95e0b875e0f181b8133371ad7c96584959752f6b077181e882e996a2911

    SHA512

    d8a5a049c196932153d2acc76cf2cdaacc8f626ea98d2d1ab169d4449d17f02d8af49c3affcf73288750c325a5d3979afeb6d3b8429347f63eee90a90e8db9f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e7645d373754dff7459f2b4bb3a87a2

    SHA1

    647a7c6865c2c4f059caca8614e48d38a3bf04d8

    SHA256

    9e616869d0f6ad7d757c4f0da70bd1d5d0229972b57f714552b347584c48bf3b

    SHA512

    f7ce581a764a6e9850dfb403c7f2e92d7de84576b5fcc5b3827faaf1966040057e1487bc8d41efa26ef61e84149b3f6d4f27eaa71b3c1e56ed4944aa6a9f11be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fe2e21a7263edac4b5f48472c6d52e3

    SHA1

    52a6523d6e10ef57102014446a22a8f55f6a8684

    SHA256

    649e6a51c21b4a9c5d689303dfdf2d6a4575243bef7cab9de0951acc1b3969c6

    SHA512

    516f85d284b2a7f8692ff443204f3f27fe230f24aeb75e856e09ee51f45d95c7ebea0d076eab1642c63de90300f69f76a781d9b2d26ebc35865512cd1a2476a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f499c4a00cfe17d35b93c78e6a8727f

    SHA1

    f38362ea09049fd217336b7e48a4536af0f81148

    SHA256

    c457f43526f2be940ff57cdf58f17996ace1b0493068afa6d19e480a3e6e41d8

    SHA512

    2aa9f426604787021c708eda506f8eb3f7593823aa7e2b79dce18ac466f9544d6a9fc8aa29a5962e028f4a280e678443a87f3289bd2ca1d60067be8ed2caeb7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70b624f9ed70742849e77deda211ee63

    SHA1

    5b469e0370437b3e98de74fc12763ca0a0bc7339

    SHA256

    e3365c44ddb2332b4e7d7316f45a210dd9ffaffe2d2772c8ff4497fed8087d52

    SHA512

    5589b45632041a5ae77ba6935a7443775e31ad6f9ba64292601a811818a618e98d51c9bb49586f91c7cb7bb96aa39dd1ce80a9587d6ef88226c5a65308fe8614

  • C:\Users\Admin\AppData\Local\Temp\Cab7678.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7719.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06