Analysis

  • max time kernel
    121s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12-03-2024 02:36

General

  • Target

    c23d91d8dd71123733df7ab3efffc6fc.html

  • Size

    1.9MB

  • MD5

    c23d91d8dd71123733df7ab3efffc6fc

  • SHA1

    41df66c1ec076d3f32917f08ef3973a3daedf302

  • SHA256

    21af93c227c6758b2df6306d5c10086912ab07c1304853b3e862f5c0be25f6e0

  • SHA512

    5f4bff23927cc97d49727017a6550934bae41b317fe6e6c31eb1f8b999f378d0fcf5cae7b7d7118b0046df808ffe70f7624edf8aac90b27dce126ce69c51d8ce

  • SSDEEP

    12288:jLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NJ6:jvpjte4tT6T6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c23d91d8dd71123733df7ab3efffc6fc.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:360
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:360 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1912

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    01440e712dd165bfa1b8ba68129c1157

    SHA1

    d5305396672dea5e2f09cfdf4b4b489934d31caf

    SHA256

    24a29bff0e35969dd0734cc6e9276620dcf17abaae35f1b74f3bcb4da1e6f011

    SHA512

    dce45c675ef1da1dea7f4813530ac1a4104b35a7328af5a8c17a9214a19f952d784993ffe9eab2474266c77a77ddf9853d7fd397150fbf5d255a844eb222b3f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b0afb6fd8127afc27476f7c9f76274f0

    SHA1

    1b9e4cdcfd6d69cb750c97fabb993faf10d49f9a

    SHA256

    2cb0037afab69c259cbc84419a0c428773e83ad5cdfa4f8f62867a3833a796c5

    SHA512

    423dbc09446058461fc34aec417c9dba0007acf1b7575fb794e8aa2b5fecb4b9ad5501fa9d5baab9c594cd846c2f801da1260c2a73eafa6710d5697ae58343df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    028196f952823e4f368850548ce0ca79

    SHA1

    60090c24012cd58c8e96d64af1a1ac3eb7e88f7d

    SHA256

    85aae3d705f87aaf8aca944a881fc1a349a562a92898a7d062a2ab25824463b1

    SHA512

    c9d67f15bbe75bffe33c69391d1c2b8ed8bd46bb684c3a9d7e26136b7da18e0469da2b9badd31883602ebc7fe34a726de700aa63238914a9819fdac404c6e08d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    493f529192075fd78daae14e881b56a3

    SHA1

    f7c7df80193149d111bd8881edc2a4c01a6dcd2f

    SHA256

    dce4e4be77056316d288dedfeda9d8ac3da8810082d7608b147c5e7b49bf52ae

    SHA512

    244530da7a94cfa3e2d6bb0ae4c88c415a2a87b31d6ed37f74637d6513139be53f0c88cd9559c7cf50eef99b0a47e78bcc3b87e056a63aa7baee5db7a48d259b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ae18b502b852078f1ab5393d99afe7d4

    SHA1

    3e5006131eadece35c3cdd1c86197f82193a55ac

    SHA256

    60897be8cf93cf035d082b5c936db45d399a3f8301c95a42ff4382061be62272

    SHA512

    8b0ab70fa0a8e8259ef5b71f945ebb26ceb0becb69e4e2d4df463cc8ca820306c27eb2b46e5f7e43b8f97aff21f0f18bdd16e6a01ea4c32b91280ad228f1175d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    52b03e169fe9bac47f1ee519b3282a31

    SHA1

    afce7fb6b7c0e0b98a67ecee2a70f08630985e8a

    SHA256

    11c5ba092f0333d4276c0d7c8ce92196a62209a63c93457af15dcf2ad5f71726

    SHA512

    9d721957ecc2fca06cb60eac7b6bcb7b9ba63739b7d7989d895e39069a78cd6d90466df83db34bd534c3a29579c8089ef527f1213c795d15ec3e789d34a5337b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1b0bee56fd48a719f56b6935ad3b3dba

    SHA1

    710271ee3ce73fb45bc11a882341bb885d046ffc

    SHA256

    5dd790ac5efa063ddcf4468ce84031ce1cbb5ab201745c0c060e34af0f4ac9c8

    SHA512

    7e05ef2bdba03a9ea0ec84ba2fe0e831364f082ae67328ff10c227b6d5b95b1a43f0381c14ed1559060759a5d8ec355e66d31913f830b486eb5b3d8af84e3d0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    86f7dfac1bb93cf436644b77d82d940d

    SHA1

    d960cd4c6f97f2a6c57b9597dc27101c3176de3d

    SHA256

    367022d56a85168dd32078365bc12b5d60446fe725e9697976513a19c54dd524

    SHA512

    e21c893538248cc64c26372d5de0a2108204723db600e01fbda7ce5d7407a5f5be3ef7fe46defb91e5cdc002bb09deeb2bc0da0d04d4762c72f8fb86cfe4b0f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    27d7af8485612c7bb2257416cab987d8

