Analysis

  • max time kernel
    119s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/03/2024, 13:31

General

  • Target

    b7847660b936dea44270eaaca3850e08.html

  • Size

    3.5MB

  • MD5

    b7847660b936dea44270eaaca3850e08

  • SHA1

    d08cc24c1767d776c2a13e375d3e473ce4626f42

  • SHA256

    337a28867e3c2251a4a2017eccf75ca3b55505d8b3409eefd8f5baa2956dcbe8

  • SHA512

    29f692917191a2e4e4cf766fdf634da023356fba99127e19660f74e7df488e6c0d391f9b14274e2a4424ccdc6a316657094888271d01162f08b41d7bcb3cc856

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nua:jvpjte4tT6sa

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b7847660b936dea44270eaaca3850e08.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1740
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1740 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1756

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4444e1349ba61eb78dacbef0dd8929bb

    SHA1

    bf3edd6fe28aa817bca7bf988ccad1aa88e494f9

    SHA256

    9a9930770ba410db1bdfb00f47b701a23db249d3db88055b21f602f2d901f300

    SHA512

    6b7261580ff8c1c71e7a026aa7ce94de70b57b7d953ff52f49ecd2b5a2ccdad6091ef37c307ffe311a792946248e76153db566e48dc9c8909dd7982ea8753f6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    017a023d3ff1139d36c2b701df1e7c58

    SHA1

    b8a2d62c567ef1c19e636970baaeb1262caeb343

    SHA256

    7a8794b5a0dd3a20b2a7fefbfded2cdd0b7144d13044b7d334aa04cb77365a87

    SHA512

    ab84db5b6515eb3dae11dc844cbbbb57dfe945070b352765e924290d411eb7a89365f0f30c36bfe766bfa3b55869d4708542d5d087ac628152ab65110fcc589c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99119558f99f1f593cb6714880c50d19

    SHA1

    0668a981e43cf4d5ee6a3a9dd6d2871571dda377

    SHA256

    597fd7c6d917e3b55014023c7e472a39fe69449e5f945d6cdb636e34dc93d00a

    SHA512

    6a4dadeb70e72151b5efb7f8cf5299aedd85b13c08e2a03b6b2cafb787391ca7179c4a82ca31b0803ba92d7e6b2cf3291846bda6a958cae3bb2728d682f909c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2aaea2a86b0ac4d04e02496ba55236e7

    SHA1

    9c2531aa524c9441682f131077629c7bada8c13b

    SHA256

    eec78bf3e1abe38d35c31e6c4e0eaa0b75c8d0c67a6ee3512c0841c47f46bb89

    SHA512

    387775bc68321d85eb23430d2e9ff7c66eb576492916ae33f97654d5d7c9f74e6dcf897365e5873f06b2f307678f31f6cb1b144c736ca0e0532f322060a3a687

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    865bf8991024f5bbe52d21282c8131f9

    SHA1

    8c750c1b5ebcdee698a02468b918aa51e1d8523c

    SHA256

    79e191be5c0307c47c13776159db8ba3a2a2e9f31be8fcb0ff65f3cf37dc5a1f

    SHA512

    26e4d7fafd938a6aa99fc624e789e40b07a5265b993b920a14eca13358b1c04ba9ba63d1bedc4a5322685f043d1005e083812630f580cdc34971cc1df8fdb9a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    963d0ddaf1b8d400e36a46b0ffed70d0

    SHA1

    9aa754cfbc8f1411f0c0c5b39fd030a0950b6789

    SHA256

    18d29f1c1c856315c420d59a220eab3d3ce0c9e42d4f24e8c8cb170e40f9e731

    SHA512

    e37cbeec1024febb541f63ce7609420b2612dcc96a5e98f4e3e8a8ce7e5ea0e3391d19a1239d12358597890f82e432b631790ab5a4b7b53dce3f836b5e2dcb08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbf10204d589cbf389606f8fee542322

    SHA1

    7e402f069f82a44225fc1f5c19e222cbb3a7e365

    SHA256

    ea2c37e2d40158de8417df12b3e5ba4bf04d4649887936c1dcfe16af6f938722

    SHA512

    27fa1f62352da0db6e65c6044bf6100430686f00e893663a8df7e9ea0a04f1ef303fe9d7d4cdb46a98e6bb43775bdd851701cce5741a7ca39cf39815ad7b9d24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d11b603d70f5876b57c488cc7e1a612

