Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    09/03/2024, 17:32

General

  • Target

    bc65ec5901934b8cd9bece9c91ef9407.html

  • Size

    46KB

  • MD5

    bc65ec5901934b8cd9bece9c91ef9407

  • SHA1

    04772612304921682457255b8e74270dc9214b9f

  • SHA256

    72e6299082ee29e0bb86002782d5532fc8e5673317a32031b31ac6798345fc95

  • SHA512

    4c333b7d98eb061ee02e05d9cb8f70dcef3e47a64845e892d581f38daa6a2e79f744d45d841288f238f9a74630fd4775991b68eb8b7bb274eaad14d40547a98f

  • SSDEEP

    384:MyL4X3l3ASYXiZ0NIjlHss6aIHvXfCIooJPAecyHLFYXiWteKOONBoYYs4mr9fVC:zLVpHvvCIooBpprtmrgRh4LDyt

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bc65ec5901934b8cd9bece9c91ef9407.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2956
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2956 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2616

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    c1f350b6d2f9db175ad87e8393ec58fe

    SHA1

    056af4c2920ea8f5744193ecb56e3c5a0769c261

    SHA256

    a2e7cf2ddac112499276d62261822688488b62b914aaf9ad063c09a21a0a2984

    SHA512

    2d35e835b0a0f750e20e98abbdaabb8e6c8d08c964900f1b9a60156c82a39479bd51f4b14026d70cfa08f24d69053c325b8763df712aeac24ec8baae63e29866

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e11674b3dfc70c7b23604026bf5110ec

    SHA1

    41ba38e72c58a5905a6f10afd4fcfc1cd0c6c44b

    SHA256

    def23fdf83b7cc41d9c6fcf24169ad4b9aa08446fe07a961253be5447a085de0

    SHA512

    5a5557c3a72a6f2156409051322dcf6b58464e89bd620be6505b36839ce930f17168265ad813752aeb9c6f6e7d0d811d3082090f901236e5dcf779a255c343a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef27b9ebf21beef3c0cb48913146a6c6

    SHA1

    170ccf7adbeec3e1a3d04ff951268c06fe3e86c2

    SHA256

    112a839b9d7b19d832aa1d0aaec18da3fd23efad11fb23f3382d736583968ef0

    SHA512

    b4aad67f47fb81d949e374834ad1d39d2c14113efd1e2ebe210d2a690feffa30ff8ebac8a9ade782799dc9e4cb170502b0a6296cc73dd617c1d0376fba451f3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc629d07471069611011680676e21f86

    SHA1

    c718f7cd53e3612e87e3d63143b5ae0423558897

    SHA256

    2c73750b271201fd09b1ca264de7a502b74827714e8f4125085057dac7d218d9

    SHA512

    87ac996c08d90f01015e919a253951ca113afff61d6273eb92b14cdc23b727ee577591c8674e20d8a0c7153122881634ebff2c4739ab964a1282db0ee118e4b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca98d7fd075b76dca31eb57c8cc23683

    SHA1

    caed8d0fd3df953cb9db3bd8ce0c8c55df17829e

    SHA256

    e7d44c237f4ccf73fe1f9b0b1a42d15fb97176b32468c4cf9b0ea561adae70e7

    SHA512

    0295ffd0e156f27c25a26d5b354d2d8c3d1ba9080d130bf17b0033ad2ac235f5b29398f42357803da154f30f5adf0844c0fe50bbcc740431d310764766e42d62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd9aa56928439f445c7f81f23fa3b736

    SHA1

    2f45a52a6917cc5e7d54cba3e9d11e6eeca683d8

    SHA256

    d7ea30e8b2b0ba49ae6f80c56e89541cb630f31104dcd824bbdf5708888cf83c

    SHA512

    24aa7c50982c9c2c7b94f12fde55279870b774c5ea25f9f4604bdbe9352e3416e857d7c83718657daedf7cdbdb86b90923f81b0f56dfb188938607db8b01ef4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fb2aaa0388eee51b05df5703d42c343

    SHA1

    7e304fa05b4755d77cd1241df97970d9e5d390ba

    SHA256

    3730a074f16ae4689a0a149634bb61b6dbab807dcfa92889f5a28cadbe736da5

    SHA512

    e6c5345e037473062ac63d02310afec72e5cee0cfb0436f95f926f66283cd766866d83de8af5deed8f0844ff6542b04009e2a0fe57f392e18b383e260ce43dc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee60afa119a6be6d0beae3d4275d7278

    SHA1

    23bf6ee0a38e009cdd7b0065e2415b03ed9e00a1

    SHA256

    4b1433c3ce346281813f0f8fa3b65fb7bc806f64f2b232a1bf980fce2385b9c0

    SHA512

    c23ee377a333d82358d529914e3220f941ea059a2a0f8481d0511511bd983c012fbe7f6ba26008108f41923963a7f7d3a133eb579b835253892d642eb2be4e28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46d67cadb6440489205c8e7c2926b3d0

