Analysis

  • max time kernel
    140s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/02/2024, 13:59

General

  • Target

    999936fa6ff772bdfd5f9da75d01618c.html

  • Size

    24KB

  • MD5

    999936fa6ff772bdfd5f9da75d01618c

  • SHA1

    624f28b7286c47980d36c0620cef0cb344ad1139

  • SHA256

    e9af1cb3c1a88f1f7da8085c65ba5f2b2642b8201a9021ce85de62bc4407da77

  • SHA512

    3c3af75582757a1dd649823fb2554459a56d0f245447cc7991fe2d2e1750d4ba834fe6db3d46741fc6bb98dd49c418f2226d5e3b3cf2b742f8ea8deee2da46da

  • SSDEEP

    384:Mu6pKJo0lNW3giKXuPIhEcITHTcNEDdQMhOWI8L:dlPdZhdibFhvL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\999936fa6ff772bdfd5f9da75d01618c.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:828
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:828 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2668

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    34cbb17e57540b788bd3c09be88bbd1c

    SHA1

    02b9ee37d13afffed47a8f95b6bf69bf96eab012

    SHA256

    13047c26a0c11e3e7366d6094b69460fdde537816f2c182b932a8dd047dd3295

    SHA512

    02dcb68b3ac19e78d6f09fe9fbd628fbf44c8227e17c464563c7b82aa58b0f5ac8cd82b22fa4e4d5dbb2ea4639c300f6608e0709901cb54685f247f52c886b52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b68cc175d433d799a6f60c7048d8ee2

    SHA1

    4df161a7fdf09469cdeee07366388c4a0dbe958f

    SHA256

    7981024d02b9b2ad88943157a9ccccaf2cd14a511a058629ca905e6b42ff8ac3

    SHA512

    1d7a51caa3cbd309678b7a53edc4f9bd96c46eed775d694bd73515d27dbaf888808156077430b35c57da89dd43056511ab2473481df91de338e2f4c3d0764790

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9177b27770bc20790bc4b81d01e3ca94

    SHA1

    2530c3fe094b7b68f94c8e4fd12461a329aae675

    SHA256

    b98c245e35c1e5e713f58e64da8eb913c9c0fee3d92d591f6a6b11c051dc4b36

    SHA512

    c727d01be00e3612e33206a308e36a601e283b0a7f3368f351d461bdb84e54ae38594dd1e42ff7740100b133d7322e6bc524efab70822b8d7bf2c59bb09e85ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3d7b58d5a9ee00519a3ce904b1ad635

    SHA1

    7c53d5c6b85b1da9197764e1b19fd66323da7bb5

    SHA256

    d9937db412e5052f0b669fbb79f16c8f84e7cf3a3b0d2d42f7becd3054736571

    SHA512

    99af59c202fd9be15133e7ebc0f7e8ee47a957e426856838a95fa298dc6999ef1354ca63f1d2ebfe0292b984cfd0290a8a80421fdad87b3cedfd399014918c80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2a25c25c7027987148d2593887d7b73

    SHA1

    c89cfd0d4b334ec32d7aea1393dc2d62f095e2b7

    SHA256

    a939720a4c8ee02fcd95790a6c6d9cae80ee9e35219b758a2da4d9b52bee6db0

    SHA512

    7a7cfd4a8430993a1efa3b3ef4e170e15cb30ee8faea4f753796f5689b23f48e3ae22e01a531d8f347c8686b9e2166819303f478daa3650a85329fc069b5939b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3c198137ab3696d487b600437e433b9

    SHA1

    3cfe2832fbbf88caaf0212fe105e2a3fea53ea9f

    SHA256

    c3c6dffee3c4fb41c492ef4f22e11fc8609ad1e47010b1fd8646f832bf11ea97

    SHA512

    46f88121de0acdbbee5b79b5112080d20dc115192313dfe7696a0d83603f874e4da144ac3dde7ec07143804d9ee02275b488abd0817320abdf8eaafb95c8930b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cee694a1904894d2c7dd3d971a713057

    SHA1

    7fd70dd455eecf01c9ba3710674d755daab8af9a

    SHA256

    074b33a18d377b2a3726d08c0b6d40abf8a5a30c61f565d895c72547d3398259

    SHA512

    342f39e41b96939c7e59758881c0ffa011a0de119785dc2338a1fd5c9f6cdd917830eace49ffb233cc63027cb32678fd34b81fd59759bf7e526c22cce86da09a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78f86738e67899eb11a8657301839f52

    SHA1

    bdcf7befcf7d39219234903fc11023e93eb0b903

    SHA256

    c173e47006624c3a758b0d1dec196c6bffebf94673e4517b2aa244533931bbfa

    SHA512

    b3097f2664ee02e4b0af54070f7c6bfce669d8b72fb79bddb4d9f7d529a9a1f18aaecc1f26c66a06f0c8ed70e691598f0cb9438c8c584b942bc6ca9259a5987d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ddcf507bc427e183f22676be398827f

    SHA1

    a6367877bf96830c717138ec021e3208401f1234

    SHA256

    94ba9c0e1111e13ac20bbc7dc28355ebdf388a39ffea71d82758d83f5f350f76

    SHA512

    b9b84c9ec525dab6cf49feb662c1ea60b55693058d73a6f8be31e5b5bef752c6e0c8a46f11fa3f67ab665010784ab5b6c07344eeb4e62d6a4ff9ab63544d4707

