Analysis

  • max time kernel
    140s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/03/2024, 06:49

General

  • Target

    c2b848a63bc13a977472c033e53bedb2.html

  • Size

    90KB

  • MD5

    c2b848a63bc13a977472c033e53bedb2

  • SHA1

    46190dfc20e806a8a694e52a4db849ad3a7ca5de

  • SHA256

    e1c481eab6722306f0f8a05eb164bb416d4877e40f25cda275c72bf56e2a8535

  • SHA512

    00ed20512d3ec092412ca195d1edf2401bf2d644e462a47c16e58dfba0fdf10079e618730fa356e97c4682702de1bcd4d0f0da98879ba395dffcd133414035ec

  • SSDEEP

    1536:gQZBCCOd90IxCg0Pr1rkw/MY7QP24KwgYgRZtG2vmQryIA5oN7LNWeNvI58ttjkz:gk2P0Ix0ePd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c2b848a63bc13a977472c033e53bedb2.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2632
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2632 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2500

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b329fd7449024dc69b91675cb1e37a8d

          SHA1

          cc511b9b6bbe4019e264529f8bf92572f1cc87dc

          SHA256

          17e009c79a06548fb9fba3d3379b390996c566b90fe9fe2d0ecd820fd216cbb8

          SHA512

          8311bd5401778a8f54986c775e97d0b40ff1ff2e8079e0215df3c60e46be73e34d1cac096c6d09ff241faa5ecec13851c63b5df7df4760ca83b7fce5535a2ddd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7c334c972a17f63fbb291804579839f1

          SHA1

          8218199aca737b85b1305047d0f82b0b07b8dab1

          SHA256

          b562ecb0eaf5b35e25fe98083ae6a25a7aea35e4c5d6a7b60a95c7bf6e285749

          SHA512

          dd6ec5e850967f841727cfc46b74de8e31486364df859d27ada3aa3a0477d7f1a3303108a1a58e6155a306bc89a53612c445dde09b71ebc1da47bd3974e4f1d9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          aee3630276248b65002bdf796bdd1550

          SHA1

          f5cdd6a944b37443c470b5448585c88bd1fa8d69

          SHA256

          1b74db22726bbbd90dbbfe49cb115f9f5b2701f8ab0b613598bfc79fe9e7cd34

          SHA512

          ea45351bff087432a4002eaf24832b662fce6ec62fff2ee3818937f9c9069711c988f57940288bf9dbe1c36f9eddbbc591e2d72ab848ec4fbd433ff0c4b5ce70

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          61875b1f2d44c5f29c7f1d7f11eb55c7

          SHA1

          04a44df53d7ea7b16ab7a3cfdd236df38f7def24

          SHA256

          347d74b66911916e50d9f3bc894dbe1a461177c0734fe027e33e0df252f94f8d

          SHA512

          dcdd2faa17804246336cda6a33fa445285e6970f64455a3c9437ca63f94fffee28ac04f5eba55a6aa049433c1e7cade7d53a67bdb5e172ca934be74103a59e37

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          401be613070a4e575f996f22fb096d8e

          SHA1

          0fd96b7661138d09c967c8bf32694a2069d77063

          SHA256

          0ffe43785b9336d6223ab517e510d14766fa301fc18e981ced180497ecb4ac8e

          SHA512

          3c597d2181d382d3b4617124a4f69ea4815f78ae364c06ffcdec94473d1479077caa36d61fb19bb535826ec525bce1fec5ab7cf53361cbf93eaf58a66597a4d4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a9a5fddc0e9b55afc21562c79fc60bfc

          SHA1

          7f774f27f918928260a2dcbade2e81e439e6a504

          SHA256

          59c6202f0e542f942aa1e342a088f01447bc562469a0a53f71b42ebcebad3527

          SHA512

          205fd49143417152f6472cebdd59b7be3ca187712e9b15aa708f843948d1eb4a033c6d5f503e5ff5e33b0a07001777f858a19bde46ca0428b5b97d4d2895085b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          263cc0997f44b575b9255079f29ccbbe

          SHA1

          d67441fe556dd1221370d84a910326659dc2d3d5

          SHA256

          5352a6691cdbd19298ac9757bf9145e8aef847a794e5c1811ba4ae12d9a9cb90

          SHA512

          31e6e3e3bae5c0a712085e3e168a87b29542d74b0e09339f65a5a4e6c08be39446c7161e8ceffbbddebe79430642ec009d9a0f1850c690819d9793005aafe7b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0008bcb45c1874fb05682c9c68a1bd9c

          SHA1

          9a1f0b024a7f69d7663828ff8c5c0b6c7bbb643f

          SHA256

          b412a4e7b576a7b8a0f497debfd1f4dd983968f8ef7b68454408004aa9a3e234

          SHA512

          e580673bc2048ae3f4ca616b5b5b28a937ed47aafe68f4f5314ed788352a744ad3b7d73697611b2a0ea1d0ad9542f6a200a1e5e741fd0a7109d86a78c2324755

