Analysis

  • max time kernel
    147s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/03/2024, 07:26

General

  • Target

    c2c9783377ade2b1aafda2c744b938d6.html

  • Size

    283KB

  • MD5

    c2c9783377ade2b1aafda2c744b938d6

  • SHA1

    664c9aa2f6b1d27ce3b8413a61dee9a87ee48f9d

  • SHA256

    67b2c499a428d20d6be58816f57e9bfa57d764d44a935f7a013677a7852e8002

  • SHA512

    b8340d144723c3a383e780b15ad0cafbd8e81042358089df9e30c57e4db906aa2797801fe184ee34b480db4492f2a0fd1c96065b82cd9c67432407c1e85215f9

  • SSDEEP

    3072:QfluF+mnERc5vczabdViRULBw2tn0/N7YNjRJFwFdSxIGmZ6/zbm:QfluF3ERc5vczabdYFQxYZF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c2c9783377ade2b1aafda2c744b938d6.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1540
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1540 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    889B

    MD5

    3e455215095192e1b75d379fb187298a

    SHA1

    b1bc968bd4f49d622aa89a81f2150152a41d829c

    SHA256

    ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99

    SHA512

    54ba004d5435e8b10531431c392ed99776120d363808137de7eb59030463f863cadd02bdf918f596b6d20964b31725c2363cd7601799caa9360a1c36fe819fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2c0db024cdcf301104123980f1cc2829

    SHA1

    8e52aaec064ee3e4461702e8b99457b02ce53be9

    SHA256

    f3b33a01f592ee300a9384ff37cc327367163dc00dd8d5a9a62d67410ab4e385

    SHA512

    933a5dcc27726e523a18fc84462519bac7710e5d888757a01b400c55daa9b24ebd620dbca5f487011d997db7f614006e49a33ede10314213aaf516f9420daa32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e85d64386f0243bd8ba411882ca5301b

    SHA1

    4cf0a20834c1ab8e25e5e096f7cc2b8c051d9a02

    SHA256

    b24a60327c68faa2e237ed1659cd15d1289f8c9a5b421c60525dba1ac309fb64

    SHA512

    bc99b009829c1b465d52ad1ce69c410912663be8ccdc699cab53f931c9c80107d4675f980cdcab6b4b54ab3d6e1dcd7baf1e74e1db04224e54bb0b783367fb45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e16d2b45f15dbbecaefed922089565d9

    SHA1

    f78700547b46ba32296724c7db768e8901f53d25

    SHA256

    dc2bd649a596358654f876675dddbf5f7ab53ecafc8c65f72e61bef127f3cda7

    SHA512

    2674ca87fade5b4091a3790a566ad26b2c3829599d3b2b493626720aef4ea1f2edb7d2cb0a871dff12a8ff8c22572df2d9c837f18c72dd4814c2694a72c5f004

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec31ab56ddc9086a427036e1d2aa14ce

    SHA1

    e4cfa75c16e8309f4841b8902bdf5e8af4355560

    SHA256

    d0d4dd3a5637fd3d44c7a1531c6e4dcd1562723552127f4da103540e3f6999c6

    SHA512

    c4f098a047af480e69f284e0e0d32d651c7947521b74bd774cdacd4ba96095a2d7da4bc4d1d0bbc62d67ed597fdcef0b39d08f21a9cc59c42f0a6b0932b0129e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2604ea06ddf6dbc7ef77cbccb0e64af7

    SHA1

    8939da980fe53a989d7d83822dd1a0f9ec292776

    SHA256

    c284aee703698b81e167004f9a211efa2e37cc03e9f8d1a7a210e8b549477067

    SHA512

    11115b3fcee7765ec56057ebb5f87740df8c03786b163fd1a5eb2c442502f1f7dbaa6fb8c38b5403931d0fa6b940e7cd602090ad70ef0f70fde90b28f7bcff1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5acf247411d62eaadab8ab8cf200aba7

    SHA1

    d596ddbe9d3937f1c13a1de98421b0e7c2321411

    SHA256

    24e764bbfda68ee54b629376edb190137e970b44787682884a1f7f6174888fca

    SHA512

    3107bbe475eec08263fe110d0f94c24e775de167546c03d7a2673ca3cc445c0c1e07964e390fdcc1c726a006c682d72579ee46c63dd00c26f7b2eac986d57f16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38fdd7fced15281b4146018b50ab8bab

