Analysis

  • max time kernel
    141s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/03/2024, 06:11

General

  • Target

    c2a6012a4ca66ff2c676acb109b7c24b.html

  • Size

    71KB

  • MD5

    c2a6012a4ca66ff2c676acb109b7c24b

  • SHA1

    a58d6943f845d3b1a9bc945e732fef4fb06a605b

  • SHA256

    1524d4aa5a693a28ff7dca01bffe5f716e3d6939058945be7a079a95ebff15b9

  • SHA512

    b5e82f5e89af3cceccc1f6b3b3b2df7681ad73ae9c5d7e05bdabe0ab6237d23b72888aaf93c83084f129cc960e31b90175207ddd1db94f2a8d1252f2d98e955e

  • SSDEEP

    1536:BwpBFVzTHMMAlFIyayczXHH8XGZucDlPMv7UI+sUYxifxfqQpxZxVxiXfow8ruy0:BwpBFVzTOyX8XGZleUhbU2bbHiXB8yy0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 42 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c2a6012a4ca66ff2c676acb109b7c24b.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1252
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1252 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4068aae54663847e01bfc863eedb074e

    SHA1

    218ddfc91ad647bc59bcd6900a9030439aeef188

    SHA256

    6903ffac5f1d8317d76fe0a6e5fab4d418cb9c359c6a6828f937b9808d7187d0

    SHA512

    9db289a6346f963ef9ad928f2cc271adb6c1b1a24986a96a7b3ae64af2e448e84a9b8023185298c4a3007280e719e371ec3087d2b3cfee46564af51318446c6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12ff0d6634f93f68f47e7b11b01c7400

    SHA1

    b29aeaf1a32eb3616c34e0ea4d6d33f052399f79

    SHA256

    c25b50d461b1a22f350a6ef7229d1b3b3e7223dfcb8df82117de972aa040b266

    SHA512

    868a0fe52d749bb618abee03ba7440a3b442459792bbbc11caf8890366caa192cb49a573b543694992812a38e6236c6dd94d5f65fbf1428975070b53aac74711

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c4b9d6d19ef5eaafd54e137d7ecd8c1

    SHA1

    42af72f1c7c1885de07b2098ec3285ddc17d3f5f

    SHA256

    cc1500f415ee49f938b26cd6136e7c15165d152158ae34d65b2b85ca6f4ec3ae

    SHA512

    6dac6a293f7b44435277e0c3d7ece3f405b3821801bf197839ef885e177d93dc7bbeec1f7e773064049ccdd07d11e2f6dde2562a2738cc3b77936e832c636b4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cb2b4dbb143ff806bab1bea418b35bd

    SHA1

    2bd84b1fe5697f50c1afb98eab22957628874873

    SHA256

    6e09b028a198463f3c41cc08f8e1a3d165670d3f6a77ab6b298e146ae7691d3a

    SHA512

    6ee4ffb5bca4c649bad5f734429ffe3575f07b2b53cfa831aef4d3ae224b153fd46bd9398d9594a0cc9e0a90c9d26d175d07c9de97055d696ec17e2a2916ae35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78ada5940b6e86dad0a09f32e94437a7

    SHA1

    156ba16f65d53c8f64b6088b79fb6e7f25be9b33

    SHA256

    d8e2aae2ea24e16eec0bc1a520dbb3bc2cb514df3d6ac082b7a46a5083e24e4a

    SHA512

    fa3de3a1aa4d40c3b4bf5444086af9a59591846923e8d39b4c5679f29d00928071cd7fddb74cb29c96f9d597940ab46b9975ac74aacc36d3ae98513e73d1aa19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0bdcdd148a18bede21de2063d895ebf

    SHA1

    31a269e332cfda26aa86e01b904a1bb07177a66a

    SHA256

    af2ed9cd3e82356bd84210f67ee3c48555d55e1099b7c5598b17f37c6b6fc8a6

    SHA512

    16b5caa194114b6f6bfb403ca2bccbead3c5e829125be3db4d19a0a9d4ee55f0e7113cb62764291e8d51cca76c8cdb7e001201f8b931f7506ea5a107f2203d39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55749c46407143e3d028c77f0483ea2b

    SHA1

    f8cebc0df4de67779de1b2598143dd178bc4938b

    SHA256

    d5fcb18a47045c8b6c91d8422b1610cd8341cd30a037b028cf089493430c2196

    SHA512

    0f462db4092e5b04b72ccf193693e22740639718c16c7f7ed5be8f5690b0c2fd306704886ecb969501c881e963d1178be10565e7f2f5752c9d286065e038a2f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6274f75e979a1e7d938e04930ee5b791

