Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/02/2024, 11:38

General

  • Target

    99538d2ba7aec4a49493dfb14631ce8d.html

  • Size

    6KB

  • MD5

    99538d2ba7aec4a49493dfb14631ce8d

  • SHA1

    42dd6dae48ddfb2e729fd9926b3a4a14602cf659

  • SHA256

    4f25c80bc05a6eda964062a52cbbb1ec72bc147f7847f82577cb4e2836240809

  • SHA512

    563fcab4269eb61658f7d32b4c265c76427b0f1a80c3beffb206878d4ef55dd4d7f168176539acab032d8da7790dbe1183ba0d3744f0d3d5f148b1cf7d86f05f

  • SSDEEP

    96:POo5C8kFZXmtVNHECHyjQf4STnUwHxD6PzNufsOkAmCqEPbNVDD/bPEr:PvGXU/ECSjQJDxePq1qEPbrX/TU

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\99538d2ba7aec4a49493dfb14631ce8d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1936 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2716

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7e0fad438bdac351fb5ae6f0823537c5

          SHA1

          32b67514e1df720ecc6acfdca692b185e2a424b3

          SHA256

          13cddf80a761773a2e289c6b51f8389ab9ecdf47c61caab8648bfa8429e9c2bf

          SHA512

          443b2288d880ed32e34e3bc4c0aa3ff315c37209619849afb30237aa8c125c031ceaa8011b6aac56023609ebb706fded37a1d190c47267aa434dace52aba34b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          17c538635067c5f355b23b5c722f750a

          SHA1

          cf70d85e122bc1ce8dbab34ff231b46c0df8a1bc

          SHA256

          bd6bf99d49ac31685deadf848c0c1417af2b27dc32ead990d76cd387232a7eb7

          SHA512

          d3e6e974b3c0be03b16bab3f8e6a372c4b5b874737ceccbad96e8447b5e877452ae95de262972eed1baed832a65d108b97c5cb4545600e94636b1c181ce33a2f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1caa9db08fab50df1a4a271b5454615d

          SHA1

          ed41935e1ca12d9e8c12c2b8034f2b20673f0ab6

          SHA256

          63e71b02706f07b27b91646666d66b0664f47caa27abe321b702a33accb2d949

          SHA512

          43ddc4f1c5fc1aa0f62972e891750cc4a4fd08dbee8ffcfe81aad94602e69eaeb2aaed0830d4c1f76da03f7d2b768ba46ef3f5806aecc4bb67b2ff20a80388d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          634e8f5b9f29be7e16785f3bf7b5a71c

          SHA1

          e9e29701f1183e324bd04b85f4a1355cb85f5c01

          SHA256

          13db98b789d3310eea4176a88fd319c3488f8aa1ba4828ebfb524a689458b752

          SHA512

          8b6d6d203d3e091d8920c73214fe579f0cf530fb9fd3d38187b1f21966f493bd3cc2db37acb92f449281649afb8bc6f33b587fd18346ca6c61490b6669816a9c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3373373f458108191efc78059a93369a

          SHA1

          6e68b852fe315f4c42feaa1fa42f8f2f5ada126f

          SHA256

          eefd43a1ed09f5d9b426a04c14a0daffe32a267b5972ae984c7f12e5f3800dcf

          SHA512

          a2c8cae5cd6c994cffe14ed894f049e5ea1b92d09a564a511865727eb19dbdd584a68336ed2dc18c48b826dda41a1bb86d75c195155609c46752f8da6cce0be1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          391fef29e5ec7053d02ab6b2815da74a

          SHA1

          57a3fc88188d5a98410c1896ba82d3dfe411c6c8

          SHA256

          b580435c7e414a8a409be193b3ef4b2551bc8e9443bd2b3cb8fa09c77543f9bd

          SHA512

          61da279020b0108352f94955bedbdaefa84c59e432fee28c02878158acec96361542024117c7b959af4d3c838ad34dd61bd33adf7c344b661686e552aa7a93de

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          56b25171b7e255e5a7607ae90bdc7b09

          SHA1

          5c82920879320af8722ba956cbe1ba68ac00004f

          SHA256

          02c8244a65090225c8e9dcb8dd925b55cb628de1a96f7b2763bbb812b997af79

          SHA512

          f782a915e8ed2e3934409468fd2062c67b7d4141ce0e6f40f9bfe3a682723dec737b6b6fe924043d71b6201d9bef5f2b4eba132a5ffde4faeba51ba469008aeb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          75cd0ecca8b7586d8501c6955cd2ede0

          SHA1

          18ed37452ff5bd0211409af19617724589f3106a

          SHA256

          f4d36ad3d9fca875f74f6eb410a4731ac5bef9aed9713c9fa65936a7aceee1b9

          SHA512

          e7d124a809a662584cd668e01e464f818d65c24306040a4963d806ee7a00c4243a8136115bf04cec83af106cd04a618020aea0cbc4ee65fddf53a1f62c6aa689

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2c89ba6944c5943c4dcca02c5ba4bfdf

          SHA1

          1ad89efb7ce720945ba5feffbabb2518561d2cea

          SHA256

          802bcc6e17f83d5189010ca93173fb92c008cd36ecbd3778f847ef84314feeca

          SHA512

          491a5ffc38c5436d236c3901cb0efca459a75518a0c6294cb37c3bb6c960fbea70bc74709326399127b92ac3930723750144d88d315e86f265c3ec6c5f51a699