    SHA1

    99360bfb174abf00a9bf0256e986af39e61f38a8

    SHA256

    dc770a07853f8489da5c2f99e3cf59d27c09f866c8a036a833abea2201afd35d

    SHA512

    494c96b57b6dcfb8c85421c3c17723f20bca43ecb29df04e31827efdcff4804a3a53f219746930bbf0f61d99b57e789516f7e7f2901a8bc944be1cabe5110934

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f367c1ec066ab03555c33b776bf6bfa

    SHA1

    120e09789933d2a12c82840984e76facce2dab3d

    SHA256

    3f4ef3ae6224514fd02fd7ae8b2dd53450fa1843f64c2d63f64d9f456974eeec

    SHA512

    22b7f31be10a5189a3a016548065b8ef06609479d7ffd822d69f70912b52fa1dcb68b53161d5ff2052e14416638ad9241b6829c76366e801e2cfe23f8d649cd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad169584a6b1bb91724bd4c432e840ac

    SHA1

    e5ff5f6505be0cbaf7d860938ed250854dbae9fa

    SHA256

    1301b33432c38f9e642b983a67e194fbda87a395df6e3c9a2e2ff65b11f1f24d

    SHA512

    e9ea3a8b2fb5905ee96bc6bf5b5c6f807b331d374e32fac4e11800113cf25ef6a46d87d81878d107d9472ede82d095d0548cefc79865131e7df49c105a47d8d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7201502db6a266a56c370c9e507da043

    SHA1

    d1d2865f8dd7b7846d096f8566deaf6964e8b8a1

    SHA256

    ad3779e80978d675248641876a8892755da819d73f912f70407b71648fa68a18

    SHA512

    fdde8dbaa35fc5e4ad033c3a686e3ce75d1f17f7c605305b9a3112fdc55065d40e8dc1a3f43f2eeb6cfe941959400f09b909144150d61cc7d5635774b440490c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9eaa2ccb5a7fb10bce6b147659c2b0ec

    SHA1

    31f4d5fe96a87c2bb189692a783b4f106a6d5503

    SHA256

    3bd674455d3d6bbc6418b8d4ec394b6803b5ef0ef02b3bbfd9491111a2ea5fcf

    SHA512

    5ac043961b64fb034a07fe5c058e0131630cdf08b4d78b96160c9e5539e1fde30cd7ffb90834330fea60a055b73bc3c7b234eb9bcbe51b38c59c4fd1d7975863

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da0131b7e5110ebc8280d68148b8c2a5

    SHA1

    8674da5d8948c21e2b4c94dcbbaf9cb8cbfc51ad

    SHA256

    d3f36393fbbf561b2b5c4109c45b428baf0a6c34ea0960566b253c87afd3e52e

    SHA512

    f1b8f36750842d6a5667780be6a698b1f659e7bef230adcd9a6aa8dd6307541f671b6c8ec817a00ca4d360583188c1729ffe3c5f5c5f06a24737c19eb1189153

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    d084699eacb3bec3975f6ab1c5aa2327

    SHA1

    27fbe6f7925eba2463727bff748ca0e2d3b8e7ae

    SHA256

    932df4db42bb1f4cdfb8e85dc3ee396d6214f0f299381a9d56be805cf4248057

    SHA512

    0765286b82d655a66683aee9b802f90411cfd50e8e17c7890dbe365211abc272b82a62dcef7b8bb99d76e4b5e5437d3a16bf2d95beefab39a8ce8e01fd33cea4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2EEWCOWJ\cb=gapi[1].js

    Filesize

    132KB

    MD5

    c23494121f5468488a8e79a6268f4648

    SHA1

    1fc2646c75df1b8528667487997ab1f5b308133b

    SHA256

    100700c4795780ff97f999795e8477954da09fcb92a1131cd17216203914c425

    SHA512

    956f396bef9df5a542ae410256686e2259e1ae67402615f937c2f2c004ff2f3de5f5767200661c0ce204fed9b32b1a8707c26a566da1d3aa120d428901c39769

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\42SMDRB8\platform[1].js

    Filesize

    54KB

    MD5

    747d3cd691e352f56f8e44adaba0cbc6

    SHA1

    f2a659470ea72c344db7410ff5920fd5275fadf8

    SHA256

    a8a7ac9ad00d3e22712047fb5640d31120bd47b00538582b18a0d223cf9e90d5

    SHA512

    3766adee9eebb07843efa12a437197eb454fd37a161d427729beddb3bba4378345695c870076948bb76733e788cc4c07c4ece5183d2a70181c8de60e423b67b0

  • C:\Users\Admin\AppData\Local\Temp\TarFFD.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63