Analysis

  • max time kernel
    146s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    07-03-2024 15:49

General

  • Target

    b9160f6094f3fdabbb19613e662fdd10.html

  • Size

    57KB

  • MD5

    b9160f6094f3fdabbb19613e662fdd10

  • SHA1

    280990251342fe49a2022fef4e0ba7d8a860ee01

  • SHA256

    453397276ab692c9c7c313732ddeb342af1c27dfc458f07bfcb9ffec93c7c747

  • SHA512

    585d58398395fe6b9dfadc0d5331c61d075358752b961d79c4bc8e9f93f0379eb7f0a97d671b06b0e3b37b2d73c9e6a087f789691fcc44f4030609f6ffcbca3f

  • SSDEEP

    1536:gQZBCCOdX0IxCcB7Lf2fdfefQfxf7f6fWfJfZfXfLfXfRfffAfLfWfUifAfKf7fr:gk2N0IxTuFWIpjSuhhvj/5HIT+jIyDKi

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b9160f6094f3fdabbb19613e662fdd10.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1888
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1888 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3020

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d343d14165dfb7e556ba2a60f87ada2

    SHA1

    7dfa5f19fcd3257c577943ec1ff0db1552e98a48

    SHA256

    3532fb1b66af7ed04507de59ca1c4a0db0aed5f3b24c94a248434017d26684c2

    SHA512

    470f0a4ff3c9eb1ba847f812c5b6dd1c94cd6a0e59d9c9f920275b9d52f3efaf13e2a3e6760d767d17de6fad6cd38649f8f64976b7fa6f85cf9e242630983833

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfde67a49cfcf4167ffa8bd5a1f5d87d

    SHA1

    434bdcb471aa93d3b06b85bd3b1ea7802f0a83b5

    SHA256

    523459d8eaa1d7156b8119f778707820324dd06938be57d7156759c67966b0d0

    SHA512

    addcef13b22e221f02fb6d17f2e7949467e591671650dcd2735b828386cb5eb20388f1307b60aecf1b745618479855cdca2cc30c02e1abc1a32b6ac071ded1fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36205dec93d45dc12191622e73485943

    SHA1

    5c351d6d6aab5d0e3fc70c807e1db10a416b45e9

    SHA256

    ead7f11eed6725d50af8139b070a5e3e3244d038dcfc69d5769e43608e1bf417

    SHA512

    2fc8fe27ac15fafcb94bcffe48a2664eabd8983d08f46a8f7b606584053f2dce7f5ef0d194341b6749d775dfd04143e63b4c0afa41dc563afd1f55f4681e36a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7aa6506bec76f718262fa2c5dcdbda08

    SHA1

    0db1089f7c9068d4296c21b85c54a1b3f3baa2fa

    SHA256

    69e360858eb4e9e5cb52e378228086fb2fd2b2511d35470510a8a830e84e17e4

    SHA512

    1d09de168b3d1f633df45ca814f2a7be15d51f02546d4843968e3cad97143f6540b6e98697a11546ca3e61f045db7d461b573db3c75e5c0f38fe232c7401c905

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70c370e89ad4d7db103eb27a52dccfa8

    SHA1

    41e3059e667ad6d0c12424d77ca84743bacc49a0

    SHA256

    599490d91447d9b80c5463ec414f2dc465181ed244f47d10845e981683978800

    SHA512

    be9db770d8b1be4c523bc5ac03126c65dc6163b969ceef36325b02629cca469255dbcb4b984c56d807bb1e28fa54afc628642871ff391ca4991332b9d64ae991

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6026e070b63dec3e14325832ace963f

    SHA1

    8f27e2279cfe84126aa52bf5b68ab1ad975e1f3c

    SHA256

    cfa06d952bffd1d7ec6721384661676adf2f9fd57e2f4556823815b25c1808e7

    SHA512

    f9acba93d602d55741d318c31caa581de2ccea5df52fb04f22067d8ecea798268a70e68b17a220834f2d4027cc7bc89111eee285fcd089da5e793f590fdb18b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b8342850b76a4a8b5d1bf3ab8a3a509

    SHA1

    8ea3eef38143351fe7cb8b96e28cc5a5c95446f2

    SHA256

    ed0eb5460e7539da2c6c1b2748a11b176d83c0e77f95120ac89dfd6cb4228411

    SHA512

    436a270c858f9a4f474655a95ece7d5c9c7a7179b411821934f521420dbcf826bc9913d2d0d44788e14cd54fc7abdc919a20567ba2836ad0c51830d150ae510f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b7a6ad6f67019bb5735195245c10fd7

    SHA1

    98da1d1b8109f0287bca969d064c99192c656af5

    SHA256

    13f6f7df00b6eb5881f7e1676090856ee2b1c6e578a91a5076f1e874a3a96a84

    SHA512

    0c780d55cc019cbbf3f802f71fdecb1846b1462992a27eedbd61dafc1042068e41da558705fb76faca4d54486ac66927140109f65fdffff0fbc4720185a10aeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af1d084acbfea0a167df94855970fe3c

    SHA1

    e1126799bffb9db9680d2f8a705931d4abf7a4a7

    SHA256

    51abb8e74ce94a756875522618e0ac74ffca8f92a7f71333579f0f2dcbe4eae5

    SHA512

    f48555643794a2cb2f837f2514f5b47f718d4f278ec6a9e9c955b28343e32155e6163eb84e81ac6f0cdd67da002977e72439912b60a6d5b144205958850360b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65cb9105635b5ce7ee169243fecee632