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d91e3dbbb0fd2b6407d38dcc9c048b8f

          SHA1

          4afb89a0d6ed05dfd4411f27bafa895aaa5826b8

          SHA256

          bfec729d93866be0b5612b5b26b3c7018ad1c1c62375827eb343b99c584ca6c1

          SHA512

          ff2a3b21fca22a18fd4bde1f6dce71406e94714e136ea497fc1b275ed368cd9791854d82081792521ee3faccbe6680fcee5e31596a5cbbacbe899792d7a770e4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cea13d9d042ed9547eef1abbcf135018

          SHA1

          9bb84cf5a3539066815992aa62cec090541d6b90

          SHA256

          e6568182c72aaaad1cc506e66a5ad5913afaceea1ea6d73a0086e3b2f5d0055e

          SHA512

          639daee6161bcec43ff6d1041c522e98921c3cd2d5420d1ca7181a6cfb1442faff3cf0e6b817173a8eb1346a7a0b574a60a9ba030179b6812e4ca812a8a6d62b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3d993c5eb2e709d5caf5c48a1d90cd41

          SHA1

          7211b68ab80ca7dc1950ae9972dd142a87b2c0e3

          SHA256

          4c4807d4306fa1aebc3786931de78e3a733e813ecda0770162d8dbb0f21d5c00

          SHA512

          f803e7b11591b6e42077c2f722a3cb0ce0f7a492c9817be3201ac83e1e9742d0390a23c403e4a970fecf9779079849c09c40ec70ba38a6aa354e85ccb3438f58

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3c770625c3293256844f1a66f6f9021b

          SHA1

          497f0ef72f884ede2cfdcc913d8e1706f7737e93

          SHA256

          4eb8932da225ef47cd394de265e4fa9404bd537ec0a8efea4cf95f003dc05e72

          SHA512

          48d264a4acebc476b58c6affa63206fb8639f5d7017e2615494e18e37d3bb0e517da3e6a3455ef4d0d5139d9ddbd3ddf89931ae369905b74de2568fec8be83b6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1321f1f38866dcf7b698097a4feb2100

          SHA1

          cb172776ca477907ffb86bf8354b9b2bb7a8a2a8

          SHA256

          5ccaa594e7a370e80d1a5558bd28b239efc868d4982a728bc7ad6b6d1030e42c

          SHA512

          94b2536fe0345a426200599625e233f122ca48ae6e7a0b5691532774178ceb58943fa9076486ef7f4ee68ab610896af52255d7628b87bffe927ce3e5b3fe4898

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          eb3966a83e11d9c3d83c21175940b496

          SHA1

          754f2e5f620b236811cb896dd094a3fd3a188a27

          SHA256

          8751bf655c2db3e02ac53ae581d52cd80eaefda16933f8d04ce5d58af5c52c7c

          SHA512

          abcf1f3b4dbc6cb47a7cac85f400276d51c555411e1d49d7fe1d56eb417c750016dada62f1bb2b7d1e97533ecbb76c8d846f7b643c31af01a80c82f34ff63185

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a48856bfa72771a6581e0bcdbbde7860

          SHA1

          79815023de5a1cc76b706f2d6d81798ee5481936

          SHA256

          e8890bf839c02e7385b379a551de537bb3c9867c6a17372f12badd463d386cda

          SHA512

          d005a2c43c0b66b919eb5a61be6caaab5268555a3549f4e6b6cd2d9ee15cdf6d2621239dc09fe08c01112f0b040e33714d1d25d472de41c68dc9b9e82c6a9b2e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4d04f6a0550fce17d34e79988dbff9e3

          SHA1

          b89a7951d1acd56f3436dbab7d1d4287d70c5897

          SHA256

          5be00fa94d91a0ddf34ebaf16098438e6282c8a76a20e42b9de0161527f5229d

          SHA512

          fa341242f56d1e4ed3b1272f8309f7b67cbd6c5b78b7d966f6504f37c860cb37506993d8a280281ce72492d6eee39d8bf23f590272a37752b1733701fc86990d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          57a2e6ddfd116955a5f6bfde665e26d6

          SHA1

          fd429191b30c94ea80b3d769d6e4c45a1302518d

          SHA256

          3c0c4f5884181c596a849bbdc56b00293677a80f76f592980f24342ff71fcec7

          SHA512

          883c522daad4436a118e8cc41f7b42c95014dc1c5f1a7e5c4e156236a888575a5253287c9428f38bdcbde055c1b46d4a17c8f6746fe43f2cd8e403a72057f3f5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f4f9eab88e82b2989cb3a6141f8782e2

          SHA1

          4ed689b00955496827e4f70b5b9556f759d4edd6

          SHA256

          06d8eff0d16ceb7469cdf4b8d6c65ef840f82c5e14fed122ca14e8d48631a6ee

          SHA512

          1743bc316204879088fe19220d8709880077664dc7251524b4e6ffbffac922544722ddb80747654438ad81b80ff6ada931367bc6c780be2f1e19fe2d55c9037c

        • C:\Users\Admin\AppData\Local\Temp\Cab7070.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar70F2.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06