Analysis

  • max time kernel
    1561s
  • max time network
    1562s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    21/02/2024, 17:36

General

  • Target

    sample.html

  • Size

    18KB

  • MD5

    9942c502136e7b038e802f83d20c3ad2

  • SHA1

    ef09bfaa7f7791eb66d238dbe5603a99519c006a

  • SHA256

    5e74098c5293e636855b8af94f944a36e810ef492be60dd92dca12af5b3ba575

  • SHA512

    0b937548f1122e1ce3314d41a37f13cd49ad325a3051b549389dad63527896b6f0b90758b317063e1e8c23cf0dc16a49e23e6f6450399132aad25f415d3bb767

  • SSDEEP

    384:rnSaDpmReVoOs4fN9ylKeGMvU8HhhbXmQ75SN2weUPNVJCBXQL:rtBVoOs4fryI1MXBhbWuzIJQQL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2268
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2268 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:352

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0898b738acc453c327147c09d09f3502

    SHA1

    7365cbcca8c6eb05a20611f56819cd5435941b84

    SHA256

    02259bf46634cf2697bd3c9cb7eb180b2e140c2481fcccbdfbda7e4d86450ea5

    SHA512

    4ee9a5cc7f8fe522a10ccd39b45e96f8ac1c86cbfb2f29adef03e1663d677e0532ace405017217c1eb5e117c57b9dd8b4a4a4908dbefb95c08d6f55503e13420

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56ef07f6ecb09ed0734c15d3b3ff5ea6

    SHA1

    b5a98b6f2cc6082cdb721a7260aebdeb2cfc0ca3

    SHA256

    0015f0a41cdeccf0f57b315990bab1963e29bba33db691268fc5a6a9f112ecc1

    SHA512

    e0b610f5c1ab544e1f6ced5511aec74c45403ac6040648ebc17de88fde3ba3fbd380a6f0183f2d40f761d10e1b6aa0ff364265aeeb43ae5f9e1eb703e2f970b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76f77939cbfe7acd2fd90fb12d42dd0d

    SHA1

    9f680e6fe6ef3760df9838d65208a9585859b78a

    SHA256

    118fa4a52f38148b851ef8ee7f3f91a9aaa5dbdc85dda17677cef2423edb345c

    SHA512

    1cd92fc889c3942fb80d1aad387901edea19815dddec8b140bc2e48e0f929cfb68bf94f5afc2239fee9ccee9b94e2bd5ee01bcf0f7c2c5799e03ab52499fcacc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f2f9120e9278de374f6397c95b5f73b

    SHA1

    264fcd1b2640e21065ea1afe50d73d12e71390bc

    SHA256

    80dba827309eecc32628ba58a376f314cd368b0a34876b8d7d784f2b1f81bff9

    SHA512

    add6d8a507386b17ce49b601c9577f80933ae5b0d41ec253b8cbe6de20a4feb8a128d2c1b7fcb2fa1b15bc774c08c0cbad927a59fdd67a010cee7c8311243d38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d14f249ad6944399b47d9fed70826535

    SHA1

    c23f779e8446679c63b36d57beacf8bc3efc1ad0

    SHA256

    294339f1e81c2787a99d498fbd9c147edee7cc52b9e4bdb8445727da7a252d56

    SHA512

    ac4155d0a3f646e346f7a16b2785f383f062b5388ad88fbd3baa163c266d825a9b955a02104e68f4f9fcbf18f0323e9abf8d782b8eecf8be934d3c93aa50fc1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98935b8733f3823417c2d8ed1bf1bf39

    SHA1

    715c97cb432baf89f06da35690e5fee95e23407b

    SHA256

    24574476677ee9cded8ed11f912bad9fe7c35629db95ab17240d20ff6e933851

    SHA512

    ec35f83c9739758cfcf1f6a7c7bba00db4c3bf007fd292e372f61beba64e277fdef2879fcd235826937497e254c154aa09168ef6052763f7a850a6dbde3277dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d25d14947b0a4869aca40c80b677737

    SHA1

    32a3130a87f792c30802fd3853734e3c63c48e7f

    SHA256

    75f0a78a1349de3dfc522bc225d77c418f75ce169569db769acbd650da07c216

    SHA512

    1f21ed9c9f6cd9e4e7c4f254baf3caa9b10766669139ec9f1b3e07cc5be295b51d2f3784360da85457b4d1ccf94b3df6bc35bdcd22a041b4fe2fdd73827b22f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44de393c2b8b08a56b790f671b3cfee2

    SHA1

    5c04c624bae3b00a0fb391231fe12f7d8622d906

    SHA256

    00c4c750a4b3bcfa7894f2b726abae8f303192805c7b3abed01d726145048d6a

    SHA512

    1bfa50dae52d557d9ec074185108f387199982f3d760cf5d5d20d76b70c8279d1fa52dec155cb748796d89876d6ddc84961ad66a03ea982515fc3052b260c58a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be9e52610e510776a4c759baff425cd8

