Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    09/03/2024, 23:50

General

  • Target

    bd2004ce606f8f646c3440502f0e7c14.html

  • Size

    58KB

  • MD5

    bd2004ce606f8f646c3440502f0e7c14

  • SHA1

    481ba4faf24e31e171a01d719dcdcfde4886c033

  • SHA256

    e3a346e8a562b1c57541ad95adc55a53b4be99c0a9ead00322454c9eea1ad2eb

  • SHA512

    3f99e0d3e6f0d614d244346dcd97437ddc3188cdf82c6c75206eceee4daeb51cd8dceefb00b7566555e50707fb033ab837e584b93d72f29c8ec4dc53236c6921

  • SSDEEP

    1536:gQZBCCOdV0IxCPOVRfFfufsfQfef8fCfifWf1ftfjfffHfBfPfSfAf8fXfRfrfWa:gk2v0Ix1tW0I2066+t1bnf53640/ZDea

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bd2004ce606f8f646c3440502f0e7c14.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2312
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2312 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2176

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          67KB

          MD5

          753df6889fd7410a2e9fe333da83a429

          SHA1

          3c425f16e8267186061dd48ac1c77c122962456e

          SHA256

          b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

          SHA512

          9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b354fc45d27f375b18fcf9d301da8347

          SHA1

          5f844fd98a8d1c8083577fe25d4a991a28e24767

          SHA256

          e7784acd897655e7c26a9d1c2da7f291d295fc50ce3d8ff93752e073531d6fee

          SHA512

          1a7730ed67d2952017d08cd2cf7ca7054072ed145d6dd32219261e9ad88b5fb759dedbb6401da0ce35f698c7f15d51557e6db120c8ebd92d5b5360204c70ccb2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2af5aa5ce19a68e88e4fe53777995b89

          SHA1

          5037c2f970398b4eadb179b3e3e30eacbd9606db

          SHA256

          5bbdf1fdb213c7b057a1c46683da9cf0cee082345ff1c39106263acad8a1db7b

          SHA512

          61ade0e16d3eeb76f22564572b22497ed90a3a44f6dac381a83748da31a469cee34724a5656be03dd2b04da333992532fddb153a6663e3d0be377403a7b6d4fe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8ea333ec07432fc7bad8c6a52f422857

          SHA1

          8d048b75415b9edba2f9e85f9e4e1ce7018429e4

          SHA256

          c4c5116eb8c7ef60d8f2a51bfda5ccb24506257143f8f199408f40ead339a39c

          SHA512

          2614e31249a524ce39ee8e08f9243bb80fc97f85890548ff3a4ef94833bcaa95060d3e31d5ccb991cd070766a95cd1e4baf32073efad8b3fa76719186d103ea0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8d8f0076a64317ec9082398b640b15cc

          SHA1

          2bf54c79b81a6efe9bbdaea7ed8c215da6e53cc2

          SHA256

          cddf70916ec9ab9605a794de58c2ecb72e6c365fa0dd1cf6cbc77f319c615847

          SHA512

          0bb1dabf291fcf3328f5f0aae8e593369ec9d576f8f7e6f478f85762287726cae34ec1a25d75d25acbba0afbd9e1219831159f87d9b2fc9b490464375544b8ca

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2e6da080c346d00e110cfe34a766f5ca

          SHA1

          08e209f0ee62c1d6c68a506452db6c66189c169c

          SHA256

          64c1ebc566cb9ff6d919a398df33e460cfff4561ecd45c5492c924d144be9a35

          SHA512

          10f52867d90f9b435adb20445aef280f3397c7ea8c02015e359565e55e6f797ad5df80b5d1582c996ce47f0a9e4ef6ca9e0da40de86350f7098028d6edcf7993

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f622df4c5e98f1dd66e8834ebf39ff1a

          SHA1

          1b391911ec04578b3928d9148c8ed40b9bc9e843

          SHA256

          b32853abbc82dad9338a22d05edb6fe5e49cd52bc0ea6a37c7770cc84850d5fa

          SHA512

          78dee8cc11ee35383af313fb23a6f1c8a7985feb4dd1cac6567caaa279780d3ddf82c272fae99e7e399cc7402c01a1a1b2cc87a6a5bea5440fa6acaa76e4c138

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          25690813f8e1b832922c688d823d4624

          SHA1

          a7cfda06597a3244aa343580a32c76f552418b22

          SHA256

          154d24edeacd8f5690e6a759700705497e5c5bb776b61da4e8750f6db6ebdd00

          SHA512

          5bed9ba3112cb96ea96209aa8c789937596e01827951d5885c485147294846d45bc1e5dc7b4545e685564db84606112f34516bec39abacf192ff46c73ab37f1d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a96c2c29b2d4d5d36cbdf7a7f56feedf

          SHA1

          44774c28f3cc0c341de0c5ba25613d831fcca870

          SHA256

          45ffbf816a6c7d2b96ea354e4eba6fecc3edcdaa002577465b54e19070261c8a

          SHA512

          0113f1b79d38e5c3e6d49c431d8719e7bd4488fe419f9e5400654df03901acc6b513f85ade5938111ef978cb73d25b0f82602ed1557ee7e33db7d651e9496630

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          049b2378b923b0001485c46e17e182b8

          SHA1

          4d90b8cdb1ea4a16eb13ea830d07ac2fe26d2a99

          SHA256

          38dd542966983a1ba1ba7fa6f6850c89f4f566a47c823dc4b10aebe9caf34ea7

          SHA512

          d23f6014ececa49f42de7798765ae641bb5174443148d1e0d090b30dc8f63e8f11a6627c1e24165b18cc5e87209beeef23e8693ccd3f440629f0afa6320d3405

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4a93772f1bc1d4829447dbe5aec5a091

