Analysis

  • max time kernel
    122s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06-03-2024 10:30

General

  • Target

    b7329be0e691ab46c229bead48eaaacc.html

  • Size

    3.5MB

  • MD5

    b7329be0e691ab46c229bead48eaaacc

  • SHA1

    af8bfad4bfda10c9e9da36da1d8faa86f28ff3d3

  • SHA256

    ac93740f925b3361443fea7e83f1926bce2f9ca5f18f4fe1b394629ff7d948b6

  • SHA512

    3a9a0dc34323c188db0c8fe4e4e9662e9a10672f0e89b80a54712d71e318d10c4d1fb81b8b246c995d24716d214fe492fcb2def7e915bf6698ad13ec9a4ee926

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NS+:jvpjte4tT64+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b7329be0e691ab46c229bead48eaaacc.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2612
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2612 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2484

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f13deeb1d807f0645df2d6e4b90400c

    SHA1

    7b6b72b202623ae729d7ca0a4645037b0ae3479e

    SHA256

    c0db8c53078550b2c326e5f90c790d805043601eaaac99683cd1dd742974272d

    SHA512

    0691cdee51a4570f2c41bbc883dfd441ff81dd8bc0c27c59095bc4bb7d2ff3c07c3c1ec72739a50b1a0db2c0b73432782a88385f2b93a5abcc852b64af645768

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c101ab1a2c176df6f091decb2e478356

    SHA1

    a0497ccfcbe3478805db2d071f466bc360a6a723

    SHA256

    f43dff4ee75697a5b0a3d3aa869caab2e9422ef1baa5373944941e16de1d9d1c

    SHA512

    7300436fc9d0797979956e56c1c9ae72ecee7abcf3508a08574eaf95fbd52626ae035e34f24e05da1e6b427c2d1e273435318c2e958848890f1acb6280310936

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6dbd302f2fe801f3c2ed66b94494ba97

    SHA1

    2ad3d740888387ad6c68df4aac8a665dc8ba9b3f

    SHA256

    6eda9d02804c36b64b04044c73bad593c08ea526a3400fef6c4fc79d82e2ca53

    SHA512

    c3ee5fd0dc452999658be248876fac08b1a6ad299a2b2a46b0215bd993d3142017d0377e8ad17afa37ecd11827c2518d3df1ed51c8109457c77c1cddc63707bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbaf975aa2f881941341abe278d702f9

    SHA1

    333f1d5516ad2bd976d48cfe1cd351643562db9b

    SHA256

    a91586939a03f343c6433012a46399468ba1a3a6d93969dd02fe8b1e792b7ae7

    SHA512

    912d136953403b28b0b5d934009cd359d9709078913f13c36e8f185b3046857e081b7b81e5b45284d57448198b84e411bb82b659091a18c59e880383c89b10d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f82fbb6a8c8997d7919f860b95180faf

    SHA1

    65a75fe74c01ceefa24d37a228116d845907abaf

    SHA256

    049153c2c899a7b0f51e9f4806efd7ea88d366e3dfc3a0ca574b4b63d290c40a

    SHA512

    d3d599362ad732f459447db6b2abec6a89a446e03dacdf967b7b634533e3b52957b6eb34cdc250af853a6227ca0caaccb3b014d8e987f2589f844533360e084a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7dc8f4319bef973f5765eebe3b517dce

    SHA1

    a6c68b853f6b166ae028da6d81b575d21562a67a

    SHA256

    2cd0f240fe6618e7e17cb129c429914f06a09a7299f3a2586fcdec13448d4535

    SHA512

    7e289a1be34dd861827fe84748f6f62f3845bede81a155cc04fbd165920a18471df35e6360310202bd5a76e794f01253b3365edeb3721fdd3765e66b5888ce57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce8aea5199ca42bdccf9ea5bd3211097

    SHA1

    fc4a6ddb704b5510067813419ceb280d7892a538

    SHA256

    3b31933f175263828cd4d0ff658236d4079ccf0df266da6ddb089d74ddeeb309

    SHA512

    f9e8f5c94a15fe6bc8ba1902f5d6cd54312e09b1baa77efec725300e724f9adcb06297c07991360a2eb82266515603a0d707d21815032dfe2bffb7795c5fa0bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0bc7e88b98eae04970472e861ea90d01

    SHA1

    7cb1651fe1ec1e3b6fb8044873f1f5b4a9ac8911

    SHA256

    3838b62cf7abc46f9542a8205277cf69eeb7c61f64646b3490c32c77931d833b

    SHA512

    723f4c0e0774da523b9184a6766f158303a780f6e018a25015fb40dcdea9e622bb815249ced0a0dbc8b254dd2908cc4ccfe7ffb30ce2957891b3b23a7d6ed2be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9eb7208b4ce74ccd1ce2f14b215db8c

