Analysis

  • max time kernel
    117s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25-02-2024 04:13

General

  • Target

    a2e178cad83b2a5e8c6641e96653e3e0.html

  • Size

    6KB

  • MD5

    a2e178cad83b2a5e8c6641e96653e3e0

  • SHA1

    7c5c97d219c65d7822b57e7b48056c354a0d03ff

  • SHA256

    7e85300741fc68b580a96570b134d283ee4990d231d26294fdd1272be910315b

  • SHA512

    77ee8cd46e7f4258a13d9868b3cb7141033f66c602f91ca8c65d0abd994004e915894057df271d5f0620b3cb6cfd780b2dccd743b509157c90a2deb6aaa67312

  • SSDEEP

    192:Zy/O8yw4RlDEvHLgszgA7DydXDChxiqEuf:8/O8yXRiLgszgA7D9iqEuf

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a2e178cad83b2a5e8c6641e96653e3e0.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3032
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3032 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b429c6801c76f1091f844cdb04244f17

    SHA1

    512cccbdc111de33e4c2d6bfd2882b0f66cea217

    SHA256

    eac11557d494da096b538a694db8ce2754be929e58aaad219fc56d597a26ac8d

    SHA512

    ffc99089f764724c7a8c65a9d6af43c01c041eeadadf91a0fe68e98a07c634a17776d5f657ffeb36d67a6fd817682fdbf173f6af673d569846e18677dc77845a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8471a519211434b588ec5cbb188faf7

    SHA1

    24c94ebda2ff2e191b6baa92bcec349e1a7853d6

    SHA256

    290d4388dcfe22e601f3c73bf9c07dc15f6af41a385d8bdd52421537b97bfc58

    SHA512

    e1b7bd0dc4cceaff36406c10cdc7bd099d0022e3214c7ef08f673568b85775c4232e64a2675666162f5ac21822103a40915062a819b002e39d80895921271119

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d492a5d1548334b6b6d112a0c522f8b0

    SHA1

    28a78d4826e3aa82ea50e3e88eb0888ba317f87b

    SHA256

    64483b44b4f0f91ca3f0a839705113691917076b97d00bdff6573a5ff3c80cd7

    SHA512

    f5927e923f047ec15f6c8de472db17da1f907f73c2f735b19af4e614899c429d87ddcefd41c68404c2c6cd77891659a208e2120e8a9b974f8fbe8f0166776c81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f8879641ad19ae99eccdd8098230b8a

    SHA1

    a3d87d4b43a1a947c10a04040e900799ea16e29d

    SHA256

    937a858ede849a76eecb91bb30f6ed2165f1b7d24801e73c40ddde64878006bb

    SHA512

    3a7f4ae9a2550e87ff52dd6ee81d65398c4475050005acdbc50a8d9af8daec9638576912e5fe5329f78ab9c2b3145624a8a63533fbff7dd897cfa25e2c685cf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c14daac8a37f976747fb155012f2657b

    SHA1

    e9dfe95fb0226baa345d3d3583ec25804a639c2b

    SHA256

    5ccaa0ba32dd8e5f636f3d52c023d33f7ebdcb59718be9f18ca9252fdd06b7ea

    SHA512

    55fd6bfeb69ce68133a068aa66756af1748116e6ea114f6d5f24bbd76686d1045bc3c30ff7ca6cde8f09ad7c39b1a403db358596cb8886f73f62d3716fea6f1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c04124570d874a65a2e91f142299f7b

    SHA1

    bc10075d23cc72852135a13ee8ae0aa8a7b96871

    SHA256

    c870db0b91b98e9adf22451ffce3c245b3f9020fb558302a370966a9b1de5a40

    SHA512

    ef199efd0cd1f6eb61615742b4c66c4f8961d1210d0ce670965bcd7877872540030dbc2acca8f11be1109c7f291571d65e47319dbc526c909754e22b34faf5ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    594aee385168cd13295cd5608eb8d4df

    SHA1

    d92ce6782930cf07ca7265f8b206beb6cde471a2

    SHA256

    5a1e6e15d0c5764dc729003ce6eac92ab6d9691a5df1d6c00b64eff86f6da39d

    SHA512

    984c3e5b911725fcb3a0a158c48124c30e1c6a8d94bc163e6d437b0679a79fccdc0651ee0c6048747cbeb1f70639a143b1790b6940f6845c2fc19ab1aea878e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52f6c34cf1e8590cf7916253cb0147d0

    SHA1

    5cc2b7e2ad68a5c8968353ef15beb1a65e3ef249

    SHA256

    a7c121eea351d0fc35e7828e84ed82cf4c4785d01c711529d0bbd755db313f3b

    SHA512

    da36a8880cee8b992bb9f03bec7f29a908bc76c967f46c37ebb4440528ff5e03a06aaf62c4f2df37fce5ea9ca39b020a29e484512aa16b32ae2e42e2fab28c06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aef237093b4851f996d7fa97534a713d

    SHA1

    601336aba1f5a3dd49b1fd64e2fbc2c14115be95

    SHA256

    d4033abb8a02e4d5d7b4057a1d7750931e05a360fbcccde748c617d5e5fefc50

    SHA512

    7039caf2521387743b61c8f6d301f7545e85ccb3b7bcecec111b441b7525746e77cb67abd84648547aaa7fa1a43dc74983d9d5cd80252b186ce0ac21cbfc0eee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3db75c3371261c340bc8ed6cf4884e6