    SHA1

    fa66e309d862632ba58cb75f820cd151908d0cd0

    SHA256

    7de66eacf206150884894afe313ad9713bd83b9e33a8af1d57604abdc49da718

    SHA512

    6a398a35bbbcba5a997d8d3ee8d38d5f71c4c4b36fca59dc52ac59c58375d074925d527dc0380d8d40746f54715e9169d6fc5d02af6260af4797af747722ce0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5ff9222222e830505fed54b6f83eabe

    SHA1

    da67f096598870ddc7948d12e02d1c229343bf6c

    SHA256

    cfd2cb963a114d4ba1c2df2aec67c421168f12b102c429b8440b702a2ab847fc

    SHA512

    cb1692d57664a2e4e21ee05d9d392b3d0eb3cb372083c01ad8cd4eedbd2fecfde9b6a9fbbac0f578264b352c7a012a47e3d509a312fe80245a5288280f44bb53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1449d3d82d1ffe1b61a0e33c1bdc597

    SHA1

    d68b7a64ef926945b7911136757a1426dc6af0dc

    SHA256

    a374a07fd3d953be9690fcf7f26bf63fa0978ce7679bffa01be94166e3afb7e1

    SHA512

    7992f0b853fecea537c7785e6a9025f2d4078796ea11254ee2ffa8ae47a5d79507da6239fafe417e322f27a29f9b1ca0c976e181b6730a62337c64bca6f195c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    860c3182cd038bd5e92d4c8394248d39

    SHA1

    7b2d067815f0680b77c2212c43551cff6ccbe9e4

    SHA256

    92dcd345020debc33d71e7f0b9e3607814af9f1dcf0132f1fb640b9cc8eccc1c

    SHA512

    33d5b170e9512769c6a667636afcf248261f842e22746329b7ff13a89e7ecd1477aa76dff73aa10c71fdce46f0fc51eb6062194ca9fa3b713b936beb1f0015ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce438760b3329c235dd84df358afe136

    SHA1

    4f8ec173d629fb9e0bd38757711b012ab7a2ffa3

    SHA256

    d1a791a780658b842901fc87cdcbd65bb08e5eaff4c49a4bb3544022478ae8af

    SHA512

    74596a9f4bf4655b7d36c0f3df2b6226fe202bb9b42b5cb535f2ec8f0095b3931a4aaa3b381ccb931f1400e54710892895b7cbe95e896d1096b1c9cd952c6260

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be536b4fe7d78bc44066b231847b1de7

    SHA1

    dd9e7b3b0201d761e89bd8d8e7f98b0865a4d00e

    SHA256

    c62d74d075351a0da8cc686f3976583aa87cc0617fe6cc2fb934a80738522bb0

    SHA512

    13213e49d36b641f7b824eb33be31d7230ee9f0826d943c9231ef59324c2331ce3a22835c9e9d99fb705ef0c787ef35aa0254706a7eb4467b4bcaf017a4e2f3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97f6e3d8512dc5f37f8ea76df3268071

    SHA1

    e12363a650d9c4b0d30fb74a793fea72f4e945a1

    SHA256

    a48820f79d43145ce0ea23165d780f482df5dddb4f7884a0ad9f911dbbe7af1d

    SHA512

    3c8a4a0858f3cd2994e3f7b7f8924c86badac5692bc66b8e24abbb3a32bc2bee23fc918f64b512df802042397b5857c0e77088b9c3027b6f797ae4cd4e016a9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0675f5c8ef2094a2993812cf9eccf68d

    SHA1

    2661ffb79da5c13df023c77b67b40e09e82f255d

    SHA256

    8c0060efc5993465dddd075a65410d2897c8c7c3e79d9149c79713bee5ef7c85

    SHA512

    6f7dd6f25d46a93d15fcca6d598d0b59e075f01674ee5df2c8fb81c3ed10950e4b724deb617f5c720678b022679d4978985388b787f6962ce6debc1fc8535cee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e07c8f8b352e485e0ba9713e014e039

    SHA1

    becf8edf372bdc274a1956725bec59efe487463a

    SHA256

    11327d7f155c9285fd865d4033cbce464196ff72c796369809bb3c1172f92b2e

    SHA512

    429ae108a7860b1a75c9adc6588343b03b99e02ff34a4063fc257ef5f254d17f7f44ae968af5bea0823c8f56399d71a2fd199e27b62098a0c576dada1225dd3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    380214b237f7b1ce10738ba93e0d18fc

    SHA1

    b9388dd93ddefdf0155c8e51266f6b4b2cfc665f

    SHA256

    818c318eaeb830d0e798e71b691458635101d8f7dd7b25d062ab1d9ea6c15599

    SHA512

    adce61be2732ef31308c395810c2bfc15a3ba1f1ee81ac2bdd3b37d25747a2762f0662c66380a7c40bbd206eec2e3dddddf6143f642924f2df984f7e9c0f868a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89510016386855c39e5c175404469045

    SHA1

    641a5d501f9906e22bab55834c934d348c4016f5

    SHA256

    6bfa1d36806309dc9f1da8f32f149c24de3c3503c0b817f339ece8adf8eb24a6

    SHA512

    ef1fbbb67445f8d36932902c464ca8be080d1b28fc9dc11e391b0672a436394c9fc922dfce9cf8488553b1c3ac76441703760db9488b55102a76d7ad7b935510

  • C:\Users\Admin\AppData\Local\Temp\Tar16A3.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63