Analysis

  • max time kernel
    121s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-03-2024 11:45

General

  • Target

    be8733fd3e54809093c92b85c0bee5cd.html

  • Size

    50KB

  • MD5

    be8733fd3e54809093c92b85c0bee5cd

  • SHA1

    4eab0afeaba9dacee0c88e5cf35938d9d6f21f7c

  • SHA256

    88b77ab1dfcde647cfbbcadedf3e6f0194d3f8f078251761ad4d0b8145ff5b47

  • SHA512

    134fa998c09204e817e8f1ac0a0ff8dd4f95c89ebf250b0268ffc87add7c0481ab0fd9c581d8553d2403bb1d07c74a51edde8eb039b87167e8ce4e5b70de620f

  • SSDEEP

    1536:CAAVa8yKEGLUQ78BdwaPOdIqQqxqOqHqbgXF8htUP6k+vmakBG9jWLI:ttPdpOM1Ct+akBG9K0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\be8733fd3e54809093c92b85c0bee5cd.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1936 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2532

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13cdbfc093917c0e7a7e5edb7b06c834

    SHA1

    5201f59317fb811f303788389e4fe50ec59c8386

    SHA256

    fdaa118f96d98ad24a014730c860e8e9034ad281a1ad53c51988a8774486bcd0

    SHA512

    ada5fc31c10427cf861c1d314f463688c76e9c2e18eb503ff521474bcf33945b307bc448a682322c236fd7c3e063f23f4e1f4bdaf927432c3ade06656b443af6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a657739616f7f7e3fb800fe6af424e75

    SHA1

    0702068cc6759e547cf05461d629e589bc0a39f8

    SHA256

    7fc44edf4507141f3868cd2ac3983a7df64663fa6eba4922260414cddb79682d

    SHA512

    630ed8de8f94d3a2e9275adf9d4edc83bd5e7270ecc70d9c0a8002288d012e4cfbd938f9107e3915bf3cc47ca904555ab3e3f8c72e386a17946ddebf4060790a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be85be1ed08eb0771acb92e257849537

    SHA1

    64fbd4d77c16d93d5d2077a9d0f8dd1c55502acd

    SHA256

    d95f6f17c17d831d1fa38c6d7abdf13ba55e0a2ce72a8c8da1bf23daf277b3b0

    SHA512

    6d737c0d28b1e689203ab8d470191f4d432bca90659f491f5530ac9ecb020920bbada87123fe37225eeac44042aac2a497d038eb9fc1e27411bdd6f19de3b98a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    727050225a26b95a13d46f69ec0af3f3

    SHA1

    19fb70068198641fcb0860149c55a7e555a7524d

    SHA256

    1d3a68fed0ac1e115781768c19461a5dc4b395dc68806752d7cda9253e4f4e00

    SHA512

    dc06a7907b18470047143bd9dd601fe0a31a55ed41c740647f44429fecd2afe888250db6290f68a9b71ef3660d61cc59595242f21accb9f264c0a51ef46fb755

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2bad58047f72aa979478a92a90514107

    SHA1

    2055b96e61806b863d25f7a6c525b337426c3b94

    SHA256

    76e7900f0d62061200f2abeb84f3f4cff64e9b5366906e78c79d52db3976660f

    SHA512

    a2093b75b0bf49f33085567743833dc1812e410656c8db87b721f3847584fb89ef25a180b940086fdf8ad0dbe38508b24adfc1ebecce0a2b19a6af59cee34ca8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72ba4c7880b3a7e0cdc61dbd63d02be8

    SHA1

    0c14dfbbc8e1e5f4560c8bd14973ef8b641f7552

    SHA256

    a4525fbc1177aefa0eb04dce3aba027e975ea0eec26200c25dce38213c9d7d34

    SHA512

    dfae84585a4e59b1f3290fb76f20eac4c23372026fc1b82d58ae48ad2c880728f19f1a2002b619627b4012e02c2fb52c91568289f4832ceb2e0e6c99c54a5ee5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64b4e328a2e694e6427df4a8aa3aa2dd

    SHA1

    19f667d9af6ce7e4daad26d8df2ceb22d63dc87f

    SHA256

    0c8356c8c816e4a9de9e0cddc3319c1a4c2bc148b39bdcc9596e68f732728a69

    SHA512

    53b983bf4d0f044984068c2b0c3281bf453bf4ffecda9dd78282a7907b13867e359f0be0c226c659ba7d7d043c057ebc1038277d9b8f2296bb377de364ae7898

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cedab1b7beca798cfc5d2f6dfeeabbb

    SHA1

    072c0cc4a93a265c1f7751da8725f88aa1ce37d9

    SHA256

    5dba7f38f323b4d8181bea2bef4106c15d12483d8cafefe806133788b9894e41

    SHA512

    b715dd4260f23efbaf1ca1b7affa6ad5dabe3f6ebadf06d06a44a2fb0a7dfa9f8247e8e0e8ca3414df72405a25a41718b2f24b1094985137a5e0fd8a39ffcf85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a23f801c36dbbe0e63c1def123fe391