    SHA1

    983e04da5a9505ce53c62fda6c0cf76a89836c3c

    SHA256

    45e1e55ffa7dee0e6c6b4beee71acd09d2c448f6a106cdd1b3daa1a1073fc5b3

    SHA512

    1b9ae956497670e80e9b703fa530d1b7d5aa512a233e3fc040ad906d393fac7526760f60fc0245d74f80d7dfac67ce6c1aa29f01de9d92e79ced21952e3e2044

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcbf4976b04468d8469b0806bc83b2ac

    SHA1

    87ed7c9e904f8d5346e8d3f1605f66a1a18b412f

    SHA256

    b4aed10d166d4f610088f9235048435fdd3cf810f53700a5f17c00a0d576dc5a

    SHA512

    d3126bfcf925b93bf6788b3a5e14b25b30a6a426dad369af5d163acf7dce2ba6fe2519ab8407b14367c2da83971252c86e44f957a00dc0a37d2d8eede22ba8e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cfcd152214dad3beadd9dfbd6b33250

    SHA1

    595566d5b3d64428322e44597085d9524772a27e

    SHA256

    56a4c5fc3982f7e200b5225d90ae68db4247856d6a1b4278ddc9da6335143aac

    SHA512

    f67cfb8d2b353b9a19c09436f0185f2d25d17a1261b67b8cc897aa54257fb72058474a643bd9107420b2f0edffb885614904a17dea7f35517a3f653fc69b818f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4892bf87f73b508b1c38bca1d47b97de

    SHA1

    ce62e63f18de017822acdb081258660a82c11dbe

    SHA256

    c7b25a2a1a873915c8de382d018526bcbf2e2322e6059a9e735b02615e4cb642

    SHA512

    699b459a6796dda12e42eff6ef8ed474ea098d388e93a55a5b9342d1b8ebcab85f999f9f4dc8e3e506690708c3eb658d9434435c71676da761c3b90a524deffa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    714aede959a3dbe1d204ab57f025c4b1

    SHA1

    c9932d7332fba6a0655a583e85740503bd2ef7f4

    SHA256

    b062922513c4d5d819ec110e47993230831fd078baa22034e3c5be75323f1e29

    SHA512

    faab986114849bfa2dee0b6927e629641848f8fedf30f3e1c938062a10ef7bf7b578ca782c7f75c429840ed024e94d281c65a5dd3dae198f6457df7b3c2b6d70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d50cc21808c05c376dc1bc76282b09cf

    SHA1

    2f4c7d369f01fe9cd7a64f89baec7a5f10687f5e

    SHA256

    2a94259c79558a7afc241e72be39fedf63bec38e159294f3e8d3cfdee4238f30

    SHA512

    c5a07c311df81bf21714b46b929103a39d347ac5e1284891fb96398a52d50b6e6fa59c7ad9de699bdbb573b3b1b80e31fe6cb934fb82e832e9423e5a6709e03b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e18102e0ed03a150fe518eafe30339b

    SHA1

    7e81f30834313e5bd0f3d71119d0d66a16e19db4

    SHA256

    1c5a18c4150a59df8d8078a50aa18a7d8aae0a9409be0eba02b71e55e2d3dc66

    SHA512

    2854849c37c3475a64b85867cc5d70bf892cb578019165334d22287ff517528f97b6dee8b1a3832baa1debfa41504d08b860c459934d967b79c8b92a154da6d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4db0a3129fb4c2bce88ec96df6270228

    SHA1

    c43c00f7dca1a86780b846af9126c6c02de6d000

    SHA256

    4b7adaaf1d782122dbcf5c9d0f525fd34645ef99ebc83ff4ac4d4dfd3ddb0792

    SHA512

    6f4b7e23b76f5ae0f5febcc945bf061572b5834ac5d4eeb35c8c779e265d7bb4ab760413058dbaa62313d8d4da31f3de03026444bec14739c1ff5d7e65932422

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b6a031c565d907227c5dd6239be8324

    SHA1

    0da58458cfdf04f57523d6d303ae83b1cd483d23

    SHA256

    b0e9d4cfd4cd6525b357569d8ad5b7266a26a28c251ab2c294c4d68ec267d92b

    SHA512

    01ac50301727a7e79b1dbbbdc3534f2a2cfbbc5781d8bcc0e2248926001b979ceacbec48d28dbdcd2957f2b227cec55facd65d78384b898800743a97911a8015

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4babb67abeb6a4ccdb8b73ddfcd9cb2a

    SHA1

    e11ab6d63b55f95c3a291cafe584793a0cb2ee28

    SHA256

    c5f2d3daaeaf9360077c5c094df4a7d0ff8ed2e396a3cb51332c74383983e952

    SHA512

    e526c541d016f302a8bd9d27bb27380ab7f565fa685b1ba8f14b1de0079721329f6009b0aab791bfa0920068a3614939736016c61a848d1825e70e8a5cb0e7f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2547fe2758b7dbbf7f36ef32e3449f02

