Analysis

  • max time kernel
    141s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    05-03-2024 20:40

General

  • Target

    b59bbda925896cc481204f132dcd51db.html

  • Size

    37KB

  • MD5

    b59bbda925896cc481204f132dcd51db

  • SHA1

    c71573daf9d51bb61656063bef3ae0d33e3901ec

  • SHA256

    bfe8d2d1123fb158fd9c7d82c0b6e5803eb0299fd9cad7a43e87650c46e8015b

  • SHA512

    14a1179761c445167487799ff27ceba0d7709407d80702757b820cf1809d809a6f58333db11731b343e84b26f9afe06d1ae47aa36e7ae94246053565d05821ab

  • SSDEEP

    768:/IOa3xSlMnqn6MNlp2uPKOf+TbGbc1XhDG3grFFj4NL6m5W27hrKa5BFlE6oNR2:/IOUSlMnqlp26KOfybGbyhDG6vji5zh3

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b59bbda925896cc481204f132dcd51db.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3064
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3064 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2532

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b08ed6aef453e6adb9774da053f9f05

    SHA1

    56afdda09bfdb53e040afbfd11b5dac70aba5727

    SHA256

    609e50b46d9f530180af2aa9629297fa72c36dacf77fe2877935a752b3a9b3d0

    SHA512

    078fb95300a976ceebd1b91c167a4cc4e69fd15a21a34cc0abeeadf1fdabf3312a1bda7e06566d2765820703c7a4f65a4dbb6c11bc77f6360a91cb588200c3e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    262c522d27db7929b1b9e38a090ad515

    SHA1

    0c14d439a11b9b935f57ab82f3b4cef7dd86ec0b

    SHA256

    70c58c744e3ca71c752970abca04342097130cfbf25501caef4b8c2f6ec62e74

    SHA512

    db747650f123731c96c4ade581079b32f9aff24f3e329de4ecf0a92187b5345925d6ebb7f5536326accbf666a2c809408db9e328d7abd07ac3bd25e1bbc663de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa80432b7d91947cf5669b29b7891a84

    SHA1

    3a23ee5e5bbd31858a58a468dd55930c0eac36c2

    SHA256

    03967ee283749579c5c44ea018a3a9948290a24c7f1e1963e69456daae24fdd8

    SHA512

    094cc8720885ba52696394bdb9b5b81d58a6ef78e71c39400617e389dd8f8a33422612a7575ad7d7f1b6cfd45f8f191462dc4982faa99d43e69494d733782501

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02271230052150f0b72b59c022c7a8da

    SHA1

    d04e85c1989ba90d7786281afd070dacaf907f17

    SHA256

    0f42263b6bcbff02a82b2157c2e826d5325672fb63a0de784fe855305b058976

    SHA512

    9bf94e12df66a3dfe53da41b80edb7f4bbda717502486a1b38d221f15c68f74ba247f2374f428111ff410dc1b4d185141c91da1a59aa78acee09e307cf6621e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    198ba5f532644c40170aae7057b12544

    SHA1

    855a1df40472b636f63ed439877f5e96e6619ffe

    SHA256

    5e96c758e8ad0647b90a5499d81d181d2b4fdb7808436473904a774a6cfe176f

    SHA512

    a1b14d677dc4ae814b612961710f551b94623ffb2435e1e7ce83ab63158ec2dbee8accad2fe2e39ada97beba39927b6b9177c919262af4533fc929f73d65c548

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e15c15f93cbd5ad785b72a05840b601

    SHA1

    cb42640820fe51139979ee667748899acd071d01

    SHA256

    76bbd69df78c1f563089da1e6df5c297165ef67019aec373d5de230df6ee74e6

    SHA512

    b2746d8a4bf8f403867446333a27f7a7408d29f5d43c824a05480a1a3fb482fb174d4a7ad09d5e09bf2c318822410094bc92e5016fe75b1776715a51c290660a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b50c53a36544ff5aa6cbd2c9d94bb90b

