Analysis

  • max time kernel
    136s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/03/2024, 10:46

General

  • Target

    b73a633476d839817ea101c0c72a2149.html

  • Size

    83KB

  • MD5

    b73a633476d839817ea101c0c72a2149

  • SHA1

    b8bd2b754baa6e5e69d9c5b5cc37d6f56a1214be

  • SHA256

    c741eb5846d827bede4889ced89f671c0e997fdadd0e4fcbd325fdaa8874b977

  • SHA512

    042d3790633eb23a5b822118e09f49c099020cd101bb0ad0eaa62408bbdd8ba01fae42358ed2512f5f9ce21f161af45359346240b871fb6aa27b979cc424d279

  • SSDEEP

    1536:QXHryL1SPIQx0NcNtxNSNeNBNYNoNJNbNgGxQ:sHeL1SP30NcNtxNSNeNBNYNoNJNbNgJ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b73a633476d839817ea101c0c72a2149.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:848
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:848 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2860

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_2956BE9A6D96067F659A7D77D8D14F87

    Filesize

    472B

    MD5

    4d5769cdefe169b8e9c746d50065c010

    SHA1

    6f1fe34417ec73120bc293d21bdd53a182d70041

    SHA256

    e3be2ae4006069e239091c90f725068faa69ef06b4aad487031c1a9f139af3f9

    SHA512

    2a7c7c783ec14a49fce1942c9be84b9b588ff3bf468ebf9785fa58fad66103155a4e8227b9dc8b29de591159be953647566d0465d2855f8cdc46c75638bb63f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5405b3564c59a60b6b64679a2a441ad

    SHA1

    375400d94ebb01537404aa1ee4f96fa9569f9ccf

    SHA256

    7c6516366609720c0ca1da2bd974e3a32318e60f02b6744034a08ad8c61b2c4b

    SHA512

    9703b01d856944cbe2efe2aca581f5ccb3fe673d4cc28fd87bd86e0b940334e96ebdb4bb2b1bebf2e13b0d74e7d81b0c044cf9c0b268af3b8f1904df46081a84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16ee5f1d7e7fd7fdd8060fc74a5fa571

    SHA1

    ce9c77cfb5c0f107d6bd26b6d657fc2f97935aa9

    SHA256

    4dbd0bca294ec9485f6fc80c927e83de36e7ff989e1234cc4d37e70202e6914c

    SHA512

    07111f904d8d7abed90334a10cb1074455fda84f3cd216bcfae4ee5add584d80509fe5150961ccd119919d7cedaa8c0d95069a8aff661896298466ca5b384fdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a920c1bedb4cc10e0d0cb5e4c713e5f

    SHA1

    b7bff3fa8f6d1a793876a419af826d9f95f16cff

    SHA256

    359ac2048a86a4c47ec9d16bff774d39357635e6966ae92aa300a0dda78ed967

    SHA512

    b0871e6268e282bdc6a022235cce9757b4901f1647b5f5bf299d54b198a2e56f700d0b9a28e20da681c1530281be6b357183a5f790a80aeb174597fbfa3c80d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbbd52cb6b9ac888891c2d833c22cb08

    SHA1

    73dc80b1747a079604ab0f8bf583803b94b81cfc

    SHA256

    642077508996539e7370179bea0693ce36181c5234ec32e5ed803b8b108c0227

    SHA512

    4c48b12505a73e1976d2f4df0b35d17b5c3b75359db6aea40624ec5f146db1ff0f37272d563afd4010929a2d74388f99fba167b109abc1d57064bee478826bce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39c9ce9d735087ff1bc0e9619879b40d

    SHA1

    9e9e2e88a653c1c97b949803453c384f4a9c67c6

    SHA256

    1d69500ae49cfdd2c02ee9b1104c736d320d1c7fcc0750d5cb98b22d7dc4e8af

    SHA512

    bfda8797e3e115e801575cb884c8e13e9059d8ce247e858e94fc2bd8009ae915407fdf5e35e8f916fcf947f725e7ac1d85219907d3c3514908c27e1e1fefbfb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4e7e459dbc92ae5267c320f78686464