    SHA1

    ab4f65ee350ac392928d6da50e697a84011904ba

    SHA256

    f00c29246cb65b4b30e93f1f33ff11bcb030ecfdbf1474250b2284c713ddc3c5

    SHA512

    0ccb365a7463d4959ad9511afada540abe11b84ff211bba29c296916e907d470b537ff8a35adeb3d2bbdaacf6f7a7d998a8e4d14f30177b11a9f55a6ba820766

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f5f9f15bd0d52cf0cd4d255fce0ab56

    SHA1

    49cad8fe95d59406b3187cbc0c9b7356e717a221

    SHA256

    5bffe45cfbe576b9556ec173fd3dfc4c6d5ec9d08db4bbd6728ae6e450a03c1a

    SHA512

    194dfcc69704d14390d2e5106f06b137ba136d86a4388823fca2c71ecd143d7c2596a201af0133bc211e4954e94324da0a495853d8808a3653a5a8967dc4e8e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fca142a28819f3c265303b2427d41d65

    SHA1

    332340a2e57dd093ad2f828c9b33d0d7f61e53d2

    SHA256

    eebd9743c63f08055e7f35af72eb9d770b323bf1a79efabc3ad6e2e3c049eb3c

    SHA512

    09bf7e564cf0ab1aa0d6d0e3e0a9c7b9d6e7985eae92ba4075778ee659260e1758043d117cc8f9604a3ff91f43bb0c5fab779d3b27e587b5a3bdd79f86ee3b21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    405739ea0eae9354b2b916632a280282

    SHA1

    e4db7d1b3c40b73802755f8aa699d2fce9561a08

    SHA256

    bfb578194aaf10e3ab04faae375af3c0c30621120bf39018874cadea068650a8

    SHA512

    5f7a8e8ddb6044f807598c9fcc23406033178d7e97828e0ed28e5eb659d9637b437fc983eca4e96a41486e2b5cc1d5d996aeb30c261be85dba574aed4fa859ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    773e26dc84d15d21c9904ec74028ba17

    SHA1

    1376c9b26b84c8b0e43346b1d32ef6359bcb3a6e

    SHA256

    abd8eaad6c0f34f4fae2e3f95261d3fa552030247ebce46dc6215987c9d288ce

    SHA512

    0bbd9676566fbe516a065159abfecad191bd4e69df0f2d3eb61033ee0db403c0823ef5ce6b6a8bf31908981ccfb20649951cb8870dc00be64ec036d0e241fcf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db1ede0318179eedee09549966ca2e66

    SHA1

    c7458c0071a8616dae63abcbe1ae7cc7f1f94642

    SHA256

    0db73b55e7379e5c1b2d12cc347e859a0955cd8f9f344e4915c0db0b5a1f265f

    SHA512

    579b6f9ab5488c3d4b64f21af5bfe5354127d7d75e29c9f89773f7f3a56c0fea991facb44f5d12190e489d29db3a1a713e4efdb8a4b48c9cf95c706b5dccd31c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd68aa4b726782094ed7f1d0d5bd971e

    SHA1

    b5074d274ea7ac9beb82d1117370b7c7ed870cf5

    SHA256

    952eabb536dfdd49b96fd5782423a818cbddae780dc282703b6f562c0fc4acb1

    SHA512

    e59792bfafc2fba0dbd0f77642c6f69d98479f597f3f9fddc5ee9712eef5b91137b5bbfe3ea3ed207ae5d9bb769bda2570627a60b6b5a0298e69cf7968b0f2d5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\ga[1].js

    Filesize

    45KB

    MD5

    e9372f0ebbcf71f851e3d321ef2a8e5a

    SHA1

    2c7d19d1af7d97085c977d1b69dcb8b84483d87c

    SHA256

    1259ea99bd76596239bfd3102c679eb0a5052578dc526b0452f4d42f8bcdd45f

    SHA512

    c3a1c74ac968fc2fa366d9c25442162773db9af1289adfb165fc71e7750a7e62bd22f424f241730f3c2427afff8a540c214b3b97219a360a231d4875e6ddee6f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\f[1].txt

    Filesize

    35KB

    MD5

    92a841235a6da24f17d8f94cea65c05f

    SHA1

    f7ced93b23a56991a0e5fe1040ab67902dcfae8e

    SHA256

    ea23d8af682060552369012fd3f397369d11475ffe2966e77471cae6ac61f964

    SHA512

    c8411c165f59ea6ad2f47c6c73f48b04aa18ea0417a35efdab984c459222b6993df6e1846b557f3f01daf25ca095204293be8eb7c91bee409e2adb5eef3f42f2

  • C:\Users\Admin\AppData\Local\Temp\Cab7ABB.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab7C97.tmp

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\Local\Temp\Tar7ABE.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar7CAA.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63