Analysis

  • max time kernel
    136s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 22:58

General

  • Target

    ad12f7806e618db126c6c86ef730c74a.html

  • Size

    204B

  • MD5

    ad12f7806e618db126c6c86ef730c74a

  • SHA1

    f57f9ac4ef1c8dfb74477cc07743e86460a9d3f2

  • SHA256

    5524277e2232dc9aafa361ac452da156520368b297a6fb5b1f0c7a562616ee11

  • SHA512

    626d8c76e9922433cea81d68f6c8166376ae4e824786b5b846c096bbf2f1a3209a86bca95464cd8f9227eeae6c554287945b308369a4dd2b0192a83331b9eafc

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ad12f7806e618db126c6c86ef730c74a.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2288
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2288 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3036

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c04548481429d293417115e8d82581c4

    SHA1

    5910827ab727e44434694561cb64a5c73cd9f743

    SHA256

    e41d64f6f9414a66204101fd4cd4d102b50a1cfdababbbfcb5cf065e7a0c3c19

    SHA512

    2beed616a85167efdc35a7b915073d1b5db810380ad9664f48dfef0cb9707139868db80581eaa414fd1db087e36e5e7c4d7ba257a53a3b922ff3bab2def7f88c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fdfae6e957f4b792c06926fadb6e237

    SHA1

    1cc70e26bc94ea1593a14e5fc91210debd035c49

    SHA256

    668005d7a846cf4625e7db5d99dbbeed9ee026826de0474a1f1fc12c28572f29

    SHA512

    3c39c62d9caf7f1221240d9d64e4bbac8039b5308268ffe26332f76bfd4f31869405a51afff15878fc741cc304f754c0d226b49d17e8099256086ef7e9ea5551

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb7bd7989d6fa489c0d812aeb9ed7035

    SHA1

    2daa4cc0d2e483a13988096bc14f50a80d492406

    SHA256

    c3ed54f603fd9f534aa145ac267f8a0123320e1525886736f29d4ffd0ee05b9f

    SHA512

    39935903bfbf4419fa5d564409ce5f1241ed0d7eb19ffa1e0d21610ed95977d14fa0974e2b7304b5b5ea615e8d4d547194022469b65767cab3d2744501e3417f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bd9ee1bb3e224df41ea8da1ff7cc3ba

    SHA1

    8c1a8514340bb2f52b029a34dd08425b0c548b57

    SHA256

    d1a0107ea19be1d1fd027b25528ab4f4fcc0067c250933da5eef22e3e95eae27

    SHA512

    e8b0a291d0480e5e018530a702245eb2cb4cfad0de9591b7b06d911c59ad7ad01a6d06c892c106995366cf910d47d8cc792da5173d9f757f0fc983301134ad2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9db1c21fca15ae1c6891b646417d91e4

    SHA1

    15ad4eaec6b8bd321ad76a477ea098d94a8a83db

    SHA256

    147bc91b110bb32a87166b898a34efec7e60766caa7466c8031fff94c6c33281

    SHA512

    9f15fb35cbe969aa33b31703d340ce06fd036b463a536ea8817a13c997190bd7b2892ffdc9719b5b1e2ece943da67d285c6d460410c67cf774911732240fb1a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d77fec2b16df49911f97bfdbd3894fd6

    SHA1

    efdd53689f276060b4c9e5fcefd5eba23b748478

    SHA256

    a2f2391d403668a07346370c59f3fac40e4ee59885dfe46b009adc12d3451a3d

    SHA512

    5466ad44e2b96d61a2366319467a7c4e69215fcb7da841752accc549577520200dc1d95b9350d7690dddca013ce06b784d8e4e269858454064985cd588a30b10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b97d530d832d72ca2effa903aa6c22db

    SHA1

    01549773ab04758c01d473f6461a59eccd6e55ad

    SHA256

    8480024dac22cb39a33e255d8a9d370894836880b09df62307bc118f057d1b34

    SHA512

    19bb7cee08301a76a74b0302decfb531c42bc130692933d087abd5defe42fb60cbb2524ab597cd46a2c5b4a94f554d9e8766a8d0a951000d05f7653122c82f84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5095227ee43a280467c44cc81bad6901

    SHA1

    ee2c7d03c0d6ced45a94a1c541ee2c9c00693ef0

    SHA256

    5456b9c96f8d121c2c0027f8d8570288fe1e757ba74d40a4819a8b55bdd1fcfd

    SHA512

    8ca940035d839304bf2705a7936d4a4ec03fa22e8249a256fb8131fdc3449887a04fba6fc2296fff3f01c6ccaa1f113193653bce75e2f9c0e14baf4463bf2379

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e75a8ccbce469cd933b87dd0b2db143

    SHA1

    c8e136a21f7aa8567b688c21662c8ed62159d3fb

    SHA256

    152d99add3f5d5ae36b2357cde9a4a6d9b9cd14ed08595f7feefc40ecfab48cb

    SHA512

    a2eba01158f93c3b680a89705f316561d64d2c67f8b6e92549d6fd581f80862683465f223503054dab7bd61762521acaac1ca757b21570007bd6e0d4d0ba3947

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e24ff8281c1e0aa728c061fa76a4d911

