Analysis

  • max time kernel
    137s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 01:50

General

  • Target

    bf86a62391dcc9144f0ac5a280567b0e.html

  • Size

    2KB

  • MD5

    bf86a62391dcc9144f0ac5a280567b0e

  • SHA1

    adf726d1c0afd183747cc5361f11a3fe5fce3f0a

  • SHA256

    46f071638077ca4bbc46dcf6ee4b5ccb50de905dbc49067a179e01d7da03deb8

  • SHA512

    db96792d86dec5c7f3fb4e41baa164953d24179f1d62ab5a82095e406298bbf2fabbb65ec85c3298d07aa0d88a596d9b053817e0ce73cbded28f9a6b677c96f7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bf86a62391dcc9144f0ac5a280567b0e.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1868
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1868 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2968

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6cfa0f207f6b18fd6c2edb2d58a870f

    SHA1

    3225f02a871ec713dbe790bb0baa525ee27dcb8e

    SHA256

    66d2dc5cbc9b5b1c1706600d36ae772ad046ce4f22c5f5752f1af43a63231d02

    SHA512

    2e318230a07e72e8a98fbb3e2d565c163f1912f31df9c163f6eb1f2a1b9a17587153537ae8162cf3b18e45e8dbbca6b0b4c27fa4c6779191e340dcc46bf69f37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15c180ddf0ed4be093e782a66c579641

    SHA1

    d2befdacae1337462fd0c156381ea9691d31755e

    SHA256

    33dcdcbbc5119839a34a45d07b75a6542704b103ab07f180f307e5a699df8a2b

    SHA512

    39739b5fadbd9ca4ec5519e2c1b967232b1c8a85ebe17612436ba2c85e0b61783335e65746699662f391fc14380286f3cb9948745b5f85273bdda91309fcc713

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    529d4dd07da03a2d02aa75323d4e9427

    SHA1

    bbea5813bc7ee61172be3f4a7eb5b293ae099047

    SHA256

    62a67daa203ffcc3caa85e270a18c0cae84425fa91f016035349fbfbdd4aefc2

    SHA512

    f36c7cdb53325f1ce0bdf29139094c396df1e2030a6bde30816e370cf252635b2235c9fcf7efd7b0abf1030af096608d55f29b259d21f804aae5eb18285e47d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7df8ba6d746b226ef42dc77117ebd51b

    SHA1

    8fa912f35e867a775447730685aed78dfb415b9a

    SHA256

    3f6543322b5b22f4fe47c0a1bae39020d34ce4e2a41548365cb78887f7552b49

    SHA512

    260219fe0f5c2be52400e7d73ce6ba60c7d8a02e7d55f979c9b3b57d432fa0196b02dd49c7866fea5ac474eeb7333fab14a3396ce36ad64df4a2fd000a3288da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f3bac0561f3714784336a5aca53fd11

    SHA1

    f03e3c4da01a0223fcd468bb9bc30ef7b8dc7e0b

    SHA256

    2f5b46fc7d8da0ac4216235d878b36e0a8f0d1fbee1e84ab2ba075becba88dfd

    SHA512

    9d8f0263fffe6fc7131365a6760a89738eba122fc680b7ef8d3875fffe3ce5b8874036412dfbb72b74236b90e54c097aee4023fbcabe7cd9ab57db3de9aecaef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e009ddde6d043bf36aa9e50b3cf49daf

    SHA1

    7909b2d72888916c83a17cd847a2d03aa0cc1e3e

    SHA256

    d00fa2296c23375f1b2ad59ec03f8a3b371543e467699c63eda42d5f30c40b99

    SHA512

    bacd6020c3155437029a0399ccf6c6962aabc53d252d59cb8768022d1aa3b3416b458494fef7ee7d9cce574a35e4a53f0ddfcd6964fe27f563f0957d082af351

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    384592a765212bfae67883c487e4991e

    SHA1

    3ea4d3cd4b717a459f81e6a932d3eaec47ea0c35

    SHA256

    bca6e1e0e82ec8ad4b4aaecf1f5d30408b81c8cdcb7dfc6cfbf22f76f78258bb

    SHA512

    bcaef3d58dfa240af18857e1d4b1b7b6937c33371675ccc150e480af6c3cfc9d830e94691bba10af680bd2cd50c32fa4f9177e1812bd73119e85b162f821306f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e29f26abc1a4b4d6c417a61a1bb9696

    SHA1

    040a71f768d4794dcec39dd5c3048a764a1df6ea

    SHA256

    bab13454dd3a0b4cf03f98494820fd29a212e9e14bee78fd6a5f1298832f2157

    SHA512

    1cf7bbdb6123e3803d9871a076041844d2254b5e3f9051f94b464aeb4a8ad74e257c459d663361923232d0c2504c7794fc0267b81a208053fe7a998f7d8aa64b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4dff35cbb0b656f3bb6140e606f59575

    SHA1

    4da47a9c4584044d37c545f199c8dd3b88ac6bd9

    SHA256

    9f3ca2660bf9d8c167b4bee5c0c77e47fc1f759fc16073dec29cc50a27a04bb5

    SHA512

    eaa529ea56f5d5a2c91088a6e27630429e948b4bbfaa05fc24444d3e7e346d52050afe042bbdac503cfc748357aeb26b1c3daa2bb81dd6a1e238449134a0f34f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f9ebebf3dbc2b54ba1920fc7defc345