    SHA1

    b9f9d7a80510027b4ed9748e3925c065985e3f96

    SHA256

    baf20a53daf78a282572edadc2ca78ee61dbba57847c8972c0d48b66968328af

    SHA512

    0c76c8fd1483ed76946bd74dd8e2d41640415395fda8f521743c50d9b7463f6fb047e60ef12509e43199f5e41847dcb0c4204c5e52a47fe70d0f3a524110f972

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a6b416c4fe772946a71c1305cfaedf8

    SHA1

    b616bf9d42bee5c3285a6988fc7fb514ade68874

    SHA256

    9160698157967ecaad14636e359aadd0be9aaf56fb6d6d72cbaaeef26ea2396d

    SHA512

    ba4d4eddfe35cfa6f681bed6d163f07fecb4353c38a0216cbf277799ec59922dfdb7d68e64014b956b0d998214f6572c18e9d75a1742f271bf356a6ef4ed80f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1df05427bc31e9e8d3ce94856c1c27be

    SHA1

    0047816f36d23f72ff44029343de4f49c6ab2f1f

    SHA256

    5d1cf1b381a0c5f1ef430aa21d5e6ae776bc2f7e53d3c1229478a1e6292f9f9a

    SHA512

    6aef12af0e8f9befa0d5ef8ba684a5e53ddbb7bed5a8cba39a7e66a919b70a6fc887a6e2724dfdf9cc9c587de6050b50e1f8b31b2336e7484a45a57bf983eeaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    192a233173a064539a444d7a47b5d83b

    SHA1

    475eec72768d12b613ac650035e86677d041053e

    SHA256

    8c85995cac23eb9c45ef031980d54851ca1bfe6c3515cf4c531fdef8d506b7bf

    SHA512

    718f3b3f7bb2130e0585ab00570c3d847ab6ee2c13ec4bf5796d7eaa1aa116d7a2a26e19bade6567e8ddf46dd3a6c0cb522ff5a09f0779483e2e6a72e315cd78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a403d136d6cab7ef1f0162d554396b66

    SHA1

    90f9d4c2c8ffdf5dac904d2ef261cdd7891e6e92

    SHA256

    a04977af2d70ae361d3d8307697f4adb5a3eab7ea5b5d79dea501587e23adf9a

    SHA512

    0da44d796ee9687bf8a23e3f11b7b2ec727eed49bef880697caf34e2c0e425b55404a94ac6d35775b21d3636f7aef106756531dede92d74507f824ab0bd4af62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc225cca5599b683371b4db48f0f0ff6

    SHA1

    9ce00148d3d74807fdb489e8ddd1921df979d70c

    SHA256

    1cf4993e5dc8e096c72a9cb282cc997c059461b104bef947618cfa86df1087d4

    SHA512

    c2db7d04850ccd2ea8ce992db85d17e7d74035053443d8ec70317e94daf83dbf2963bb2f62f1d8c502dd99809cb9a048af3cd3962da7dec445a346de5bced2b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33dcf67796ca935c55ee3c901b7a7ae5

    SHA1

    e5ff9a8c4eb580dc15c2fe5d4cf39e5cffcf57c4

    SHA256

    dbcbf0fa9c2c3542f3e854dd6fe98d96a7f8c97340d6ff324f5d0f3f1f185463

    SHA512

    01b722043c1c0cd72cf8913c988e09422a10b7e0623dccbf4af432db97b6497e98b9d81fdbc06b0e80c7c94e6d6f9cda60e67f378f49b49fcd446ee62e6ddb72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce3a09d8a5ab665d56b2c13f27640f73

    SHA1

    e8775d3f89f0d0c7a91a26003e11dc823739e3d5

    SHA256

    492247d31f72ec488881e5f16e847f5dd6f4f1126a8480aa918c38a99a14a04b

    SHA512

    f4b832eba10f7e3110876774ce9573579f2c797170d22ed414ab9d00051530f5dde45148ca9947545d0de2ee63d25f26f0405783962c4e4c1b754116c5f4d548

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\902LKC6A\cb=gapi[3].js

    Filesize

    133KB

    MD5

    c8be3350843695958a33474aeb3ea8f1

    SHA1

    ad92694d9b189ee479c1be438636e39247b216af

    SHA256

    22494eb4f5fc2ef8c229b9df2e171990687e4837282655145cca0fa302af1278

    SHA512

    54ba5d4076fe9fe4c4ac22f45cd7d2ebb4e8027d8b8f82580436dccbcd60fa2adbb948ff1234d9912c663bf1fb33ac834007850f5a3f2abfb96a7a4feb110bc8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OOWQLMJV\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    bf78e91c4b8c660626008446d6d30703

    SHA1

    db09dae5dda987e24027a540e47650cb970e31bf

    SHA256

    f554260f317f497231227b9def0144f0bf370ae71cdd7a54ac60d0ae1a56e096

    SHA512

    15cf262865ed7a9aee617939501430586460eea04599e7c09f5b223ecbebf454450e9e6ba93b81e6e1a35b1039d0e80039bd4d4c768dc72ae5e3bb3ca1f70fdf

  • C:\Users\Admin\AppData\Local\Temp\Cab1DEE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1FAA.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63