Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/02/2024, 11:01

General

  • Target

    a39d0702677fcb98a3f40ed2910d789c.html

  • Size

    2KB

  • MD5

    a39d0702677fcb98a3f40ed2910d789c

  • SHA1

    1b3d0eeb71484a5df63aa0cc4474636d2972ac82

  • SHA256

    12a1718739e3bf679ccb526fd3bb64628263e868a70213933061f228b2277c19

  • SHA512

    24a2e205fc5987bd358337030763d021afd60ac041a0ed12e18c78a4d6c718e4e8244c1afd2d378767fb3d0d53d140eb10aa49cf63a83cf5705d5eaa4daa2923

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a39d0702677fcb98a3f40ed2910d789c.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2840
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2840 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3000

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          98f3f94567772102f3035d6430d353b0

          SHA1

          2d83cdcf3bc41c79830e313a5b261ff0c74c9952

          SHA256

          e9362f6ca2738fa75b5ed11072f1fd619f7dc9ed03e54cefd03319196060c08e

          SHA512

          aeec14499d8ed6c39ead312ab4260cc0a6c16e0373e0d2053c3774a07349fb2bb4eec071d66b6ca7fb5a0dd56d0a376dc9453d9907c03b2fea4928ac3757498f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          970e189204360c03356ef1048f02e356

          SHA1

          38cd71d48870beaf740879047ada1ca5a42d7030

          SHA256

          db528c3d15d8cc72d33e238161f6b74c95fa6dd957218eddd34d65867e6f029f

          SHA512

          c3d696a79122d4ff9f5c59c70e656e4ebb1f465a7c99d1d63b12102411085cb9079fe139999d957e5df487403a6837aec77a52c09fc65feb765082d1e9ef12e6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6ff1b7a9a5b3a0a7abd0235bdaad4ccf

          SHA1

          1fbc9431d9d0d7cc4a7fc8bfc4f61737624ff938

          SHA256

          f2b1182590dc4553fe3f4fd2fca9eff6a0d5b9835c2fbb569e6a5b29986a3552

          SHA512

          234cb2310799ea3031bf9450f47064d23d54f07cf789825f7c8cd4014e921bb9e5907bf874c4f0da89123d5add365048a5e9fc205c81f1249b0cdc4cb2eeccb7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f11111a0b56e3faddbe79f2853df128d

          SHA1

          ecb4a06b5d48f4b88051014ea63fbedd40d45074

          SHA256

          9026590011b423c4dca40351e04e58fd36d842bd02248b3ce2181f0538a2caa8

          SHA512

          152a2ab26fb0a45985dc6e4572a01c3169fea3682329dd042a687ab0b4dd1d75b23249c07d462de1eb318bfc526ed4e721383e426b1a439b1f815856f00eb170

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          95988150b033675e92a75cb07977c859

          SHA1

          7c5c1a47932120066aa5a7b41195bfc19ff10e9e

          SHA256

          c4db368593d3ed51b558508c6e25c3189f6bf42bd73801fda77c835171f8feb9

          SHA512

          02d0ac1843731f07cb7dbfd696d32fd89de9b43da435d688b714f1e59f9e7dcb4be91f0bfffdd1562382585c8ab8298487231c127e3c9fe8a82b9c492766d2bc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          76ad69b01a111359db809ab33f0c8aa0

          SHA1

          619be13a0d263d7bc65eef2691ed69c7346755a4

          SHA256

          6df604c6d15fd5aaa18dd8f4c272bae973c501491fe1ad819b1c549b73443a65

          SHA512

          6b6e0a8681daa29975882321441800f36d3e40e5d2e055c2ec4a685bfb80131f3199ca2df995b61f844349b0907166c02f0d98655a3b07de32fc3bd15af418db

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f345c5b1820726cfff6921cb7f619711

          SHA1

          6b04d780f7909d18cbf8d9228de273266706a806

          SHA256

          d4e3701a26c57f8f7dd0d32fdf0a98f1a1f821d9b8f611bf10bf7c1da196d69e

          SHA512

          4e9816de174b9a75a979754064420259a456c0aeec5df1d92b56b82442c8a5c3656bd7d89f670a1f8c58c78d908028dd19b89e850f25280f7262a77ec18acc7b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8d95e2d4e3f8976fb3e23dde4c1f2e57

          SHA1

          3880937162a6ca4e7fd961c30542de1f02975456

          SHA256

          99f7229bacaf0c1129995ef6c2e2ca574362d2038b8b00df79aa3e91374be747

          SHA512

          eb3ceaaba86cf6473db91d711f13cb004f5894bb61def4bf3a077ee7dd2311e8267a4e091c725948ce45d3c35c52f083fdbe8fdc8af219742f14ace275784373

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          97c903c7ac858b2713a8bc3fee2ca036

          SHA1

          95864f787a3edafe72fc18e22b832ade9e5890c8

          SHA256

          140f60e90981f1620af136428c9642002bb76308d407aa965247968e121d0255

          SHA512

          a44bd887152ad7e08c58ba1bd5c847b542673b792a5a3ca8cec3fe253e1b142f3b2256d7b1e08bbb658e569ea9d6ba7d717087f978fe1f487e52682eaacd5fb4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1a35116201f108d2eb512b483f629f63