    SHA1

    67257f83b844ba9780b32bde83627b1c7fd92768

    SHA256

    cccafcce7a5f13fae44250370428c5bc76b373070b378950d65124c59b7815cb

    SHA512

    96f6aede208ab6b781f47d6c2b4c1bd693ca67cab78ca546b66e9c71621f78bf35f8dfde58b3a1bad2d1b1827233136f67870959410a30ace3a52cfc14eb18d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f8172e9a5c5ff7402c1b4d906e88cd4

    SHA1

    952118addc89f2503913888f595fef9328fb2fde

    SHA256

    52aac169ca3cc622865a805915bf9ddc5ad5578e0de4da242a97ca2b81b90d20

    SHA512

    1a38bd52f11ca1c173bbe93a7f0f119c01a61fe261f51b8715434e6ca8bd80e6b581cbc2529fb3be71db0adbc39aad26cf89aacfecd2c4ee93bda2d72ce3e1ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9219c2aa7a60e08138945a95303f7fd

    SHA1

    d7693f278afbeb56086d0bcb0eda45d7a3d8803c

    SHA256

    24bfc714076664968aa424406a8cd0c190dfa357205d8d87fc275b8ea0807f1c

    SHA512

    07088892a2fff43a822d720a96ffb0808959a8e1c97b9611af85731d898a9be877649836417579771a9c8498763165ff3e7e0678063dd9c60bffb99a07efdde7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9205b96125384080ca294abc395278a

    SHA1

    b284edcb5faa107aa0b95a5a329e4282325af061

    SHA256

    b1b95f129ac50b337f9615b7e31cc2103cf03c11f6e66edc2d7092d09e367e56

    SHA512

    09566b6c5d81f0deff7936c1704e155ef0e499779875a6b91804e37adaff3fbfeaae4e9f23a397c1e61a985451520149ed2c3e9c55a6b95b7fbc87ed7ffcaf79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79f136515ddcfafbc19564806325e42f

    SHA1

    546dbb39ef3b6451bc3d46e2647ac75cb311e666

    SHA256

    290ca14099a77bce07eb51628e716cbe324c289bfdf1292c9d86b44b1ac96fe7

    SHA512

    d393c07c7d46622cc4a26eb06d66bbed62d8b058ad38409b3b1c617e0b1f4e4a65e93774294eff5f8c246d7a9f76d68507548a1696bf180ecdd2605bf2c29cff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f29904cac574b640ab44ddbf0d76fd46

    SHA1

    c78bcc2f5b02999cee0d283f93456bb5888a65f7

    SHA256

    2cea25051b0b454bb5fb0b1bce6a304d47713036ce971ba219c9e5ee5feca6c4

    SHA512

    34c02ddfccfccd85aca455afbfe407b260b6348045fe5b69c45b02b45d139f3844b48ef7ec735aca6326caba179c43348c3b4734656c53bde08b940314d9ecc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    181f946b8b5277404fc770d17a2b0e57

    SHA1

    32f865f4a4870bff0c5bae4c596eeb1901393796

    SHA256

    1d5aa7a72afc4718dd991fb8ba3d03d19e645ee2e884dc89762dbca861c5b5c6

    SHA512

    3f9317a18fb896a21c664b73519a392badb8b53fb4b9799fae86cc31e6a599a1483a1226c35358a4e92da28502e2ae93d65c258036b167d8f6ff5d17677ea513

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    012ca8448ec3db14a148717a579b55f0

    SHA1

    bf75f59635cee4f813bc4b4cc373aa5f43be2294

    SHA256

    2e06e8f648b71e8e7bd438b9155244a1739f262a225151212c055b2e3746b5b6

    SHA512

    80345958d49eb1ea29ee77751b96411cbbc494e5340267c750e00c11b582a362c6778815630f63f7d4f7d702eeebc40cda39fd7338ae34f8eadcce8873203014

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29cd68a31b26aeae374bca777ac499f0

    SHA1

    70c724c6b68bc713b951f66bcde63c700acd2393

    SHA256

    4b1028a8941a7368a675da0f089e290313fbf1c3535af0509ec112ff01110d59

    SHA512

    26c5a08e1740a4081c17a70d439b5d83f584deca50a14a50342461ac4015a03370506c2fe09027bce2d158f490c24dd3466c8654e3ced3ae68f64855a4edb774

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eed5c0496a3e7a4480ed928b9c93d756

    SHA1

    181930f58cb58a809a9327094cc9c069211bf6ec

    SHA256

    47be84b701b04c14ca402d8c628c02a63a26a1d1c6e8d37cf27524571cc6bb71

    SHA512

    0b1d5ed474d98927e39859cb4cc6075c8c5c2053f67713ff60f6ee7ded9eff69adb6f230cb5b47361d556bf974b8ed95ecc7a8897f4252bf7ce5101779dece12

  • C:\Users\Admin\AppData\Local\Temp\Cab72C1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7603.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63