Analysis

  • max time kernel
    121s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13-02-2024 12:15

General

  • Target

    996747ccd5c609b47bb180b4464ef6c3.html

  • Size

    350KB

  • MD5

    996747ccd5c609b47bb180b4464ef6c3

  • SHA1

    82c2014401f7b1810634bf3dbb00aeb6a42865a6

  • SHA256

    cb8edca0a49603f7351a277c5daf59ee26fb17de38fa2000e71012389dd866da

  • SHA512

    ad44d337ae6a8a9e148bd747f33d2650c77ea134554dfb56a203f098ddc6f2e21777ef03f0a72d7f5673bcefe7621f4bb1d42a1313a72046908f5f3136c3612e

  • SSDEEP

    1536:8KlHH0Gn2yMtLyMOs2pvuipvrcr/yMgV2CyM9MQyMGTHHtXyLi+rffMxqNisaQxx:/eyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\996747ccd5c609b47bb180b4464ef6c3.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1208
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1208 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2408

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2770dac08c9364b1da9ce0174d44479

    SHA1

    20afbb82e488eabb48bc8e8027abaf38341dac3e

    SHA256

    2132ae0823288eb96e0da18d815e08021edb5fca29eb95ac5551c767b524da16

    SHA512

    5acd8236dec38ce283b3e3509c06589cdcf519e56d4ae9932654ab2670a1240d6e49b5c4013c122e96395c21bc6b499a7c504db0b1bb73670dedd128548fcfe1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02b29e67ad2ddd10830d22bf69a9c62d

    SHA1

    bd3ba935fe22aa9811aac02cbc4e38465590e223

    SHA256

    a9ef73cc6434e22be077816dc25c2be8a588e3f872bcf31f077be4b6d5755e65

    SHA512

    86380b4ffd49aaded08c18107ccf80e3147b77189c9e0a7420debf95e33d7284afbccddd51b266bae4b0560cf01c5dcce0d8f4d327fd70c70b8fe5cfae504c9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67a0093c1e93e9b40c090a6fe31f249b

    SHA1

    25fda9061315327d1e8aa17ea686de3ddd7b13e4

    SHA256

    b0936fdbf50fa2dfb9e87136a429e7925bbdd9bf18b883a1832c42039960619e

    SHA512

    0736bd4422f9ea9d728e814944fa1660eedd3b01e7a025385eca0026126bbf3eea1fb2b02be94900f1a6d69001987259c4200a36d95df70653c7ef98c7c06516

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eaceee1604f6ab5c39789ce594568001

    SHA1

    bf0a852ad1a4be939aaaa1aebd2331346e8d238e

    SHA256

    05ef2f9f5b64a3f3b474d938f99ac55f8585ff64fb4f1837cedb14ebcd74c6e8

    SHA512

    fc69b34d2a8cdb8f66eea50e855b063dff27e8406305c73d8df17907cf2809525900183a8343e8274704d46fc5f2c74e6e873af69c0609e841772f5d95c0297d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc83176450b32bba6f617b3e79d4e6bd

    SHA1

    16f855e17e6a4c5a7a715cf12a22b5934ff59b39

    SHA256

    1409a2b4a40eac023c524c6affccb8e364b6b88cebb446bbb21c378e14f24ebf

    SHA512

    2eef88bb75c1526b525b897f376a5e552f2f1c0edd06a32d794dd6a571b64e475b58a8f811443c9f26d17201b3136e82f4b036d6ac7cde7f4b75fc2d0a725dd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8839bec52e406cb52c263aa94d038502

    SHA1

    67c43fd6ef91453df86b8acf37c30050f699d840

    SHA256

    b01fc26d4ba0ed03b900e5c0bd11627259e034919b22bf490735dca7103387b0

    SHA512

    84731352b4b777d52b7c0698ebebc3b688abcc0523d095e2d6463cfb16630f33a54dc21d1bd53ad7f494cd7336141c77fd039b4070f1b0fe0314f323bb8f1a08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3bed776c42eac9067fed1b2de7ebc49

    SHA1

    d3147d415bddaaa661605569c9a675e9009774db

    SHA256

    788f1417574ee2559b44a0306c6ac0b58312f8c1e5ce2da5f76fa8e1adbffbc9

    SHA512

    27eb87d5dbbb3c166fa5c656423dd3e87663b6304e1e10cd9c8abce9cb472d35eda50d6244e8760f2cb5bd491197c2d2537295cbc97a9293e4e78f2e9e7cf63a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    344aeb450eea5511604aa2e481426bf1

    SHA1

    1853d43b88e174da3dd9b84be38bf02858b7f8f2

    SHA256

    0f1c13de83844e52be0a0fc1538923a7f21bbab20aa31b98c9b6b48900121b17

    SHA512

    7b4069edbd5025f508b4dbccd9e2b22058a6e7b871dd109cd8b4d997bbdedfb98dfbe2d62791809063a85426928e54b418c8fa9348d53eb2bde8663e9f11caaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee215fcce35f925852d1c069ac26c0b3