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f4e4068c7f005fbdbe9b012c88c38ab

    SHA1

    e2474c73e07ee24ac7750dc8133f07aab3f00b50

    SHA256

    4acd6fc3a62649e4a289fdf7f54a0723420c44163308a14d5e70873f45bf0203

    SHA512

    a953e6e2b3a9ac5586de845d1b05c07b31fedeef58bef059943fd107e4f7250d04ceddb54e03bb6ed0a9487e517808818ba5aca826d76a8ef004a8c818019c5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3826ae19f474f7d5dd128db4e4a65fb

    SHA1

    464e8118b37af3723ecc28b95489da1b55f91345

    SHA256

    45aa85c2bdffb697672e4233a42a7ef14458ecf876971f63a400c1e7f9343ea7

    SHA512

    b3bdaed51109cc10280d4017d58b1b64a87115ded18936cc7bd2c500a5b76342415c6685aa6e2c7a2736420ba7b54401e4dd2adf9163d9c3dc4e7f45ac1b6c07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea3d22f027c148658ce418dccb775885

    SHA1

    8ebc0e4b7c54be76bfdb3890143e6aa64979d2fa

    SHA256

    d50ce7999e22539372bd8e9be34efab8ae025f74a6dc5988167491c9226a8930

    SHA512

    c232116e74bdbb8ba0a8bb4c528a734537e180e014f557846af6421b875c6a06275b3512ed81992a8ade6ec187e04b0f5a0204007250745fd0a820aedccf5b0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    583bbc24e8ed3ab738de6be21cf30216

    SHA1

    988fb6259e56662c6abb172196b9fd15d7de29b5

    SHA256

    6b4d23d5694af799bd286252c18f5f62693fe342bab3b4b9a5b364838416e98a

    SHA512

    6c985af07d6767912af22e76bc69065f36d7d09420e46354b9b2638f00d4923c3b1e95a971f22a864283a790655b7554e85ffd235dcf990cc6ece76346de8fed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d38aa99a259d5b212d693eef63d2c1f7

    SHA1

    786cb9966a16a28ecae4402616607d6a92d6e641

    SHA256

    be8ad1643eed4d6de7bf83fc3751d26fc490a63798b354502634c1b532075fe4

    SHA512

    7c5d9e3b43825f3fc8b48a8c6137c5f3fb8382db48f557638bb2167d64ac84bc040f3ef0254dede950e6551cf936b700a2526c0f8e09936ffa3ba29f375bd836

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7085fe3975ba95b392f11456db457228

    SHA1

    0138d1bb0b564a9a6fa8e9843869d7ea5980fa92

    SHA256

    19ca408dbfe9791d7b1b7297805ec19efde8640ff1d6417da7c125504f4d1af9

    SHA512

    8b1ce144ca6e28ff036a92729059e543016ad65e46b2605303bd46ee3e456c3b3fcffa5bd366e8924b41338a01b01774796a02f2b5fccffeff417aab27a591e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f29c038055fe165a3f0bee59d98684c9

    SHA1

    37221b29f5ecb788e848cc5eece5dd62cae2fac5

    SHA256

    f734bd69dfb23affa55540420d990b49f6759093ae7bbddedc71e02a39c3fa1a

    SHA512

    57b40829438ee022a282b184a8c4c78b0bb6337ab61604755c8b1191d2fa22924747b17fccdad52dfe7d54f959507a060a0eac24d24635e7e0c96913aac750ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed84047d784aeb6385f6be3eb163b09a

    SHA1

    ac813ac63d95be8f5ffc118a944953a272316a66

    SHA256

    985b215c0903e772bcede453520c0acbc6c4c4e249a55f243059680a22dbe825

    SHA512

    6cded4c672ee79cf2a23a2d6e1c886c1ee65b26603f43c78ef381a2043ffada0ff97c1d068dd757e1eef5501fd22735f0e5b2125082b38ea3cdb28885f8806d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    853627cc53d4420c9963b8c2af556613

    SHA1

    88e8f8e3bf97ac4fcf1a4db8181e964cf03545e4

    SHA256

    07bd52a1e607846782c41721d53b28ad1bcf86bfafe0882bd740f4b686ce5355

    SHA512

    60840286b6411dd459a3d275858ed4c3dccf59aca184553b2f162a4522a04299701b62a4dbbded52583958244d7fc3c4195b67e68081cb082316e15d3562f3e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    27cb23d43fc0c502de1c453f26181015

    SHA1

    a358e4018b16f0c9adce81723d054cc7fe377b9c

    SHA256

    0ae3d5e982a359a254b5e36a249f29fc8a45ce625796e5d8dd27eb3e5897579f

    SHA512

    dcae62f1fb9024c99f2c7962e6570eebe39d4a7c378fcecbe962662cf046df5afc16c621c635efdf6227d3b1e43b0d879b8cfc928dc764664b682dac16b23ed0

  • C:\Users\Admin\AppData\Local\Temp\Cab3478.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar347B.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06