    SHA1

    d45398674289e1b32f236524d351d88648604bc2

    SHA256

    6a8d8853148803632bf18eca8364c733cb0c075f86da083809d1f05dc269e6a9

    SHA512

    d257064f7aa798253dfd4fd9f45b810b121e3f15d8cdfa0c395b14367c897c4f61dda600750f0c28669b19e645464d84bcf1e751472b59d1118c9a07967d8745

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6dd5911ec94db6224dd3545bf7c79b28

    SHA1

    212b033ded409300c77a60baf98dca30e41dc45b

    SHA256

    549df5d78070ae4a7e7f2e96b8f94e9ef636f1a5e81b20414e44e19b31b160dd

    SHA512

    338f66d27d510708bdc83789075b709b7cd2ee0e27212f6541d175cc9269c783a3d18e57309ce70e15868efc602707e5ad1b29176ab487b66ff216a08ed0c22e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9797466952f2257762c035c4bc516d1b

    SHA1

    76fa904ee29e43580c830d305c45c60541e57694

    SHA256

    149f3d61ed95e068a33702acdbe8259b41297176e6e371976b8f7859bbe1b595

    SHA512

    a55ff4fb62105a24e8f8cdc3b4f0a7ce86c4145586a2d49e33ff5e3ad568d03e46d5e4d90f7052341fa0f13a77ad80ef38a805238967aab6680ec4f9b15d4719

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e2fe7f82c2d0e6dedaa773871cc511c

    SHA1

    5c50359f75b3be7c2f4bf8a45358bd1f384641e0

    SHA256

    1425b8aa51c924cb805dcbc62bbf50cbf4d8dae7ad585ff845df0924867db831

    SHA512

    cdc2d65cc8088cbddfc022d3110bbe92d07a741a2b7265c896c6b8e9d8f8add723f771e74cd6337b13b03f21b20b419289c0551733af95005b244d52976835c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93dfd58c4968bb55569c88a655fd6d88

    SHA1

    f52a696cee4d1660ec8c3180612c98036811cbc4

    SHA256

    d1cc67038a757e4c0300b28e44456c1008cebf06238972dd2ea40921716af0a8

    SHA512

    46524d9338061d7a7af1b8df7f07db2c1e1f2d1b1c90d999207416c5aa048e31a93a0470a814c01203c83986e5502495e2395ed2c89208c8b4f6ac54ea6a6b4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a494b45a4a3d3065ec41ee5c7c47c3a7

    SHA1

    d6d66c61e1d0c5bac8da33fa8c7fc00bca8514ec

    SHA256

    5395da8f980d89ce0c1644a9995bfafd581e314dc6a0dd9360b81deb87a71364

    SHA512

    6c433c1f25a026113839eda3534b04f1a3b1f0526d7a569d9447c3950704140b23370fd91ecd71dbeaba955b2a93844f08e48ea70875bbbf8616d9f247875208

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96412d341f20e53e6b1fb2dbc68c1553

    SHA1

    9e462579c0b65944e50896a7b79f1b178c8ca194

    SHA256

    c82208f82ce7efd0d09c5fa35085c369b1d407d07b28cbd203731ce937787dbc

    SHA512

    1ac302cd006491bc6f0c3171681fdc75f0ff913125e1eedbee2ee32760138228acfa477d1a5fce0997014e834f8f9e2c2379119dd4faafa5919844a781169568

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23a431b85d8bae1a98acdd5105ec5a69

    SHA1

    f69457fa411d8d7a91709fce5278e9f49375b10d

    SHA256

    2f3a72c3fafe79877a61a69ca03f2bcca4a67a6902252f129fe7d267ea2b50e6

    SHA512

    88c618c9a2b085b32a6ae0f7b23bfcd87c61bf657fa826ad7692a997badbf76ce5d699feb9ebe4b2ee3d2b28a6bdc5cf198877aa7306d0c61d529bc5116e33bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e567e536314d732e9457ff6949b6b72

    SHA1

    b969457bb1a7a439b80f311a805cff348e577504

    SHA256

    28f6d17973a7fbacbebf4412130abe382b528ff5c7fe963886a8fbe9715aa551

    SHA512

    2aad4aab5184af7052594c35288d60f54631af51e3ed24a562fe370898cede33f99c0793bd5deafef3d9caa99839a699bd52e03602df133c05e8a25622c3d05e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b1f9523c5bbf8692f144677345f8770

    SHA1

    451a6cb4bf3733342a9aa599ebfcf48e6c09f6f8

    SHA256

    061ac02cd270d75106c4a36dfb126fba69f324539cad5e10837bbc22853bbdac

    SHA512

    fdb71cdfee6c99d921ae61fe7438ecd6756deaf6985357d45b21daacf6d4cb180fb7a92f622ba32edd0065c4f45224511be36b366837e9579c69921cd543bb78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5dd56a4c17c148c5c0fc87f59b460759

    SHA1

    f272c2aaf4d7c984866489c4b7b028af7470c02d

    SHA256

    60d253bd7b390b6f3a964e71d35c6631b88ae803a0c29d5bbc4da9fac90b8388

    SHA512

    1a8bdb3efce069a5a44f33c0b90fcf87ed3236dd23580667284c878a02658b899947414051235a2340aee70736e004cc22ea47598978190069f81cb13d62ea83

  • C:\Users\Admin\AppData\Local\Temp\Cab5C74.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5D64.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06