    SHA1

    5bacb91b1106baf4949635dc2009c0594cbd76f7

    SHA256

    0dfef6f37ecf87ee88b0155412c0d1d0d35ab2a37916798dbe262c562d6591aa

    SHA512

    2b45aff7f8b5765bf98a790be4fe21efd604e3104c03144d92d0d6ad8d6fdd741b2472518bb89731755d0517f64b97f11a93c7d94a7e8668241940244da9636d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0eaf496cba9684d12fbacb2970935f34

    SHA1

    b457650cf459e2cbf2609b22fdc074cf82ee5f72

    SHA256

    385469ffe2c295df824ac6fd4a4485cfc593a0abe8f44dcc1e0baf145bfe522f

    SHA512

    f272e9d43f0df5d3357c089416deccd06490da740834b8d8acfdb8a088deeeb9b9920d12fc4aa3cc569b67ed96e6e95d834d95e997ce57f5f7e6f885110f3e77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ac2509bd51593b644a0d858d5b929a1

    SHA1

    eca294205fd6c27aa092e879e64ae3bedcd1a650

    SHA256

    8442ddaec946d6e2169f4cb8269d3b79c62f16adf7c78e0e8b40139b1c221ffb

    SHA512

    4171b7a962a49ce35b51aaa2ff560056da45c5ad64f671f2dd9a14ed164ab2454624483c97d2c789662c127eef990476a8c014d9979d34ab69d6b61b946987a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92c73b4624265875e94676863cb0e67b

    SHA1

    cbe441e623bb662d636158e6abf17ad49c113314

    SHA256

    65c4d3f713c5edf82ee9a1dcccce03ac01c256f21d443f59b56480f62fdf5c0a

    SHA512

    f92b87c54446fb2df111b5df2f33da85cd7b65733f11b2757f39cc4cc209fd94d8383ce3f6ac153b67f6a4a2bf7a17dcd8e2ae5fba6b520229c393037211a388

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9e77a8d6e9c55748a34674ea3121c8c

    SHA1

    c0ec1e8a708d9853d12fdc86907a05c2b6e7a29e

    SHA256

    cb46849cabd9dbdedbfcb1914c8714a1a83be26a9c7a80d9a5680753d9176b24

    SHA512

    9b8564b90d91ea249592bf598522a77e21aa79e442a0b67d44e2bf7a51997b0ff48d179436f0030041e4717935efec194ae4f4c92f3d8b7eaf4d3b7ed3de3514

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25efb3c56ce94454f1b9f503ce25a0c1

    SHA1

    2deef873e3a1531fbb283ab3231ae31655084730

    SHA256

    22e7fc6722af2ac4d37df40a3a1047632e182bcc49dbdc819fa4596f254c2eca

    SHA512

    e96b93aa4fc340a486de40f62dbe0144399fcb2104ce000fb42b7cac84ab24103784de6a903d987d603bd9e9caf5a6eaa6eaa519fe4d067e5416196aed28397b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32ab234c532858aba05e4df060de1670

    SHA1

    bdba1a94199dadfd47b4e53ac02d22eae51ce5cc

    SHA256

    b21c9694f3ba60b6907318c6855ad5a5dee267004de760a84e8b48b1a445253e

    SHA512

    264244542d9bb7d6ba2f0fcf119efad3c51911e6ade03d4a027e7a7fddac72de8273660740de7fd5823498237b96693ef1b84adff28198e2ac984b5d7f126bc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28f91797f0afab2619160c43b1a52346

    SHA1

    ed79ff61398607674ca2a32bbf602c9d559823c7

    SHA256

    f00658c27670929f98bd33dd16a51c2b4c3ccfc98c92680eccea7460bacfd429

    SHA512

    0514e2d21c33b66152a557a6ba81b5dcd4e12fd0659598d42ac6165e3bfe83c34ca144681bb65373aa398401100394e77e0001a11a768503351fdc22c6f7e918