    SHA1

    e01e960aeb05acf0cf26017dbc75f29cc1df2ebd

    SHA256

    cfdef455ec766b2d4408f1662a636cbc0a0a75fc2449319c2661c53b614acb35

    SHA512

    c77d39a9104d6926e163e985bfd143fe0eac4ee9db172e21c495b168be58836c40245fa78957793f449d451c3c0b796a9e6ba58e1508872b7d36064933b2a0da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    eb7e0d727366f753c43aea369689ba3b

    SHA1

    9caa157d474c5cbed8823c19bd4475aed12dbdfc

    SHA256

    73938089975acf1373611300dbc1f1669978af22a354993ee093d44d69692e77

    SHA512

    838d5be4653b157f8b1a9bf197c6b68750ef5181cdf36e4cb4a0c0ad9bcfd91e05ca27e81404e9ff7a399d96fdad62f3ba784ac50e3a3ca61c23f3bae986882b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    db9291cb8e26e5c0830ba117e4bc5ed7

    SHA1

    1eed61c1bbf69d96074a2359bc41c2c43ba63f7b

    SHA256

    1b4f5b2200e46c0c49f01e4a2e78363b9c466921ddc8d131f562094dd6770737

    SHA512

    2cf0a00e71a41acd1ce1295c06a0b49029cb878a41c192f34800099b642d6f5e375ed096245cf72c6fc5a068ea19a83b9e4f68dee2a500b4fc8af597150c4dea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e10519597fbfc145011f1085ad4ae9b5

    SHA1

    436ab3d95bd0943f54ac84ab0becfc93141f537f

    SHA256

    53d66b3ea5aa65cbebbf4e94ec265b882ddc33f8bcaef8d5f0629fe8c27cd9e5

    SHA512

    f2ae71d7008c9180c8312109586c893fd4d645795d67d72be8ff0c09e83651c4bc014e24963068f10563fdacf0280805f2c7071578284fc928ff015bea2ddd4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2eb8d0f41e32d514165fd9aad71adaea

    SHA1

    c02d31692adc5bcbc4df7056719ad174c55f2470

    SHA256

    d1eb55df999da6b273e31df028d98117c1539b56949813a211dea12b1c81d6f3

    SHA512

    946c3b75433b4f0c59a9776037ee363af5f2fd82bfbb9f106b9240db189ba71fe6c8c1283565b8ade41e3cfc59b1b517933c80a424457056e9742275976efca7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    97663586b5b9be65a77c35a4a2e65504

    SHA1

    1665e1b56e7ade14dc17c6ca6aa7fd3df6fd94c3

    SHA256

    52f7030f3a49c27ba70c5129076b6d7b6a9ad7afd8448c0f583ed7e9d4838301

    SHA512

    ee7bf6a28cdca9ae701f6a9180d48ab7ceb2871d5c54267f882dba749f3d9b2b9f4d5e29c9bd2dd6a56c7a1366ce996da460f6d639d22238aca9bb7912bd14c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    56e1c4759424424b0a8377c5656fa1f2

    SHA1

    55bbcc77009712195a2642c469009ed4d8a0dd39

    SHA256

    d92b0462dff7bcb3b0541b51d0401fb34e4535211a8f7abed7c07cac70a2a5e6

    SHA512

    683bc34dd98460a7173a59c0a5af3b772f122202d1aa8c0cdcf644d1e4d56f1558fa8c80845e4597be18dc7e3395bae2fa12e9491619ead6c2e5b150b7be260a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f89f2c97c5c04652adb736b33878d552

    SHA1

    16e6598bb1963853958bc3cb8331ed20d9dc4acd

    SHA256

    2aee229b1db657dc518d73096bc6d56c1275213d024c9bcfb95caffc9a5fba2c

    SHA512

    aadbf11d10098c635b6d4cc29e38ff63504c7c971df265ec8a6dc4904a07c77e277e505216882efe9a92529c0b3e1889740b81a358e394e960fe37a1c1c2bccf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a01b98a59e150774c36c37779197c0a9

    SHA1

    3405cba4b724d71ca6ac43afbc2c160e6c33f60b

    SHA256

    33a68ca8f53174aac267ae5d59b4aeb6bcd04854dd7f91d255d163fd252b081c

    SHA512

    e3df07cdbbf32638ccfcb277db1077ecaad860e04cfaff49287ec42169d253640a6346e4c19766e17bada60d0495e52f0e35be5069142f88b9765f4cad8d6714

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Temp\Cab2E91.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3166.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63