    SHA1

    1824b6cf6060547edd1bf40a8bcbab02ef6382dd

    SHA256

    fb5ee4ed15cfe2f2da58831d848bd0f430cb0f5c9e3f03f3e25dc0835b759c77

    SHA512

    570c91d6eec160c1755b5a467de85757b8bc382c0c8a28208692a6356bcc1ac3b166a7a25647cf0c5721d9ea8eb0684009642476667725fcf682cc56bbe91fc2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9761caad6f3e4be2291bfab71c76ada8

    SHA1

    5f4b9de92153d1082b96a7eed8b5d7a9442706ad

    SHA256

    a4c8673a5119ac686c38aa2eba917b4528d98854ff425199a51c1d90228aa85b

    SHA512

    7b04b233cba1b39cdc98e11b432ecffa3b606561cbc439b2ddc02aaa98b84d535c31d662fe58f789e6fdf068f7a69553194bca9f5ae8502edcf779c9b11f91c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48ddaaf617dd9cf06942703e8a059319

    SHA1

    59dc2dfac1e139c85c8dd56fd64f86616dbe5905

    SHA256

    1b7d04bd93addd5ee8ad98668b8f9feda94f4164b34c3e1eaf8e300d97b2e4a1

    SHA512

    c02d2d015c51130dc328733ef42f8d4fc0523dfe5774a824e026a454ac6225526d45ccbfeb911d5dfa50351d13d53e3ffd8f52f7c3da0e494443d24beacb26f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd052835a6f32b899ef89b8f479749aa

    SHA1

    82ddb2ff4c89ed6a3efa7dbe913437ec7753fdf7

    SHA256

    3a7d4beb3fd414abfe5a820d37f5bf40dc04fe6d728fe7f1b8801192ffa74722

    SHA512

    1c7033b98bfe291e4f7ea63d40a71969c01318958607fa36c3fb63b21696bd6417f712555d1b195eed7a5e82da72806da9c0dadac5759ec93b542318b4323233

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20a1dfdaa12f25c4392c352a46999e3d

    SHA1

    28dccf2cc135de4bb2ccc2f8c751994978d79534

    SHA256

    2069410fbccf6076962b13e0c91463b772fd603c5a418a93744370526d3f5999

    SHA512

    bc994b554211f84eafced86346d73c7438127b2c9341ec1df31fb79a84f661d5c8b8003a6d94c2851245f5eb96e69af07281081c6c8b66b5f79bc50f3bc981b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac7e6a671fb85eec986406a2a67484dd

    SHA1

    0dd46fc2803b60bc35318ca388c424e12b56afd8

    SHA256

    7b772730f189959265c9227494f7849d6f81de756872032452677cda0175bc76

    SHA512

    b4785f43464e8648a1188c89499dd5aede2e28a02fac63b90f2c84413334d46c99ff9883a8ef5b50ec85497ffcf694275444c43b46cd71921ff2c5541a98ca32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0053538d505b05bf130fd8ab3601e1d7

    SHA1

    da79ad3340166e9e4d82dff137e6834ba31b2ac3

    SHA256

    2fc825c8724f4fc9e6d677ee567f1e729daea3142e8fb77946be42c33206cc04

    SHA512

    08f9bb8beb9780489104e64b1f0bc8a35c146dc91129e218492d3180033f3cc0a62cbd0839f6c9c15020e8402c12ff896ffca2e0be8a7327476785b38a23df5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    870de1f329873c592db183e50d799f2f

    SHA1

    44c503dd72e5da3065898fbe87b5b7e69fa412d3

    SHA256

    3e09c7c247939e10b5cf7cc56b84655292ec8f6d7745ef81d1811f145b427b04

    SHA512

    91b679a2e20f39b39b75e078c938338d32eaf9c38b734ca296ff4e3d3abed71edd3aff0bd4e37aaa8c5530f5b1201e95ac6d9a4ad2a27a976bea72c6132168ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7650406c5cec03332fe346e98a6e190

    SHA1

    77b757776801e31bee06486cddd2812c5c4f8ccf

    SHA256

    d294e78a2d10b12ac602cc0657b2a5866d70467d01dc95c074fc26e2d6ae0da9

    SHA512

    d83c1fb48559a707561e66a4bd15140decb79b4628a663ab2c693e5666dea47609f277a60c41783bcab687f1058246756d5a92c7688f0ea94fb6d3871e505b10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45f4cde78622f8a7b99d58ae88b1d459

    SHA1

    47321fe431cd018f1a0da7bbb759748b14649a3f

    SHA256

    66b9c18fffbf2a3dc5ea2db0c30fe81898a87b95a1879a0bb078be4f421588f6

    SHA512

    a3e6527ad022467d4d319c0bb09b74037b6737eef652ae0c326562456ccc4865e7c46b9f0371820efc0259d77b499f09364f9e25ac9ca37e19fb9d636ca1f600

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    906cc9037e6f42621992f90f28c15524

    SHA1

    f38b3012f565148fe2bcde4267dfce245f91aaeb

    SHA256

    166a55db8b36d9916346c97eb17c033d03e533ce14252bf72a8add4ffa994a28

    SHA512

    9c9f82b1aedd1f8e2aaace41903614c8c9828789e9dc5a0307a4c42a1876669728a670be1d98451c5d8dcd05261cc570f7ae886684c23598d95c61fdd57f6ff9

  • C:\Users\Admin\AppData\Local\Temp\Cab3055.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar30F6.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06