Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    28-02-2024 17:37

General

  • Target

    ac761654c9ed0d547880c07043f4b0bf.html

  • Size

    53KB

  • MD5

    ac761654c9ed0d547880c07043f4b0bf

  • SHA1

    5403b657bc85b121b86da481967832a4899ae12c

  • SHA256

    e88b37d2c7fd759daaf87e362d97a7b53584b6cc014ab24ec44fafdc5813cd7d

  • SHA512

    98aaa1fa270baf15cf3bc8a1737a62141c590b179f2b301cac9cead3058b337bf25905715b71ecb67a768822bceddb7e5f9f0c2135e2d8f05feeefa83051fbcc

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUIrunlYQ63Nj+q5Vy0R0w2AzTICbbTo1/t9M/dNwIUTDmDX:CkgUiIakTqGivi+PyUIrunlYQ63Nj+qv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ac761654c9ed0d547880c07043f4b0bf.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2764
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2764 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2148

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83e306a876437405acb119211b6a5a1b

    SHA1

    e1e4b4fd2b5555a2b4092ebab33dca882c0c33eb

    SHA256

    51177dea20619633318b68870ff37b2b39570260a909268c1f3169436248e66b

    SHA512

    d840e84dd358c2073ced0bb9a9d319e2399246679be94f7baa957cf4c4d2eb66962f2dd9b68d4df392847eed15215787ac0c862942c451910d3787d151f9d568

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82f72e2285771a25667c84c6b0bff27c

    SHA1

    4c7d9f9832ff4ff50331e0ba0ae604614ce88fb8

    SHA256

    42f071aa28cebc65d658a459ff1083a4a17329cf9c5dd27ec140ef54fc1ee722

    SHA512

    3f42fe29eea874ea212f0414ff4e27d0e9f81210446231f67aa18ff2db38e332b2ddd99c0baa0089f14b2ce2597572211a6a5c1b8e86ebc93ed1e696db0b2cb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2461d9b72f92d6c2f0ce7821e7c37f0

    SHA1

    07b1f80e9bbcebf5a5a3ab68037e341bd3942448

    SHA256

    e538854a0a56c3cae356c34485f5195b248be6291b588c010258ee7ecbfe9909

    SHA512

    b9d4de38450b65bb008c2df1f1d862a8d913828b4605f370294d6623792bb7b3fc537c4b755e3160ea962386f392b29acb7ace93126170c0b5bfc5c91a09b4f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5968cf7f4a93d374fd9c932f16e7318

    SHA1

    2a175810a1cc7f3ee3dffca34d715227fbaee67d

    SHA256

    416a6b06faacb98620f368f12e21c89f385d231c24992d9cb277715b8ff7552b

    SHA512

    159079dc7abdf334249c5a510008988c680ba9d1f90a7a51f9a37229227fcb7ac336e2d08b7125e38a721adc0f053faae2f1f5021c46e4b38d1b9f3d3a8def62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fd1d28c316b84419ce5726c7d8c334c

    SHA1

    7f93b9f67ab960e34df53fd8d1fbc9b77773a0f3

    SHA256

    d53d450edf15e8c31dcc86deee8649320f608a7f74f23aac4e273e3cbc562837

    SHA512

    afc5f1258a4f98a959b0abfb664edbad6e89e90aed17728e02a42cf4dc79756e1e065e6ed45bf9e8e90b9c205a5f076f6c45741aa7962d2131a3ef0caa7b00aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    739c672a1349b2501666b7adb9a93540

    SHA1

    2804462118517ca1e73e558dabf135be84ffb20f

    SHA256

    a6b5e235c087bccc1385357df47e7faa7cda649e83ca72a1d8071f08ac980f2e

    SHA512

    5ba0392775244cab8bbe40856eebb78216e19e71e3a84536090f767a3f5be9ee36e96b11b085548f080b1f71a540fdb9c55597911503bc8fbd3449dd51a8daae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d492d25e2202633ccfb6e8e911c5e2b6

    SHA1

    254e68222b5d067673c355bb57ffaffd8b7e575e

    SHA256

    e8242278279875260ccb7b4d99eabb9f865ec5e356b9b66957e77b6c5527dcc1

    SHA512

    b8c5d99eecdfd457ce59393b0512598a8d2c271fb036eba5c3b57bf6c39589515f28bc1c9006924da0bf4ad268e0bf064ae4a77f316466555bc89be2d42f9b20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    009fb80be4c2b2edf473028223132d2a

    SHA1

    3b72ddf37c32b9b667dc581d9ee62ea2d9e3ee28

    SHA256

    391a994bd4bf09d7517743e8f710f1f72b276567f802ea6e2bfa13f330144869

    SHA512

    69a1f5ad6c39162b109e318570df846b47073a922e3e1f9356c58f310030f686217a15eef117405921276293fa11523fe499ecba815f46e3465fff78cc060518

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce7dc291bd89127313e85cd53d3eb2ab