    SHA1

    0b2159e449ed63f65d176909e8973602914a4d0c

    SHA256

    939dbbb1e57b90fa59bf8b78758d94932906ed58802e84d2060526fc53e5ed17

    SHA512

    af319034c47640ef0bca0f745c5b6917fa4e203ca5b924e9fe1fada45445ca6d5cf97e1dd1686fe81481123ba328c96695d3fafa12afe819889ff276d044ee77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d6a38a7bdba75ffe2b9df3b97b6085d

    SHA1

    4056500c7b867f532f54fbf2ac450b6b6a2b90e3

    SHA256

    9d875aaade150868242fef566ea9394bd7048c6aeffeefb8587c2c8f463588f3

    SHA512

    3f5d6f4ed0caa8051a956ebaafbf20bd4d659e4d3e8a9a533721a81b9cf17e8be9a3e410866a1d76e59091e637a252b0d9679cb89199f980abffd32809ca642e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    213b8f461afa9777347e7f55fb26d5a6

    SHA1

    c105a53e1a004cbe91319ae0f9ab39ea0d2ec2ef

    SHA256

    41aba0ce17e0cd05779363efeb55b551fdd219546e4b37b38a7c50bc04491053

    SHA512

    b4087e5d27ab9aae748581490e02fc7d2506e74331d7114a1d950e6dc02d33952cadd221983631359ce98165925a971d52d09a64e29d029632dd729773eba10a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb4450f8964aa6c7c0d90a0fc0d36c51

    SHA1

    776e6604db1c5965f19995b926744b0088da191f

    SHA256

    0a5d05f07f20b0a17cfaca20a6ef94c94055b7a0ce5862b269e175118e19edc4

    SHA512

    06b766737d43cdd213f02e8dc81581869ee2fde14dbbdc185c10b6e53ef1b85ccfc253587f2506922085eaabee0cc925da898a7220ff070f4953f0e5c27f20d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1060893620e503ccae56faf884ba132e

    SHA1

    7d94826c96eb829b84aef85e55c795cf275be18a

    SHA256

    8bd5d170c8495ca7237320bda46ca2415cb960d7725d82dc305c11eb7577449a

    SHA512

    c5b3a0d76919491b3f2b3794442c3a6dd81b730c353437a01acb6245536f555106aa612e5447b28ea923e2a89182dbaa8a7babbeb938fb489ec7b80038d50737

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb99fed3a5c69a525b823494c1c6a2a1

    SHA1

    f04039f416be2dba5e84d387854517a95cab3cd9

    SHA256

    a3722719bf3a968f5e18ea16c9c176319846d0a96f2eb36b667cc4200bf14abf

    SHA512

    1d3b7c46c33c576c1317755c6e835cb64aae0b88095f9e8cdc0daef7b19e80ac6d98eee469c658728bcba607bc2816f9d7054bba2f899f5e06682144ee353b86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab443b454d54ffc164b56580eb3d39cd

    SHA1

    dbe40dfa807ad1af1abe25f030b452e36741f902

    SHA256

    728ff332db11306ad1820fdc8c80677b0a428f369093bc6788b7907d75cff5da

    SHA512

    96a402d29a67ac8ccb3a31fb3fb328fc582ea19986ed5fa3bdbb550983bfd6405c3efaf932a3b34627ca3872639d3df0163fc3f06c02f91c2822bbd02a368ccc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed631b705d45f5f727b21994edc19a46

    SHA1

    825c86cc209a0d006e17cc26a62daaa6bf71a78c

    SHA256

    f0cfb970e675352ce2d6c27f82d7527832c820c83316cd29ab29cc0750bf5b38

    SHA512

    1b6caa1b202d07196c250b00a144cdefd14cdfc0115258d21ed69622354b4908747176caecd1d42815bb5305414b83561e2d59593dc0b19d398fa3fa897f44c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5a1750d93aec28edaa606171d15b316

