Analysis

  • max time kernel
    121s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 17:13

General

  • Target

    ac6b1c90aab035bbfa7f0203f9f26c3d.html

  • Size

    23KB

  • MD5

    ac6b1c90aab035bbfa7f0203f9f26c3d

  • SHA1

    1451d7e76bdbd5e3e691e65d506e27a0820922fd

  • SHA256

    bb90a2b969dbdd930b4952831f9f36500acf4bcd0979470bb62e9dba8efba9ff

  • SHA512

    3056c07c88ebadf03891f57f7c664d51d766e1f1334ae568002685090a95d10403f302948266ad8e26104bb6e49e7ac3f6fb795c9384bbe0585969ec553019da

  • SSDEEP

    192:uWHEb5ntazgnQjxn5Q/lHnQieENn4nQOkEntfbTnQTbnRnQiCnQtuwMBkqnYnQ7I:tQ/lyp0V

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ac6b1c90aab035bbfa7f0203f9f26c3d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2352
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2352 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e35a6b98879d02a5bd8d0a71f4a5f982

    SHA1

    d629ebbcdfa31327aafee328dce1a54e0e1456e8

    SHA256

    f9ae00104be7123519daff47f8e7e898527b6d282bf44c687d696be16d1c9ead

    SHA512

    e3b727c3b869aceac323e31444fbb435b24703b388f73e5c5c5e7d7fde07ea1c4684cd2c1dcc4bff45821f29b5eefc16eb6d173ac5ba05f3f440ca9ba6c8c9e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d3de699738d9665ead87af8ce612ca0

    SHA1

    5f3e4fdc8f31028833da0cb021f4cc7035152442

    SHA256

    fafe5d6608ebd6a50067604c5e57bad3addb8a4e396a7fb97dd6207df0d61a05

    SHA512

    52216891408e885c5a01ed61d08b0ed01ce521afdc98a30bf113498711f2de2224eeac734f0bd67d5d0383f42582dc98a678023bd55e0255ff3730b8abe12e5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e34116d0c949d23eb385674dfa68819

    SHA1

    2fbe7bf4ebf347e5c35774e656d03d3512129c11

    SHA256

    d2b697a79f32f6c1806aa1547c431e1a5dfd0a605e40e70cc98d36fd17107ad2

    SHA512

    d81efa4a5d7ef5c986aa737f409a6a35160d1513e075e1dc962a104398f9173e61916d6a20e4c6708ce3a1b951bf318ae39a24705f7242752aa29285c7dfb859

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e2eb725c3adab5422521541d1c4e4db

    SHA1

    a62f1c48c408abbb323ecaf0eb1264d046a63fa6

    SHA256

    8b5ed5c279cdeda7ed3fe2969594db628bdee7cd81c068ce69fc0a14f626065d

    SHA512

    f6a707367b7ef791c7b33dd5e9ca66b995e083774dc8b869953f1bcfedf4ccdd407789204f47f384318ffe14e436dc072757e4d9ce9c39277d07b145220f367e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e6d783752cb1fdd1a9cfeead91256ae

    SHA1

    4b732467c544b5242b8923129a3bf0677964a6ba

    SHA256

    aac72e535c9cdf5fb955294e071e870fb8aecfe02a3f681a7b0b939fa8f1a077

    SHA512

    4534c316d9c174b17cdde30594182677cc9360346b1ebe4600d95b988c55507e0b174d461d122525d465889c206f40701ff60ae8b5a6eb6d0e430229382720a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    856c7fd253c78f609e3be207af2ba30c

    SHA1

    adbe88dbac08ea52db13a6b2d35043d9505dee4e

    SHA256

    c8fbafbc44de555ba9c831cb187f5c66da17b13b4a6d9f0605e2d3142e5e2704

    SHA512

    3c048de1e50cbef225e193faae5edac365c38c6381d2765d62512c7bf3448f25521cf439b3052d200b8c97f1f706d1cdb85ae358d8df65971bd78ed1187b3b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16ae86a3a7f1782fdec77c8c50954796

    SHA1

    79a216bf685000a4b8cc9251a4c6a097bcb180d6

    SHA256

    98a86cc408e325bec15f94415065d8297938e54d148779ac03ddd407416598ed

    SHA512

    6f3790d1216d065f0a06a48243e6b89f138c9188435c144edc0a98ffe0da3fc316e6a0886cdf2c37b97158b88f1217cb002d8f0397f844e799e2ce193864aa65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a6b7b270646a86e6fe526426aca8cc7

    SHA1

    cc5ae2d8711a2470a599a83b225a49c7ab2a41ba

    SHA256

    05d1d5fc4ebc7d00a9bc0a2e6ea08da3ad1f253e1b65fa71ac4eb33c68d56a38

    SHA512

    8bde39250faa099895ce714f819175b96c40b5589c0be6661b11b793bfc8016898e83f3ae7630059b482b8d8c1b29d40bcf46bd06762942075fd7f26156c3f79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d007f794bed9eb370079fa02d1d0cc8