          SHA1

          4b7f3ab7178918867046ed6328c6e67e736868b1

          SHA256

          7775d0d7ac2067b413af12df3c92fff7d68a97337c57c15a96ccfe327f51048e

          SHA512

          cf1a8255e9728c0a77028418fa2deadc2d93323d0069893ebf3bb0cc8bcec503025d223065478ddc6ea8ee1a48d9ae728ced205fe03a341f89ea26fa0c26a276

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          82cb0668676871cf3f54bf459ff57899

          SHA1

          1c975d88a4ba80e03367525d559f4eced4dbbc41

          SHA256

          4b68de0a00bc845764adbb25082c271be21060e7765ac2cdaa6a4bf63e84ca30

          SHA512

          1becddfdad6b1d70bf775462b2c49ae590549cb35f0f8376b3391b15c629b9b87f0ead2c663b306ee248912781d3a3c747fa3140c0b7b20dbadb3de297251171

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          421b3613d030383a1c66e82217fa63fd

          SHA1

          0cdf50a7f42d57e8261f575f311b84265f95f06a

          SHA256

          96d291c7a486bd884e6be1f71b909cd44120ae77d620359096b8893305a039bf

          SHA512

          a6eae388eb0793d23ca5c2a4e7660c8d4c399291a94c2fa26aa5685b581af54855a804e2387e593e0f5a78a3c0ce76424c32eae9469ee16ffc2852d1a324e604

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ba3b7aca348d5ec51d94339835720020

          SHA1

          061bdd3e08dce868673c08fe37d7d9e9b2265855

          SHA256

          649b2bb13dc4679b232ace16ae9c25d5534d8a9533b7e16c14b5af362a6a4e52

          SHA512

          a6eff10e3f478d2961e8ac0bdb7e58bcc4bd3af4be67c0cc37473ff4ec55e744bf5ca35e793d341c5aaec018c214153c3e3e3141a42a4ed20ada58fa7d64a23c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          db6e2f082aa644a4156aea96ef028ae1

          SHA1

          5f1926a380a4d9c2e42a5105a9cc3237a0d3ddcf

          SHA256

          07b4c19bd9696955956bdd6004cce81409e08220fef14db2b85205c45d667e44

          SHA512

          ba22428a469044eed15a23755a0c30624776d615d6738e83ba7afd7bcdfe0e088109543926aecdb1fba58ea97e7cccfc46e7dfe8563a3ce0e6441b068ab89099

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fcc1522152313a436056f65f9cc7f8e2

          SHA1

          b7ba482970b58ed04da880fa3eaade8bf47dbac6

          SHA256

          0e5c15a6b442d31a9bef156e04cd1c22cb990c2bdda0b918455f9a5673d0754f

          SHA512

          8a6b06cc7a3a0623cc09aedf3c903400feb935cae046008ec7fed2a7af9b2881f6209948f25d5933144e60e5b1735149700d3e5ada19ac9b92ef9f5c603d2670

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dad9d330dc7d729d2d503ffbc0ca14b9

          SHA1

          db4ee42c1cd36dc0e8d571b56406a7975b954f23

          SHA256

          bd923ea4f4f92adb10ca8457bbc51c44b355858289064bab456a00b7173aee42

          SHA512

          20fe8a0affe468fdd706093c3c1cd17491bd6f35a488326a2bdf72d27cb34811a1eb05cdfddc08d2ec065713f3958fde7daa185c1796bd8bf70b25ee6dd2a264

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          67f7239fa021349d8a9b7a09683de78d

          SHA1

          9eb9d506d03fae2ec4fd8f47a48cbbcff3a04544

          SHA256

          ab6e5e731e8fc23895ac022c6ddfe8a763500d127d40cd7b34d288b0e086b101

          SHA512

          e5b3a18364cb16165eb220972a2b1569204850c2e2ed8e4cb4996a8f0ef095ec3440825926981bd2285a16f83a9266833701979f2ea6ab4afa4f4927735ea764

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a00ac313bd251c4b3c00cd081e12ec6b

          SHA1

          cefd0fd93f493b82e755e934b4b2300f71babee1

          SHA256

          2e2d568cd168b30a4aab2d213a9e5032b378c93b61f64c71088971ae6b3005b3

          SHA512

          fea3ab9695fc6c911b97de6d700ea80cc38004ad0d6a53449fef4b2986dee63ead44d182e903afe46dca5ac6529fd118d04e1c77abc42674fa54d90fc0a226a9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          de383f5febc73e3a15585cdbb724967d

          SHA1

          d11609c438fe7bcbd3569ef4e9e2b84e23a5ecd1

          SHA256

          dcc5f96417318bd2ae62b2e6d853e23b83bdc0d071204fa4e0e78756544bccd7

          SHA512

          860cff82af60aae7933d6b2bd1f1380cd8d30d2fd91ccfe49f41145579f55544b498976ca1e9c84b956aca6e11803ff7becadfd248e932fb1b81b82176b09491

        • C:\Users\Admin\AppData\Local\Temp\Cab400F.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar409F.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06