Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/03/2024, 13:32

General

  • Target

    bbef7942598dcb31913bf831822bcfff.html

  • Size

    3.5MB

  • MD5

    bbef7942598dcb31913bf831822bcfff

  • SHA1

    b50ec32410d26a98282647e112c072a946e9fc15

  • SHA256

    1a7de618a4f8378b42bcbfabc82e3f79c2784c4a3936ac2accff9f684655e97d

  • SHA512

    e4deb12b6949e90426b7626b7de47e92f4c1fb952f4a072319587c2c89c1514392cb200c4eed21d303bc06b198d9fd978ffd4dddec3eecfb43b4ec5e6e8c7c9b

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NE5:ovpjte4tT6K5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bbef7942598dcb31913bf831822bcfff.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1612
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1612 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2088

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9dc078596d9071962e7e2552b3c7d0e6

    SHA1

    17620e5e18954adde2e20a024cb42fe27d387ce3

    SHA256

    ccfd3380dcb869c5477116b00e15a32ff9cd4e8ba77731893d43081ad3a9e63e

    SHA512

    29396591c61e8948bf3d003b0ef8365a485b206638af93e13975714453bb74c77e0b25032c84ab2148bb70ffe4fd7f9f936d52f1e383babe68815a276a84dba1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7df852ff8c60db42192119d567d9720d

    SHA1

    118e9b843759e899e703acef6ef30bdda3f43e16

    SHA256

    d9bf32b89330602e3a6c56f1c2505e0901df515c63536b57a8ce853851d3e6c5

    SHA512

    e09a10e8fc764b7d09b9b92c5acece6a7ef6f9f337ff8c3e6aed4e2deeb94d4da8dda3e51a37eaa566be09a2e6d4f323dcba3fd61b2f4e3159356fb9bb26d029

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20171897fcfb1349ed69047d02ff0888

    SHA1

    e5aeca731cd5f4432fee06fa02ef61a52e468b1b

    SHA256

    750f3f0698b37a2da8d49fd06ee5fe94de06e4bfd1aef51ad68a6065935b78dc

    SHA512

    8585c04d0f1e5aedc1a113d4512aa246dec5516bc2da3823d7f78bb741d6d833cc94045c8d94de5a53f2b7e15e418e02f9f6598129e6167c90017e22f546e110

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d0d37cd4ca5c1f16e79afb2d7a24297

    SHA1

    92d388682b36a8be7f5951ee1540dfdf7111ebac

    SHA256

    638b99be5dc2faa4aaf4cc124787f240273681db8e6e2c043720c7d6bb2a480c

    SHA512

    6d29296cc3776a3ae1fd93e3b6ba25af172e270abfe03beebc5e225d46d8e6275a3376ad81c3c242fe9bc8bfaed2dd46442f17b4a08fd02c32a0e938efb94083

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    139caaa6217eaba816f2cdbd3d8c0586

    SHA1

    53e0d3252aff109acc13c7c8f3f8d67fe6f4d5be

    SHA256

    63121c742e87fc51f2c7edfb8e9d7297a9e2b02664abc616cac1ff24ff6f31f9

    SHA512

    11bd70b97ce954d6678540e4c94e33a91fcb5fcd50f4feb7ec839afb0bdc855ea6f648af73101100c210bf7b9c707091b575e443b4b8053c69f9e47a1f1ee0e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ea8bc322093b1dfb6a6762383103b8f

    SHA1

    a37f8242426626eccc7ce234db581804f5595825

    SHA256

    4a3333f5ad26319eb6deb9efed7453c75ba6cbad3640bde8760266ebcc1c5805

    SHA512

    bd15280e83b94128fbba96c821d30c4e7425e039973a1d4c57f8313ae5e834a463fe9b9877c411cbd7b2a89fad2856e1621ab92488045a94f58a0397d39ce648

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e654503a46ebb850c19d5c57bed6d5af

    SHA1

    7fad44d79ee43de62c6a10a7b12a7f5f702f9004

    SHA256

    07dbd9c56c348aee2c592a91f60ed83d8f3a532492c23bc6aded1c17663daf62

    SHA512

    75ebfdb77914eae426d2cab85c59785952b223164f4f3aebb76cf99b2744ec18f84bde87ccf418386be4173c33623a2d1b385193048656f0f7d422d0bbb9013d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd30ab0181aa9d2c8aab501612c913e0

    SHA1

    4aa7fcea193b2b406f9877b8c1274c605fe7a673

    SHA256

    de684a88ff3f066d8a7446e960fdf9249100077d50d9923e0c7df6d88f72275a

    SHA512

    f6c229b0703f927428f5f06eaed5d4e08bf43364257474ab96bf1301e79ca130917e77b843088f574353abaf487a03d61592ba64ac747208f2f68a6dbf0569e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53bf03873e8d883e294e677a6a5a0cb2

    SHA1

    1a6b6a0356f9de33169af66f02a45bd79a2d0579

    SHA256

    6adbbd8edf73438b3ef4715f7a6388cbe7097842ae05869dd1b9bc52ca37c5d4

    SHA512

    13c873fb08131f934f34a4769a3f1788be5047af0d521818458957af2edc1413fe326f0423dc6a16d9e99a43bf7c5f7fed14f362c7af1a03dbc28585a51d5729

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8bde8f65bb7c1eda6a92148e4a329f06

    SHA1

    2b6d292f0459bdf2979f89b910cdab4b25e33ce5

    SHA256

    8c9d96417c286f586887cd843e9e03495a7b4f4edea48a89dbf74023e56a4fcf

    SHA512

    11a66c91213dc2379ec3d3690b16a48dfd66118ec42f8b61e18fc9d931161a905f68ed80f87853ab16bd190820d4ad0fd6e193fe01f3768eaa7879f3cd393ed6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79b02aa33f6662354778db2cbcb86ebe