    SHA1

    f8fa1112495077b55c9db9f9ef88f964de2473e6

    SHA256

    4b08d1bade90e3cf6db4257b9df094eb35a411d485270784dac054068d79140e

    SHA512

    53e833093d5bf1de808d56a4beddebb74068e462a7fe7744bf88f4b82e33b3416a54c940c6e44d835b666d392047721ba541308043baf0d8b39134e850fa318f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1067887799b1384baf8b59f9d079b65a

    SHA1

    5aa221374ebd50081a225d9be0b5b75182454aea

    SHA256

    cf17473d8c6b971f5e67ca2df90fb022fc7d90b75b643b8ce9a44d6935ec2e6b

    SHA512

    c194fa792eafa7883a36585e9edbf46df6e8e6146f6709be20c759b704c10192869bbbcb5a1b19a4235f5bc564bec98af0afc719d7a31d7eb57673395d5b79b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ec29989aa570354ce15a38a8c1eef14

    SHA1

    1f5d53b7caf03c88a294b36fff53f19c5c99e664

    SHA256

    9f3b9864a555f049d2d32e494493bd1f91ad73794d3102155f84b3a8eaaee42f

    SHA512

    82aa49893148e3f3ed6409f80da755f1ee04996b421a0d7f66bac81759d2733f40e62dc663c21d6e030c59c82eaf71f2acc4af5f375a0ceafdebdbee76dc1fa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2464890b53bb9ce27df50125b69dd3a3

    SHA1

    4e16320d53c421f285763ced90fdfdda52810151

    SHA256

    0879897955e7e8c7c878e2722cd252f9faafa75b2ec8c82b171d0eae04ebe25e

    SHA512

    f98649869a7a66b9f64c075bf5e9e5c81c278af6284ec54a502f0773efb5546205febae5aa24a2871736cda83e90ba9e75fe326bacc18e99f1208764a80e3ef4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    529e71880ebbb97364a06b9de7859012

    SHA1

    ad43bffb1dbc9036f91750579644c1ad8eda8d61

    SHA256

    00a312302853bf018a5b8c05ff43407d76c100ed034c4ca2123af19ca3717891

    SHA512

    f958fefc82a07c603628498ec615fe92628c0b378191e8e3242eabc32bb029d910229939402ed2d1207c812ee839c35a4c722f2a53acd67386ebb23978bc6cec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b7a2c945578db6e7ad4d8f75332d097

    SHA1

    2df68a5778f2ae2abcb4e530396ba1c3e293acf6

    SHA256

    10eb0ac1ac3727dffe18e6d29807790ae3534c7d96f44527699dc88b83cca9ef

    SHA512

    cb078c8b62b224557bd771725f50e376bcebae504eccfc698ee645efa134677b69cfaaad13a1a8fd35e3503b21d71d6e0388b7d68c882bc8e867d9058d9fe3ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cef090dd4ed85144455514a9c560206

    SHA1

    905add53cde06b3fe4df4f82f498f01411be9cef

    SHA256

    f27f2153867a3ebb7700272e8b03e808af71b2f548843e5564b64daeb87b98af

    SHA512

    96e28ecefd312aaac2a29608ba991b882cd38c0ac3fba1f69f270ac21cf3edf7ab74e2a3ff8d38293b5dee7f147e0d9ede5137ee6a02316d6f3e074a1d86cee5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed2e6fdd4b8cf420f50ed28992beea39

    SHA1

    b0ae636b07087ded96f476f36e3f377cba30355a

    SHA256

    55a3dabda465de2753f1cf716d18f386eda1697e13722831c15b9dcbea037d8b

    SHA512

    84f77e1e2b4cdebe2735942b37473d891e81ce4c312ee72b9aacb6c720d7368a8d65051a9ce3a29765ce2e97fe46ee1d6e85c898a30a5fbde1fe7c2c66c0b898

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70724f1cd32dfc0f6787dfdff091828f

    SHA1

    cb484fe85acfd27a449337039af9bd3a13895fec

    SHA256

    d55a4ec44aee2898f319fc8c66eb5ef8c229a600a2328e6c9be52caa13361e66

    SHA512

    9e02dfd41d8fa5460c1c5199ecf9e71147120a4b90b615a50a2fd03c8507a0213fd19270b5a73bb774fc1467d696c29ca810a8ab8dd70d08426c26816c92b531

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4598068fc7fc36a177786c3307ddb5c

    SHA1

    3668a223c8e8fb5c1b76cf067ec5490a5eca82e3

    SHA256

    3b409b8dfaf77fd66c5759a53d129e8a0cc4e044c10deba13bd1686aabd63d34

    SHA512

    5e7f19a59e61a3ee2acdc0e6a667327834fa0446bdb7f11bbcd8b9665b115d6cc80fbbd53447b3211a2d7e6d3de21944bb931b0e9d71755db2b5f37e6581743a

  • C:\Users\Admin\AppData\Local\Temp\Cab100A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar108A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06