    SHA1

    33349a5be745eef47c201ad9263b8e89d3f409e4

    SHA256

    2743b901bf42a4578e152c45e0d46f964b0c78244f161c2011987b5d05914bac

    SHA512

    b7721b0abe1686168150d0fe1ab5b163b2bec61d84ef5a6ec55fcd044546642b8613993016a080a6d0b826009fdccd5b7827e2251b38d684e4f19eacd0bab307

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba11a518986b936155c8729a1a829548

    SHA1

    22bc2a419c95114caed6bd5edf710d65791ab033

    SHA256

    48bad39b3ec91ba7625ccf2e7acd8cc8f06e5bc97a3c0a1f85a1f95c3b25b970

    SHA512

    33911f5aa5487d80fa93a66d9a887bf09e69f595d8888a4b2cdaff57b377de4a8d53d7336e67c910718341bb7648238eb16fc32311be0a54f1fcab236d54c60a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93c39133d6100748b6acc39d2bcd15d5

    SHA1

    b5f81109cb7b00022a84eccd4404d0b967300471

    SHA256

    4809645ac4b6a7d82a7577883657c16118afb62c714464afeae9d1eb10ddb6e2

    SHA512

    8cb0753a0f6eb9e39d2e9613845335a56593220cb7ab3c1132dcc8db42c8cb3b1c96b69fa89f34ef29d067dfee9a0a686452073be0b1a1f8889c376b44f5da47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10b29a70e01c073cca4f1fba997437e1

    SHA1

    11cf1cca25a9312e05579f633045b7041c4659e9

    SHA256

    cf499182949d6ef646f252602a4d2c9462ec1e0f3565a7a4c2f9360ed87f40c2

    SHA512

    87b886dafce3dd55186d745930d7d73d621bca56b843f8341c9496745d743afa10fc30f8ae65638671ca1f60f32a62a2b0a7186b9bae2d324812a51825df44e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ee9cec1f5b3db2e93192394025f70d0

    SHA1

    e6a7aff818d469da77a9c0d27bf8c3a3cc2ac9d5

    SHA256

    2211f4c715caddfadd0ee081422de32dc2caf38c3d36019474eafeaeef707889

    SHA512

    ee8b7b8af4ca4818184852bba9b40495ecc39355c2308b95f8ad49ed66bbac909a36180e0ecab692f26de4020bf9aefb075ad49e12f847e25f4377d69d0606d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    911acc4fd52d8c2d1a21037952157de4

    SHA1

    78d72886e7794b67f824b3e0696d09ccd9e2e91f

    SHA256

    6e4f0569957314ec747b32bbcaad81763680e09b8841edcb8b2c6ce068c40d37

    SHA512

    3b46f34c800ef6dbc2fc13f11b992a6e3c3315ac2080ce099651f51fe051bf891239ebd826f0ad98d7af3ca4aac37b05e455be8df060d33b54107c613f527ce9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21a2b27840b3025c620964890e052ad9

    SHA1

    27ba7856e74a6ca37c1ffccc7d165fd2d03af49e

    SHA256

    65610d6cfee4ac02ed6becf7d36bfdece181b9e58e5c3736170009ce49aa31ba

    SHA512

    97bdc711c1906602d0be99d7ccd8b9395540e67e1e304ce5b4e16ba351ebcab93ee6c164185fa74ef6fdd9b605ce08d849577791b8b92bc2e35a8600fa58c8ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    525d40ca3a0af2c1f9faf6e25c5ac3fc

    SHA1

    322e23f498b15fab00c3c2598c669964c9c1e7bc

    SHA256

    ceba785ef12bc2fa277ccb3fb7e86275928887406a5e8dfc70fac5969c9c329a

    SHA512

    1d89556c0a9cde53b80bd742ea9852a00c594553768bc2a5a9ec887ab1ea0a5767c1411a84ef09e1b2de549a5497714d52a4f0b06cb4624147e9f998590cec85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb760350d7901648082f329abcdc0d60

    SHA1

    00392e2915b32a7dd09f8abe8c7c3a41cc6b0fca

    SHA256

    acdbd689e06cb6f7a9af97aa2c8ba65727078f8fcd5c929f013a791de072454c

    SHA512

    6e2143938f8fdb14447de0cab7d5079eede799aae6b9af668c4e5ea6cac96bbdb29564daebf90013e6767a5e24673d4a1d99dab5fecdb6c333608e7adbb94117

  • C:\Users\Admin\AppData\Local\Temp\Cab582F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab598A.tmp

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Temp\Tar59AE.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63