    SHA1

    5e93302a616e746347e510ef1df89db3e735436a

    SHA256

    0ec872a1de2cf426ebf43f69b54f56b0d6bd75b47b03fe4fbbf090eedb0386ca

    SHA512

    b1a96facd79e6628ab326cbaeb8ac7e16b6641224a9844aad98d5b86755b2508d352aa0ca8df4f56f7420b2e07b01e71c58c555aa9bb4a7ad9b21aebfa8735d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a540748b2e480dbf59e1852ec2d0a7c

    SHA1

    f6e08812665c1d6e6446d8b292ade80809adec4b

    SHA256

    aa969410cd5e86a8508e8b35b5cacfdf63e74dfe684609115c64c728c4b59ff6

    SHA512

    ea499e9548a385f72b46f5b127a523e76ba10d9264c1d9b069f1439529b69ef89c3f13cc91b1dd6455bfc98ed0cafe6bb963f670a458a4e8718af35b8341a5fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ea066aac69fa787421159affa6484d5

    SHA1

    4e1af7dbc712dc2954d4604a4541993a73866b16

    SHA256

    bf484b7d9b96a32d16d337bda23bfebe47e188306acb603dc65c16bd523f66b2

    SHA512

    2f873253e6380afaf6761beb8127d09fa880c8347917bfefccd52f862d5ca84662ad7e9d3ad67191a55565019e787ff4439f7ed32a3cd6d4445283b36138bc77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a265801fb8c25825f699961ea3fc69ac

    SHA1

    c97789c3682ef2578f22ad678afbdc1abcfa3a3c

    SHA256

    1d333d1d9bf8974ef2551566b0e2d7e4fcf719ceefa3f75e79a74749143e655d

    SHA512

    f83547e408eb2829f55d8c225fed3734f7da3a17ba39cab8d2b2df8acc4538267a91cb8256df43cea0fd820f83b7a1800427c8bb265edefe148563f7092dfede

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6784aae3ffbc11968056e3e02776357

    SHA1

    c80a5a3d6b099999309c712f36afc46f80fb7e5e

    SHA256

    7972b183bf5a74a8a8281f9ad8ddeff36be224ac68eab130ad32359783db2872

    SHA512

    dab086e3a1df91a705b2cba55686d460c9b7cc73a113c5265938bab14e8f1c7f8fd517f8b782feb3c1952c8e5409a75b6cf116d1ae79f45669d67872e266d174

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23d51d7df83f1bc01d9938d20ab7c8a4

    SHA1

    7b84e8c402e946348b54b25e30c7d3870aa35eb5

    SHA256

    fe91a76c2a409e9e0cc72b91d1a0e6fd3d9ef7eb26f043303ff3802ed03fa8a3

    SHA512

    196cd95af34429f329144b6648f9adb1716def5f43dcd629cb1dbebe3beffc22222712f521409e2f06798a74734c2cc8aeb57ea54b64f3e327b4c3111c6da4e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edc89d2213aec9b9d9eef9e04ae81c7a

    SHA1

    454fabbbaf6c6aab780b0c4673f8af89fed7f02f

    SHA256

    58a8e2bfeff99f4c67b04d90d245501ca7d0538744eaed0017a9524713413bad

    SHA512

    77b88c95a97bbbe7acc1c60db794671cc675b20db083f2b003a1f71eb796544a9c2df194f9e1308da7c7293d9826ac440e7ee15b1f65782d6f6855684ae7117c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    614d2dc74872eb696a1eca4377ce21c0

    SHA1

    f5f7ecf6f1894392d8ce01559c686e9e8aa604ef

    SHA256

    1e0c0a2ff160bdea59459316e826d1c3505786ce72d557286402f4ac72aed1c6

    SHA512

    e6912e52358f8d29546f3294d414add0f4e3d94e6face21ccc8b727186826719d7789b00ed98d5772f3faf79be4d330dfb848f7d574265de4b40fb234ba71dfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1034dd88ded23e2697bb179c97ccd963

    SHA1

    fac0fd3bc26853940eb8aa78a2500e4abf1291f9

    SHA256

    3256e9619a58db59716c90f9c8f61188f41ee643264dfa00a197fe1cfd679f4e

    SHA512

    4316d27d3338d55b9ac5e8cd4b81168531bf46475d7e7051c3649290a11d62f5065a9b1580352272d681f6cabb3c89255edcb3180525819ec5d3dd935bb0ca70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30927a6091c013b3e2c73802b37ce025

    SHA1

    767443fa65a9fe7dbe64905d0bdd8653af481c52

    SHA256

    ac0a70041c4cf566af10f45d8ba64c6430f74c8198e36ff00a07a2e6631e1ae6

    SHA512

    70da04a553edb63fe7c024fcf44eb9a25e0e10bd312e7c37280a6ae4334af60e9e313a35049704d489a93af8c35b4a9069ada634cbc84483c2ca3f6549caa172