    SHA1

    4011bf19a00a1536b0319a7e721a04d0887f1ca9

    SHA256

    f068b5eaf86da5c87b007ca6461792dfc73da167de1de0a4c022e494cd0b8b68

    SHA512

    4003eafcb1fa4e31f51d136c15cef61b543df04b4035981dd3a5813485a5e9c2b378fcae264543efcf4a153d94113ae3616a4ee5d4ed629cf7e55d5cc6e804fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b70cd1db658db66e9d9ae8202a37b44a

    SHA1

    abeb804a463c4a112b71b321a5f54081e3379012

    SHA256

    28ff912bbf32104936dc52efdf94b306213825856274702d81d22d61ffa4966a

    SHA512

    7983b2849026b26f1366ed232d8ad8ec9d51fe5835b30ce56968cde00294d2820919b389178aa4e3a0baaa004f6dae1dee1a33ca1dbefbc611517efb87dd9897

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ccf329b6d2ae34ec7a8ef76508a31e9d

    SHA1

    ea5e498a806c81cc3a55c15f5f38927b98949faf

    SHA256

    21e9b9419229580e3f80c43bd52854d4b904c2156d4e595e96ab1d1e7eb8f6cc

    SHA512

    2c79e719af3bf92bf81de95036c90e9fc979e4dcbba7a753a7c5859ae357eb3be0706c1da5ff11ff170b6bd692d52bb6b4ed8d8a5aed869e9ef96d4bbaf88cb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8c335d9fe0ee7188e4f64b95d417486

    SHA1

    75be45a91bf71d7962af1780e567b280b2142641

    SHA256

    b03ed7e31ebf23903d169f4bf7bc70591533db31ffda5263186c795e1741d035

    SHA512

    813619dfb6a6bb5915ca2aee3d5398b3ef72e173873348816413bbfe7170d982027c145b701105ef8744e1987d071e36e4f4367e3e0c7102a5c53f39a38e2db2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf0e1fd05a6a83f66d8681dc176650e4

    SHA1

    1d52acd18904f5beb510adf0a3a2ec11f50b7c5d

    SHA256

    2e9d511b7b07c7c1f02889e223ed2043242d247048c8983b680b9d1f5fb65abd

    SHA512

    6c60be93e01e268eb634f3015e96f95d4091efa145e357e6fbdfeb74e3aac75842240d7c746eff8dd2068a71bfccdab92a37bfc7c7cecd30c42f378cafe22379

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CY2G78MW\cb=gapi[1].js

    Filesize

    133KB

    MD5

    c8be3350843695958a33474aeb3ea8f1

    SHA1

    ad92694d9b189ee479c1be438636e39247b216af

    SHA256

    22494eb4f5fc2ef8c229b9df2e171990687e4837282655145cca0fa302af1278

    SHA512

    54ba5d4076fe9fe4c4ac22f45cd7d2ebb4e8027d8b8f82580436dccbcd60fa2adbb948ff1234d9912c663bf1fb33ac834007850f5a3f2abfb96a7a4feb110bc8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\jquery.min[1].js

    Filesize

    83KB

    MD5

    e85aed5c30d734f1e30646e030d7a817

    SHA1

    b8dcaa1c866905c0bdb0b70c8e564ff1c3fe27ad

    SHA256

    8f0a19ee8c606b35a10904951e0a27da1896eafe33c6e88cb7bcbe455f05a24a

    SHA512

    a5b7c4911b530b4b550838f50ceda9d9382d86aad7cb4ff13c897c269bc7ff350ccf01487534882f294749bc19f3398f0b338e1d8b03af3dba1ef382168ecc9e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RSAB58HZ\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    bf78e91c4b8c660626008446d6d30703

    SHA1

    db09dae5dda987e24027a540e47650cb970e31bf

    SHA256

    f554260f317f497231227b9def0144f0bf370ae71cdd7a54ac60d0ae1a56e096

    SHA512

    15cf262865ed7a9aee617939501430586460eea04599e7c09f5b223ecbebf454450e9e6ba93b81e6e1a35b1039d0e80039bd4d4c768dc72ae5e3bb3ca1f70fdf

  • C:\Users\Admin\AppData\Local\Temp\Cab3526.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3567.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar37BE.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63