    SHA1

    7080b75bc5f5bfc5029f80d4f95da104bb9b7d6f

    SHA256

    b34642af0edbfc2b4436c80a669d91c288fb86f8955e466e5991c430398e76d7

    SHA512

    4b1cbbb776626c244752c1247224e3716ddcf9d6a16dd458ae57b7cfd7e7af71084ce675e9ed911695199947544f75444982b4c4c6aa85b0a229b1430b63d3b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be2262475b27ccd4a5cc50c05314c0aa

    SHA1

    0e3a01f9d900171790fe35d6c354b2ac5f34b1ce

    SHA256

    59595b182215d1da1ce0113b05a12d8f700f33dc30b3219b0985cd1d0d15df77

    SHA512

    2d334969a533c7d71f595b10bd1770f133df712b028371d2e10d78b638461cccbe19601907b3fe99897b918345f8fd6017413016efe502a2e413c3cddb283b95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81c6aa650b0ebaad9f070888f42d4037

    SHA1

    8b020b42876c0c6e9df755d80abc8cf25ea46fa9

    SHA256

    04740bc762e023ca09ba60680d3cbc89690f62d172c8cac40908647ebe2e85d8

    SHA512

    9c276efd0bff2ef46d6507effe8f68ce09c88b52f5d7546154a6119309f6f8959146bc877d8e3a96ed5a266265ab4d6e71b40e774ee8ca571173acf9496dd279

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53ed8d0a267297f01d7a683aba12452d

    SHA1

    77d685e97701328d23f5477cb0ac8ec8ed9fed9d

    SHA256

    62d5d5696b63989a911215eb174239a654e57377cd4918f8df722e9472665e64

    SHA512

    195b54f72632667676a18d1597092dc1e0fb837d34937db5f7fe4bf232d9bc06aab6ae6903edcfb1077a6db5fe75410213013527ec85d0238cf1a318dd6af0d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d1e27a1d50669432495fd07624f775c

    SHA1

    426efb7c6910a4b8875f22baf330bd241379d759

    SHA256

    de5019c862c88ae101fb8b06f8ed8e048e146f89c4ffea3412d29b90f33a27c2

    SHA512

    3b897c0ec712f94a83ed666d4e46f9dc7e096d0e379c3ee786c87b1c6abebbbd3b0f59d48bd495a0bcfe431e89769b38e0bf42b14c1a1c1f12dbdc6115d7040b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48a0bf38d80d02bc18b1fc74265b5529

    SHA1

    079dd1673f23dafc4d066a3ac4e67f1a3a5e6895

    SHA256

    911638a000668448467dbb6ee995032311d184e791b27f922b7cc72e4cee531f

    SHA512

    309752f690ea58022dbca3ae8bda2f187cea30f3d4be26cd6313d169c79f9a1374325424539fc002baaf02b7fa69d08aa2a9e746d7ac7fdc17f79086f483dcc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da9658d9ad958622e532314e48cb352b

    SHA1

    4e74b89744c813cb7f9443b42442806c02cbf5dd

    SHA256

    c6aedbd55a054c2364584fd7822767968787d65c6c6382fc56a410f7d4cc063d

    SHA512

    a33abc9fde2e8efc9b25cb3c4185410324cc1256b78934e8f7e1e48b25e7c750ac78d20000e5ffb69cca3e84a68171b0642cd6389b61de65f58296b97a900670

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d0111d2044677ea4dedfff62d5320f4

    SHA1

    67686c441255fe0a5d8bc53e98bae57c11a9227a

    SHA256

    7cbb51ebc765c34ccb4b3503687630b97de7589bd8737bf989340683564810bc

    SHA512

    7ce2b3f5779bbae0b1504bd0b0cb30b3ba6cf13bf879453b8c2fc128ca1cea442cce4b7e19962ae87ff714155596f8196f5031c918a61d8de134c0c64cec5962

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff66d58f3db52e5b9150628dfdbf1c1a

    SHA1

    f24b73cb6f7b6ca8ec31b9965c6b1e6bf6976a78

    SHA256

    d1c58fd02042797ce37c5486eaca236233cd15fc8d9d29140f5abd07be183b1e

    SHA512

    a3d01291a6cad462e98df0f51869083159247f73af4285dcec9d7b002d17df50455cf606faca0da3d7ea5f543dd2503bb2b240e0bb05fb5ee32c06c4b2e11709

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec90b8269a102dbe22629923ced83b39

    SHA1

    6ba0dd7307e3e38e4dddcf9c4e0ff07db69cdd0a

    SHA256

    6a3d02a03f15b2c2b6d1cc3f9bfd00ef788cd31d992873ef697b8043caab9572

    SHA512

    147373263afabed5bf248a9501577b2d1c08b6a5c0bd735adcff41ebdfe132557a03113506b7f5006b8428957c3ea10137e439e8629420a3b856c91ba24501e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b46ed9a578273d823404174fb905250b

    SHA1

    310d8b4f8fbd19aea5187e8fb8cfb594b3e89ae8

    SHA256

    a4e977f9612995ca282eec0d215e74342a0a5631581431decad65c63325a83ce

    SHA512

    d4b2062d998516d20a721cd8360631398d2dce1359fcc49aae9d1b5007c2121da7e7f4fb28597dd5655053f5b5383e78e6673bcf3633daf90086d686883ceade

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab85F4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar883C.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63