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2961815c982f1dbf3e574c93c2ae8050

    SHA1

    29c6aff4e64a2916dfd6fc2cd9ce708489882e95

    SHA256

    561e3bef5e0e520d1c04579eb954a3d88fdcdd5ca0e32e4d319e83927e49d4a7

    SHA512

    7455f23802c322c92a07a73da88d25ed6c529ab2daf45ab962a4d132712a19c43ffede4524165eedfafc73cf6ba20c2703590758a8a62046c2bf3c9cde6f1eff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7fd45d24c69c81472f7648f7c0d8b8c

    SHA1

    bed932f813707472487de1d752565446557bc7ed

    SHA256

    566ccc41c1f4265fa1a76769f5d671c62244e5d566471bcbe350166049d9f78e

    SHA512

    f6249c840cfc02db374df4d51084bbdf8203eb1bf21d799f08ac94e6ceefe3ececa1c498223cea4b0f97669674c5e384677622e6c346b9ada7741385812d50f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38755b02ad1b7be9a44bda7b5a5057e3

    SHA1

    19dc6963e993c5bfb5efec63a43ea29242c9cf5c

    SHA256

    a8d1fe8acabea666d04ad81135f19d80668472e3895ba89917c659b86a78b38a

    SHA512

    549656691283f0254cf53343dd4ee2016f1d8142616790ec862fde1ff6f5388926cc387291bf423c1e8ad0bb75005d728d43bf933443c6a0a47ec9ffa2fdd825

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cae62b598399b92185b861ed16cc10f7

    SHA1

    a6afb4393aa84a2a3ea2075b34f4d737e1aa2887

    SHA256

    ced456e0c9d06214ab459ef9c7ae76797e11fd78daea6c8ad6ddd8fa9c7a0670

    SHA512

    4a57d7c5173e3ed670bae8652cc44446c28a56231131228265bd8956615356ed1afd23dd089aef0f4ca235b6eb1b79293f6e13f97d07d5b5bd3cc2bec75cb4eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36e9b7d59881b59d9374904bd5a3623b

    SHA1

    c97678d33e188688c39225a2c8055727a308102d

    SHA256

    0b4368325d9c5f4a1c9b302bae144734d915217304593ddd6c3894e3253539ce

    SHA512

    609d4a810b9c91706b3159d9275a39ca75e2b452de31d9bf2462bc1cb63e684c9bad41cb474c8c1104f834129688c19b82c2cd0f103919e8d56b890a0938d471

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18942c32937d1ff5e26dad4d5a0db89b

    SHA1

    ddaa351a4701ff9b302e260b80a545171ebfcf60

    SHA256

    ce7e8989b739fa8332d8c31beae03fc763c8241c6c5e61f5e634451c3e883a95

    SHA512

    2d8b99cc7569881a985c8fd3b3dd109b2c80c02c8016bc35863315c232ce8752a0aec6b793319370dafcf94ba563e8ee5c8cf29d7ec122e42139db00fb3b69b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A16C6C16D94F76E0808C087DFC657D99_2956BE9A6D96067F659A7D77D8D14F87

    Filesize

    406B

    MD5

    660c94edb60a553862760d23c080c82a

    SHA1

    c8885107c7e11cf488666e1ece49404bbb6d05b3

    SHA256

    94c6f30649179687bafe295fccb35ba4c079f45e801179fd0a431516f9c380fd

    SHA512

    bc05fc9a8b25f7511907b4c95255e61f7ceded6c48f9632f74a68665bf6621c9c05d2da20def8e182294b485727ba6f2375583cdd773726fea0b1d18d1a6f52a

  • C:\Users\Admin\AppData\Local\Temp\CabE37F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarE37E.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarE54A.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63