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e0d240ff20fb2832b09b27c4c0498d82

          SHA1

          f1867ba23cba5daf2100e3857cb0ea029d11142e

          SHA256

          792cee952262132ae4db71d3b39aa1824e3e562e973a89402976bb9ee160f60e

          SHA512

          61915c433a1db3effca8da91eee81d77d57acc295b1a2183a9002025f26f42ddb7b253598e12cfc58a05fa7fb086b883a35d5f9a9727f65aa30279e64ee72e8d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fe93f71dd321ba9fd34f92866b98bee1

          SHA1

          e650d476eeeb40392ade56fb1b29f804f9ee9765

          SHA256

          226b4cbd5b54750cb431525347bd49f12e7bab85adfbdc3f3009054181f4278e

          SHA512

          feae63b1a0d69856b24cf07485a6084ce3751f0b181e0805020e3cca91cbb0cd0f04338c6bd0154bbaa821051186e7f1acbe9a9817b22d1f94cf013021b3600b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          aae1fcc7860f3298e134e60d7809777f

          SHA1

          385c0b26c029ebce071686e95e568b960b583f95

          SHA256

          0121ec7d5e0f0754820d033b780b13c0091154629fe6f67eaf787bc0be5573a7

          SHA512

          8324f441b77e9badd4a718ebeff624a5008d0366c71919cb66d8416477a7cc943f47326229a15c5389646b305e361bde67db01b26e55e113c28807783897459a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          82e5aefde5658673dfe4ea00ec293cb5

          SHA1

          dd3d0bf0af7f8d1dde9594e730c6aafd35a8e94c

          SHA256

          633d9cdcefefea39ae38a2d19a0e6a406ec1548abc051beb736deaae1f6363a9

          SHA512

          c749e56bbf4428b0117fc739f5da121eba7edd6c7df8f2fcb6405c052acb85357fd8a9f1474611099ac0d065e5896661c34e33b8caa002d273c7b9f05f1a01d3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6d09bbce8b2f95151d3af4779571a6b0

          SHA1

          329172a4f0d637eb278a31f8b42f5687d9a2dff2

          SHA256

          e8c1b0d7f36fc97c8a0744d72dbdee48bb7e5cde68becac1315f91249deaa64d

          SHA512

          97444975cc8c5db254bcec1e5ce22e50d1b6870237207a9776c45dc8caff163c801dabaefd39008b4412f95c5ccffcd3471dc489bdcc599270142bdb113d3edc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9988f0875af4b4545113c759ddfd7600

          SHA1

          fbb97587ad1211b6d4764d12537b509c25dc5153

          SHA256

          8d37f86e791e3387c9d184f11c65a8dc86543aa3976866b0be3294651e5cbfcb

          SHA512

          083f01b47fa4e3d1bc04ecba6e09a70815fce15b0ca326332cfdec86933251a4218e5241365af35830a229275227a504685793cd8edb4c9d957d0dc266515fc6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          48414de438a2d8a0a07d30d7d01ab0f5

          SHA1

          dcabf72b2f940c81011df9a213040366e21c6b9c

          SHA256

          14ed7f8e30873be719884108697acf4d8963ca4f81ec8ed7b404f46048125aa8

          SHA512

          b1aecc1f98c94df13b269c0aad1998f2606cc19a9ff82758955154143d186b7eccb5bc5db4f70e8f942ea1959dfbf45c19a055956d350fad5d780612dab11015

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          255673c7b3c1223f2e16705064744ed5

          SHA1

          95a84b6281cc4a0f582b3d1de270ff36815fc50c

          SHA256

          033e36affa98ac67d137c4cef609411e955b30a20799dde04a167afe96283941

          SHA512

          e05ac48b70d63fe07a07b8636ba8d017d7f60052c2a06ca8c88dd760b37244dcb68f15d5fc69e8e57fbd20c4bd8ecfc7a7bf8c16ec2ddf6ddcd237721a937b2d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4495fbf70344f357ee623a66d86cd759

          SHA1

          e128bebcec9535d99b6735e2d87918365f6353aa

          SHA256

          f2452aa7ca3263e44e493338988d7d555a52fff10e707548264d079d9c6494a0

          SHA512

          2b4601b30163dca308471bb3e98a817cbf16c6a8de059aa2203458ce376f746ae43b829627ad9eff9a78faaf96126ff5bcc830f740dcde6a5600f61e924ad37b

        • C:\Users\Admin\AppData\Local\Temp\Cab8CA9.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Cab8D66.tmp

          Filesize

          67KB

          MD5

          753df6889fd7410a2e9fe333da83a429

          SHA1

          3c425f16e8267186061dd48ac1c77c122962456e

          SHA256

          b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

          SHA512

          9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

        • C:\Users\Admin\AppData\Local\Temp\Tar8D7B.tmp

          Filesize

          175KB

          MD5

          dd73cead4b93366cf3465c8cd32e2796

          SHA1

          74546226dfe9ceb8184651e920d1dbfb432b314e

          SHA256

          a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

          SHA512

          ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63