    SHA1

    08cc3f6d43a9b1c106dce93907329c964f742ecf

    SHA256

    5eb0f6b91af85a626378708dfb686a1074bc94a4f2713352b72ae6d514f49c1f

    SHA512

    5ac62036b0c3234704b9263660f98f0f97fb738730298e1c488aaf0627e9cf60d5aef6a50d0667886cbd79a48f7404779ce91e2831f9e8edba9e1fbac572cd01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfd9541cb629988f13802f99365fd7bf

    SHA1

    bd7bc26390f216e26abf0588459d2dda8f0a4c95

    SHA256

    43d603ec9bcf065bda5b5be1afa51a6074ca749f0cf1c3b47958fb4bcd409ac6

    SHA512

    ab29cea1d85cee0ba08a609419c4c41cae573538b3f418a6e2cdbf884c9fafd85aaa52a91b51ef73d0f8805807b7e66e7964f59d9474e78680b7036dd539b780

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05dd785c2e21172ee56c380b59804358

    SHA1

    ba6400a7a1febc97d5d52fd253f2793e099c7db9

    SHA256

    1ffc72baaa063d7a953b9812df302dab1b45ae9583ce07dd0640efe560152e76

    SHA512

    84b01425d6ed95957fb872a9e8d89ed0b69cd3d452aa45a30b1aa75264da0b342f3ccadadfec37d86a3933249379d93c7ef1cd30781f8d0d7ba3d17b1454c539

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a1e27ef1f750ff16c4b3328e1cfd2e3

    SHA1

    05afe8490efebd8d101cba92b2fbb43f430cce28

    SHA256

    91b57d52cf19e0f377527b1eabe1f4ef9224de99b7509bc59706f81a707087e2

    SHA512

    33b93a41ddf4eca090198e1aec64fe596f0adf9c2032847aac50dfb7b6cfddc536790a9b3ad8f042b99c2706769b217fb0a56008e306ef833a2d4b47b3b534c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e036d0ae657c9438bf1d0410c0b147bb

    SHA1

    5cc112484030d1e94743bc3fe7b3cb5ae27e1ad2

    SHA256

    b496b0ccdbe5a7e88b80ff85c003d501910a94bee687140c26ce0f11c47b28f0

    SHA512

    16f039b28ab1386fdad3b6e304e51a96c1de4f07e55f30f59a0a60379fa8a9ba5fd58bcf675ee9a8509a69b6f9616e911e8d03bd882ab76744468edfc6952cbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    686158d82c9bbd03bace59067a4718d2

    SHA1

    0cb71b50b04a8c1ce78876e5489d4c8f019b51c1

    SHA256

    779ecc170337d894036af26dab8f54e82d000c1f02e2c7390b3be0370fbc0568

    SHA512

    2570e5b677e1baa85417731536d7ee2fd01bed9ef75025359fe9e1c6209cee816c189debe650e5fabb6d33cb817ef8ba42f76c66d62aba2f391328a6db0ad0a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3b06b2c38c1e321f50fc5547fd1ec17

    SHA1

    d0e0063864b1fa4027ab751b36bfe52e9cb4caae

    SHA256

    eda0f539cca6de98564aeda081be2f3ec81de78f7e2ea31cf328107a6369544e

    SHA512

    d799a6b3703e55a31f94327dca1ef73b985e0b31c6dcb2cebd6d684e71f438307854309d7a85383cbea29ec1c95c6c121020653af599d1bb7091bfa933e41332

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18e77f6ad3134beb8aee462662249d26

    SHA1

    6572635c2a07963e24140cb9117bae2fdd85ae10

    SHA256

    beb96eac24085ddd898da2b40c581f13980e315e99d727c94cd9c05380ef0e42

    SHA512

    70e6f191879d92436cb834e60f2c3fa34e6cf8556d98c55c87d45b0022b5becffd6b64b6cd027fd08b271bb5ca3da5a2ce8fd66b0921753199bf4fc275d3b4b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43e6379d3026a188a6fd054733da96e1

    SHA1

    e2d77e631272c0a75451904549a06cc307bbd46f

    SHA256

    cd303b6160e45cc2726f10da3975a7c6fe089d99a9c51dfa7bb2c83934b0be3e

    SHA512

    f397ea23328e712fbb9431b6b37260a277d1a2840d9eafbdaf06941781b3a806053ce78932a67460ee56b0d1c4aab29a6795cd354345c81ace9ef35ebc6b15c5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab9760.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9CF0.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar9E0F.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63