    SHA1

    8afe40b54876c3927d83adc9916073f6c6bbda88

    SHA256

    c4dadd52c6c3a79504b3e9bfbbbd4bd4fb68ce41f5400942bd45f15d7fb1240e

    SHA512

    340157441a9ac9a41668150662924bb3a0adfed894ea0d64940e81d58f24b5e58ab76d181a7fc4ada90ebf8c9a421aa4f9d77b53bffd775457fc5b5e6cae308a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16186219cb472d277aaeb4359ad87740

    SHA1

    880e6bf708ada0d194437ff50555619b71f21e58

    SHA256

    c4b54bddeaec6ee9eac831a1834ddfde98d578d8ef7a4bbe0ac900cc170c7c3d

    SHA512

    5497c311fe91f7bca85342ae9fb42f8f50185be561b5ffddebdb4851eb37ce9fb52fb12ce767f7e547ac937def7f15b20420d46aaeaf84a6180d0ed63b318720

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bda01b5158f1c6717c10dc4e0c95d73

    SHA1

    7d7d18d21938d4bfb12eebe413e10b73a2f9838b

    SHA256

    225902418caa320e12e80b269b824dece136ea1b785f9a935d5a450cd6c04f27

    SHA512

    812ccf117c98814134f48f9e39873fcda27407c0bc864ec726b9f4a3d0d4bcfabaea61df2e05f71c675568d743d22271d77949a937a0eb5e906408d1f5deea53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    477ad2a1e12d908a97be3f3c70878b05

    SHA1

    4a6d3f2b121db3b5b1d30d5f4fe6162f65754b2f

    SHA256

    bd28e7f1ee1c662f8e8d08df95ff1cd43f23dfec924872f6b17a55eb108d3c7b

    SHA512

    a4c3e8f17ac2618cbf0a8fb2f0d61e062037d5b31b0243b14ab17ac63346f3fcc08f338ff174baeb4d32b6715ca51efe17d251382ac81f6ebb6eab0229e69b10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fe399e8029efdaac9b8e0e4750e3a0e

    SHA1

    104f0b5c4c4c6be236053235a8a79a50b38e390f

    SHA256

    429a5452ee121f9f3df43c14d5c84594bb5dbf92632cfd61fc51ae25dea54b48

    SHA512

    32d0f9b04fc4beee1ecea921c737f1b575f0181d4217d7ee1ec2269c1c8a08e06561d33dd993cb54a392ae073f96770dcf39bbb4f2f703381a75f023127445f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbf984f10c86d301c9f0425dc2882f50

    SHA1

    aaeade294316392544ad15467c0cad531f27a385

    SHA256

    dc9e5ab0d745cccd03493bdcac850dbb6876e3c2718efa29955c9495270ba333

    SHA512

    674d6e6128df5315c8891533eb4743f1192736e298102c2ce47b8b68b7e3d547a8c6959bbe3c0328968bf6e430fbfda06f392aa51904080e7bba291c80e49185

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbefc75221422c175594246f26e6172c

    SHA1

    71552aa32f4cbdf34714c9e2c765e176c189d2e6

    SHA256

    7e8040ac51b87b58a929666fe04204db8ecb9993364178900bd39cef8a242a26

    SHA512

    4fd48a22bdf6bd6908e1eb07a91e6d24cec0851ed62eb88bbd69eb005b8bee1e107125642b76370eb4600755fa1398a10ec68b64c4c577db8ab2ddbaa85a752b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eafc2564d46d8ea2fc84c162b57e5cdd

    SHA1

    6bc8503dbbbb739ce96c460ca93020651f6e0726

    SHA256

    4fcfaeb53fe2427c6b3a43395e46ef1a6c6f266862a7d5c8d9ead03e383c1989

    SHA512

    b65d5650afe299104d2b5a662fd50ed4b4c1d1df2bed78d27e79118905c6e8a31f40cfec6a558db0a78ab57cf4ea10597437238a0a97872e9b5bab5c01b06309

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8dab61caedb2a0f9aea40a489f2d16d

    SHA1

    33b645093d9a1b07e91be3694a199146aa4df86e

    SHA256

    81987769b31819e8adab05e53759084f4e8e25921061ca5bfceba9451b2697d2

    SHA512

    9bd49d3468700d688e7814e152fa957dabe8251d8a9f6c598e4e00e3a1bc6a33fd27ffc6aaae02c9ef57e36377ef89e2cd09ebe1656879549562f54232f54c7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    533a3cf32acbaf6f9e7ed1f89ebcd380

    SHA1

    2ea000da70980cddc1779fb22a84a35bae9dee1e

    SHA256

    8b9ddca71c685c424fc8de3e68088b5374f368eafa373bd5fa62a7834435e39d

    SHA512

    d9da010da93ebda40c8ce58fe12ab5003044106282d01f07ceb8040d897982f20111c190837e917425feb98376477f2c0329f5070f9ea553d3faebdce1969c9a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\wt-logo[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab4608.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4738.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63