    SHA1

    662c089198a07d8998720e84a5766414309ea5b8

    SHA256

    0bdf0a2d89faff55a899a60425db37853e41c538a2e55b34ee05ccd6210cc662

    SHA512

    837d1ab28c5a76be44aaeeb707ab567540e7b9a6b48f1d528243564c23c40634434e6e24c4d32699544123577a883a59a21b7faa4580ecf96c55b2cd967e8faf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0407b2c0c29a8c57ec5818a8375433bf

    SHA1

    581a51abe6303fd2b210c599c81177a262ee0dc4

    SHA256

    dcd9196c38654fff16aebc3e6afd51507957764b8f4c0cd2d62639503e55a1d1

    SHA512

    e30a46c335a9e16a97bc8266fd7ea08b478a67f0e60838343571c3991a2b9ee0162eee0d364b19e8f98ae40d6c61d9c0483afc63bb7cc8d439c7ce8170edefa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a42c7c3b4c809d6900c4335e1ab5a27

    SHA1

    21bd8e74a84ea263d411115d316d0cfa03b89832

    SHA256

    23559c13dae2f14b8c7f96949504ea9d6bfb159215137bb733b646feadf8206b

    SHA512

    3ded54f96dd5cd6fa06e4c20d70b300b5c90c6a5179078b224c75b967a08dec387e482bf18a24458b01573cbc859cdc89b65d89782f937e435db96bccc9472dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb83735571d613bd6639611b4f78951f

    SHA1

    c66c64bf7b66ec994dc268f8bdaab02208037d36

    SHA256

    82420bf423705b8864348373dd0286fd021f38e356f761e941a6a50e5579015f

    SHA512

    e1b394357091aa8a4d28f6cd8431e986d58bc0eee14aba2de09cb3c1b0b8170754de63a74aff7f36bf134f439b53ab44cf9885a2b8c2db8fc2091b490b7f3b41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a6ba81e851a1d2df51b9080c2f5ad01

    SHA1

    b99a62ff4d46c36397a22a679a68a7fdad77dfec

    SHA256

    4598fd237f0ce0c8fba4e38e72e60d013a6b167c7df6db1934c93d1cbe356a31

    SHA512

    f835d35a9ff19be048419093c936d4933b5fb5810f8b9c658c49761505a00b8aed4bc74f3043de740713e1adc4cbc26844b0be715b651acf1e22e820a493b5f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    005203e62f2c15234d41b77508afaa67

    SHA1

    6a910b3002d6087d681833a9574349377fd1aea5

    SHA256

    94bad39dc7576817373100c85d8e49bfc827414ea04d31f6dc843fceec54df53

    SHA512

    e9df701b927df605fdbf4d1074d57b82194ce35971e1ab6a22747c41aa05690972e4d8f7770bc57627c499b7fccedcca94a99403d68eb5d662bfe6add356e51d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d69a782d3c1e2f1d739b44dd1fd3a6a5

    SHA1

    48b2a9b0b45646bf866fbd2aefc7c7518d7fd3c3

    SHA256

    0716a123a75033d1e65552545cbd2147f902f8bbef6f99d57ddb85668ea18215

    SHA512

    f4e05a0f7efd787cda71f6135184bae6675db4d07c511f24117a2581d3dc6a387920a9fae51fac0f2b93e97c622984c70342152566a9bc2cb8fd2c1e4294805e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    586df0b90c37bb400a214bc04bf2403a

    SHA1

    114bbb0d971d147295537c05d58db3a553b1c3a3

    SHA256

    c7b7f4d1b8cf8f1e2fddd26b041473c1e655210c30c1f045d5e42178ac560868

    SHA512

    a6544e645adddbc99c08d1c88657463ee5682af6194ea7093b49ba605391d4f492d0fbb646676e6b5a5278f7ef6590c7ccbc1793acafc98d2ef937bdf5815981

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ced19f7ee4a8a149139dc9e465d5db8

    SHA1

    89caabeed00c91e4160a089672978887cc660422

    SHA256

    72f89b08f877d624dea9afb1f18f5fe32b6d8016de1c80532e7af57fa6ddcfaa

    SHA512

    cc1bb6de41a23b06a8bbad757a8e061fcf81d17d880e9c62605467fef3e820ddd670610ffaaf808b3f50078d0d5ce5d0f854719b7bff5baf880b1d14a47ca328

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a3c2313c1492ce2a290d40532f42840

    SHA1

    20067615bba21737baf7008bb0460b18047dbe91

    SHA256

    a8c8db38fb5fd17fbadb537340c3678d36985c352c42ca7844cd3f64bfcba44c

    SHA512

    8875997fec2f9f8ea8f2fd255fd7afaa6b5f9eef75644f963743123587337aa80d180152df8fbe2cb714973a572dae82a1121fe6b74572884c37e94469119a5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a963fc64bb6540023cab9ddd3562300

    SHA1

    eca8285ae9aa8b65a01acd49ab8fb71dd685aa85

    SHA256

    31dc56f60bcbb29862297174bd467add1a749a7cb153d5973482682f74f942aa

    SHA512

    a67519090959d41063889eebdb0fa6e5c76e694aca7f8526a5e13664e1f503d8a8086030e2a8cd5731955923282c4e0e9766f0c0ae5aab2794b1069f6acaea8d

  • C:\Users\Admin\AppData\Local\Temp\Cab66EE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab67BD.tmp

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Temp\Tar684F.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63