          SHA1

          c8c6d68b0f50a4a3c13cb092c29672988c1df291

          SHA256

          14f02ddce18bfaa4de64234115f7cfbe215736a1aaff128f7da3f696493f16d9

          SHA512

          3de9a92238a5a6c92c0e7cc86f99c073f5ed59ec66e65929a428f8153334209cf37d6e435e733bd2a1a14d01e9aff8fd774e43208c2b55916bb2b65435b2e99b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          63ed3a5c420da1055f832a96503d7047

          SHA1

          b40d75840eb7a56c23d8e3f3b09b657a0fada915

          SHA256

          47274a8d9d5eda2695192a2c9dc9d8fa9830aebdd7ddb13dbfbd9da6c2cd0cb7

          SHA512

          3cc64504bdfe8e813caea3bf9cf247d386b39b9f6e0edd02630c3472b0ecd8ba2124fe43822e23d424237da8e645f42fccfab91cfb90cf929f68c81d86269d7f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c0feca17db42f8bc0b8187135c756e53

          SHA1

          60f46ff5c47507a74000bcf8f46ec3f72fdd1418

          SHA256

          fe166d0c3c9b38d858eb9d905b1f11663a0feb35a7b8e382e5f28a91d099b5ee

          SHA512

          8cb7c2dafa9bc761a18c4d010f66ee1c421eb5e94bd843365af3d41824217ce1cc7de093c3985348bbada5a8a97f80144df18957ba26b5ca212225073200a263

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c12819ea7120d17744df34a2d07dac30

          SHA1

          04a8505011a6bf6cadebcf49010b0b422d5f351c

          SHA256

          1177eefabc50bdcb0427faa7900d6a4020f7e921284a9cfebfc96e9cb1c7dd3d

          SHA512

          13f8854108aa4b5ac0acbddd0ed1f4317c0420f82f69df83a207ad9ee097037d723a90a0b1435658218943bb00fe4c82bceb40fe774cdfd633c122c87b886230

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fecefbd8c0be380e2bbbaba0ad88fcfc

          SHA1

          41396f675166b0170fa1f21aecc9abbc38ccbd50

          SHA256

          049e539e99afd75ff7d00e9c5c8d0602a48ce89de26b2418f423ff4a02561a03

          SHA512

          0bd2c0b2beddfd14861cde5afcb306b495d551cd136032d6f23f88a1e6b4909c5d2dde10a3085d60e3d4a64573fdbf4f2548196555b0f8705058c5a7a7ebe0de

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4d92a5f1a178339fa375b8009cfe6826

          SHA1

          bc9725818064ec981157e4e1e651dffba6f5fcc1

          SHA256

          9f3f46540383931b1eae86ef3e4c34bd479a02d1326a00525ffd9fcf8ad7061b

          SHA512

          5a5b301057ba5aabb99e3a0928a780d7ec3304750de9e25164785577299c5532bf3bcd14b29fc4c5024514b65eb81b4eae8c9ad351ed57a0cdd5bbfb2fd5e3c1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1347821c949010095f8299f6c035dd86

          SHA1

          23aa8ee6ff4f974624769fa1172e3359f604149f

          SHA256

          b6669efd8f5554fda7dcc44ce74f52368c4f34d21b7c26ec68e0f6520a28ec87

          SHA512

          bd5745571f799020ecbed38086d849833976b90fa7b91ea977904b9073373a33fe94f2828ed400752aca1fdd87da418539236940dff3b0c72bfcab7c82b9fdb7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5ff28f32536efc0b499af4980d269899

          SHA1

          5e58837bf26d9ff6c001bd90fba0de0b90570127

          SHA256

          dc509c735fd4b975e5b0becf95ecee1ea3b69b62b409fb46d3d7f582f2752a50

          SHA512

          1abef11f88d3ec748aefebd646161762e61233e9b6966114c90c833d401e2b519059820fd7ebd352f75d517d913969dc4e8c18fe7a9520ad800fcc57e67bee9c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a47ca5712b117a4e2bd42a47945993d9

          SHA1

          461699e655b39fb809ab203c7bd2c3a9aa7adfaa

          SHA256

          7f00c4b29856db5de9adb44b6cc36daba22915ac4f10951583a74475e578b303

          SHA512

          64df678c1c30d9da1fdd1fe322436360e151b421a842d55ad52a4fc24b135129df07cf1cbc7063e680188d6c51420dda275904eca99b748cdc64e6ac3b672e63

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0840f46126a87126b24d40f6167aebe3

          SHA1

          3e8ed50408384fd498248b469008c2601b193f58

          SHA256

          694e7032abb818ac4feed166d7bf8fde5d3a8e6d28ca75938e158a8a60549f26

          SHA512

          1097a60e7dd9d606930b9570870d232ce80cfb7c3100eb9c54bebc6d7766b8df7be0e066df2b3bf5068413c2870de9a93c5a48e7122bc7b34868a40a77daa02b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          92a02b45d91cee38fb8da84d8e229fe5

          SHA1

          d8f10f0bbf0beca32753fd42a9ca0a99abdd5eb3

          SHA256

          3ca664f9b37000544eb79147a4a68398b9b526510cbf7ad461d1ceb808ee6aca

          SHA512

          ed770f24ea0ac51792f7d3a14b8c1e533a20ec7329c61793ea87d47d5abf1a057606aba33e474cafe85b9ad038f899cd29069587e6d6849c4053c8f99cd2737d

        • C:\Users\Admin\AppData\Local\Temp\Tar1240.tmp

          Filesize

          175KB

          MD5

          dd73cead4b93366cf3465c8cd32e2796

          SHA1

          74546226dfe9ceb8184651e920d1dbfb432b314e

          SHA256

          a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

          SHA512

          ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63