    SHA1

    4ae4e342d2f4824819e6d0529532a109f6a5e79b

    SHA256

    35333785ca4b428542bb2006228798f9a78eb97351859eaef1cfebf6cb4a6f58

    SHA512

    efd9f778d8e8b552d800927a379f38aabe04e12c6dcc6554004db07d9cdb6a9dcf9cc58291fc75720a7c805130e2b70d782a607b039db2b6b6701efdf7d25103

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eddcfdce466c3b1af2e137f393139496

    SHA1

    08e8808a82775cabd35a933816f70d867bc88a84

    SHA256

    bae82d8ee460eaeccfb8d8c3bca5cab14dfd524181598b46ef3204d53b84cb1b

    SHA512

    2280a32a810d516b6706abe24fc1b0c1dbcd1b3d2a86520da107420c0fb9c7c29beb2dd4876c3beab0d4e8874b25eabd3d5aa62b644a91bb973e8ff0e88028fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1222636553fd677393a124eadfe59ea

    SHA1

    e66e706a4e9eefb44bd571ac6a6a95d582e92d6a

    SHA256

    2aef701247049ede6e51fa54b8693ee98d4aa196b8daacecc226bdb8e8b098f2

    SHA512

    350a48080ea6d865a39bccaf6ab5ae2869272f8388bf45bf4d9e98b93f8a6b4742ac1e55a282b6cf2fafc18a5d39e36b05a1d53fec9c98de0a3d9cf61cc27a2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94683e315ab5f0e61fd9573a74e26235

    SHA1

    06d72064f9e19a536ff4b1000eaf2fbc8a315191

    SHA256

    feb2790fb8cffa49a995e320fe49bf7ff9230b0a86eebe7d7cfac6e108cc495c

    SHA512

    6e239ba2af96b29b4ec2e4cff3829cbeaa1ec25fb8db43a0d6d9a727af9a9a876a87d53a71412da200c48543fd964df04f3150cdba11fe50e54615efa04c1346

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9878b333be74519f04453bf938602e5a

    SHA1

    ba9af6c801097498315772ad50e3a430c7f36cf1

    SHA256

    225500e88fb1c793427ed32622fb1ce7af8f69d4d8f8fb287f820310f38310a3

    SHA512

    49eb9276b0690b56f6308a8e94e1ed4c6d63974e56fdc4fe0f4ef668a188c37487d11de9d3a31fef5f5a950332bf6c2dee93a8c385f10e3a3daab1848bba20fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd53e10cc35db4bddacbbb28237d71da

    SHA1

    1a1079a45f8e486d143a3f995b3a8cb9b566da1a

    SHA256

    43a14cadc9d4090a076d0d6b15177e6073c92b901954d3807f1bb41976b6acc8

    SHA512

    f853ec9bb7d1681e2c4e8c989d405776074926351539d1c0457f24c28a43d925b8a0833c5a4ccc1b17dc77e65deb33229c86610be704b1d061459ecf100df42d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    317b3d520bef169cd508c185810c6d9e

    SHA1

    f8987afb5457f52c8c7c66830fb424ea26ad13eb

    SHA256

    38e273670b08b8dc467c01b01e8c36b457e389b71033a84d95e7fecc0654462b

    SHA512

    ee4e3ff02a2b52cbb0741dd83229c65e647ea296e69452ca7483a89a2acb23df02dc91271877b92207562f355e32c03d17ad4ff3319de4af78a4e6976202a517

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79f8990fbf26bb513c8b8ea8ea55b31a

    SHA1

    f5c94c6d6543bf46129e1ef6ce58f1523c47d537

    SHA256

    ac38a5419e1d044bd38a8886d68a7c8a8a1075be071cff2f6da4cf5376112c1e

    SHA512

    b4afb83969d68d9b7b79ff26adefe9fa893fef80b4c655f2f50e68696d4ce74d096567ce8325018c0ea6e690746740572e68d6d144c700d02da4b09d5a32b7fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1972da8f90e7a9f1d8eab9fdbf63762b

    SHA1

    5db823a944cff2861ffe419ac155eb563a9efe50

    SHA256

    22094719bf4836fb9bb0ae728213eae87e9a16f477070903ced08a067aedec39

    SHA512

    0f8339ed9257cd0af750dada4ef22c9609a4f21cb8c68d63f5f5c2ac39245257ebc891f67ad7018e2a8b735d92fb5faf869b21f28b1fcf2d218b8f076fd1e767

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a3255dcb521d2eae95234ea4c691923

    SHA1

    e9bcd1c9461063101a703ce3f2a40fa1c6b8908e

    SHA256

    236828627adaf76cbe77c24589bb314becea61476bf02e7df2d196f2b998d389

    SHA512

    30c41a6f482dceb37495274c4d4922e326262ffc961988b75127c7e91ac3b836e69d8819b495eec933badb77ac6bfe033d7b3d8efdd70a93c2c8cb568e3a5959

  • C:\Users\Admin\AppData\Local\Temp\Cab906F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar92C7.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63