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e043acb67110669f48620e69367e00b4

    SHA1

    ff2c6a6a7d204cdfed020822dcaabf925e41abaf

    SHA256

    ebfdad77b2486127dbf0c846447e2c0f8b9a7ad1b0c6600792843f31c3f837dc

    SHA512

    7c0487310a7688998b3696b30b42ab6d5e0301c7f55053e03c6cc0d35050795ba5918c663e7474bfb028da7fe206b406e4827d536f11c13d5bbf263bccf6756c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1239e99861164662ed8d2734ee038388

    SHA1

    ae81246c2697e48b6eac4a9b1843e0f4c07817a2

    SHA256

    1c7b999462b751935ffe7e63b5814ba5aa5e0e72650dc8428d254aa0acc07421

    SHA512

    166e05f507b4510dbb0cc284c5f57361400afb39c241c4bc0ba8fef9b58524cde668e45baa8fac1af23b7b62538a3d330b74c8e1f32a8deac8794ad7992c87a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c078e8a00874767133e90535ec198a7b

    SHA1

    2585afb45e6d8f772caeb228600fdcca117a0429

    SHA256

    7ab9d182a20da6a00b2510b09d6b80b740de4013f81e1444113e2db2b93d9221

    SHA512

    f21373598ce096b83ceb9d1c253649eb35a89dd13bf1b9fd8014a55f4e901327dbf3d295c20ac7eee7f36e6ff8fb581d66c6a87269cac7b86bcd354350163e61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28a2e07189e65ef78e9df49c3fef8364

    SHA1

    8284cf3b98a05eadd30bc9a7c921398c16a96db7

    SHA256

    ff4b2f1e435594975f97c679842836f7f148f4f11c462d464578e2b7f694faff

    SHA512

    959c74aeb6ba80dd0c8de35994615b949fbfeac60f0c62353fe7f64fb05b94a81c53d2f9d454a9f6795f38b044fb68aa4d80acca7e4a639f0deec65c1cfd5af4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea9341ded9874c50072c765a7cfbfe8d

    SHA1

    de36be89e89267aa2149126e4ee5854345973ff9

    SHA256

    c6864d1aaf4f75d0fb86d7ffaef7eb0115fab68c3130616c5bee6b1bba1b95eb

    SHA512

    ff079f362d023b8ebd4f8041f92ad7067698e9d24ecb11459610dbebc6bf0012e418a50aef06cee4b6bfac6a855943d0ad69e5f5233152fba8b4e350095b3989

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81fc63e310f2ade91929e4a17834072e

    SHA1

    93cd5ac7e3bda0dd39c98a51410f45094a8299c6

    SHA256

    d8055e7cb4144982fa7b4a2e2ccf53d34da4faad93df015b7ce17d64e8607e82

    SHA512

    2719aac290add5bfcff1b2ac99af803b562400608be1be19077e6ce4837604b8a694049947cce16f9d9ee2ae1f2dcbe3711d37ec53d2286a25f8919cd472778a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    376df4683e8ffafb3eed1d957a636d48

    SHA1

    9ca047dd05e3170cb57f72a935b2420ebbddaa9b

    SHA256

    2aebd6f0df41d84fd009688dff73efe4708323248b7a8d18e1f76ad0194bab6b

    SHA512

    bff3ce78217d381981267cb1591e7bfe6a40dc276c81c713b74b1828814d3178942d6a5b949726c61c2660bdf4e76dbbd904805b97d6df979f34699e25cf7191

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10c580d34ee82bcc3a26e3347f2ab02b

    SHA1

    9e1e5b951c0903465520440b3f4043588e8b0a7c

    SHA256

    af0f1c280dc10642964d2dc88a67c66cd8ca020dce5f4eacf501dbbdb548284b

    SHA512

    f89361e16542c812b020de90dbebe4327a03c2457c3cdabd179f4dd977e5c0a6d13a029fed9f18180b9fe2d4df8db590c8122d921e842a0004ccd89aac1f1e80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac7af4a23ecd3121c5326f8262c7891f

    SHA1

    b73946aa0ee90d3ec224fd6d116c78c5e76e6231

    SHA256

    0bc178bdda3edbb0c580591379b9f77a0c0821918dc80151a866555eb569d01b

    SHA512

    0bc9859a8d4d87e36eb0667ca2c9ecd76667faf92f8f1f0e09d4c9d2cc9ea9d579342de286df281b14b7b7b4d525353ce744e76986657cd592ee90578335c31c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab984B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar998A.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63