Analysis

  • max time kernel
    122s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12-03-2024 13:07

General

  • Target

    c37131821d8539bda3a3805e4b104c1f.html

  • Size

    14KB

  • MD5

    c37131821d8539bda3a3805e4b104c1f

  • SHA1

    a136658f417a89a309ea4f07c1af798bc2229884

  • SHA256

    a412d500c20d112a893017a31c4e34b50ab0370e2e4c28885c855c1d8876ca50

  • SHA512

    6bc489931f0e5d689642c6468d972085a79dd634a30b84da5d666e5a75943b587713950eb36f422903fe320b6cc90016fb8291fb3cc597fc3513c4beda890cc4

  • SSDEEP

    192:+yEioELD/ZmXg8oWllefMJkZQ3wf1vDmlKt6DvE:aioWD/ZmXg8SZQwmlXrE

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c37131821d8539bda3a3805e4b104c1f.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2020 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ba36ef48c5a8bd23c460fb9185b5a116

    SHA1

    322eb38488584ff5677893c6580ed298d0a5be7e

    SHA256

    df11cfe1729302c4845b1256c2ec48f88e65e5d5dc8a7c9c29f31f5b3cf2953e

    SHA512

    28b290efc8e0a185a704c38a0962078088cf43ba020c4d38153ecf7df0e2002b080ec72bd2af34595b7e6f74c71e2461e25015342b76d526937a659b49667d1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9bdbe5ea837b93828fa617d3da7f9d23

    SHA1

    822c52362a970b197ad7ec686f1e6a76ca35abbe

    SHA256

    a482b666f3e619309dc883d7e15ece5486742b809b53bd9733b8a9a2e5f5dd57

    SHA512

    9b1ad0b856bda9686284e22cd6df9829823dbdb0ed662b1c24f4c8ea0ac003706dcc4ad255a3b0649b244ec56ca458b8eb13b94f93cc2b1fb593296183cdd016

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    db24d70ba733f217117f30839ac5d9b5

    SHA1

    6b6b982647a52b1b0186e7ad62f2b1b09c15dd6a

    SHA256

    d192f8ae55ff632dc4cf1c8ba29858c39dbded233caa25289987ec1056375417

    SHA512

    508533c7d4fabbe31a5c8b10b2af989ef9e49f7ef7fd3b1cc7464420f1a7f86d0286ef0c819926aca001f27fea2db1d53dd63552843d5d9e96f3cfff7671f12b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b1e0b1a16ed9c35df3b40671d146178e

    SHA1

    664ac4f62ae7f634cf88fc96158dbf9e25bc3500

    SHA256

    46cb604c71e9a9ab797afce4496c619f58174aac3a8546419b2cb0af5b2d9c55

    SHA512

    5edb3a692105255f07b6655b256f5366aaa40b1e57616cd35789b3df9291c6a4ca78cb2f5d4d78c4ed5146497efd722d93cc9fba4f77e7c999c41b94d31424a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    260fd7b0281322acd4235d743f95fcfc

    SHA1

    c6fdeba253ab352be6425468d648f89977c5c350

    SHA256

    572985d5e325864ee35b9cce8cb19ce80b6b8509ae941ea14486276a78de2ec3

    SHA512

    530d8d1a53e8e7a1db07ac6b7329d53b2b4d37044be7eb2a1a241c1b86384e7d9b727b0ad694e0356b9e74b53b5ef751362e50424834e45136b9653d3bf19748

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    131176393013e7b0ad8e04563abe6cdd

    SHA1

    0eea226fe75a34329e0c04fad807233426d4cb42

    SHA256

    554b664ee021ca49fbfb014cabfbc00737dd9d83a52c3e0f8b061ab6aa8d4a4e

    SHA512

    3044708b9217f322b9e0979311f7b5d03a4c5eae4411f816d46192ec4725fc8cd4dda257f41b38c0f9d28ee63465415a4522fcb204c75b4119ce009a5e2e992c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    85a7b23dc733585f287a244cedcc94f6

    SHA1

    95d7561573d63a844f8bc8caa7ce2cae3f84e5fc

    SHA256

    f93a74a7151550b60cfd5c763356152ce921d5100916f0070fec1f200869e5db

    SHA512

    6b3b835ceed928439016e9be5a00d0b43cbe1fe584327118d7192291d4580e02144181c59ed6ec75d2cab1c55ec423d75609a011580502bb4d9210e2b136ae20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2f2ccd7de83938acf7e83eeca49b5c4a

    SHA1

    0f15a4473ba8b938fc60ca6f9fa90e30945a9894

    SHA256

    1e0fd865288313adcd97ba78fc7ea18ac1f63eeea2d01ef9d8dcb4178c823039

    SHA512

    a8fe519fd49573f80958a110b74281b2699184051a1332ee1321d48b337b79dd9727bcf7676bc33aab040a709b1aeb8fdf5344a5595d5231eee8a0656d434f11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    76be1d9abcf6213759200367b471aeb6

    SHA1

    1a1f8060c4c4e3d7fbc1fdc3f2e476fe7bf66cd9

    SHA256

    c85c6324749165d7c66d055b439a7aeb6af47e229a14e9440019c41a3393a7a7

    SHA512

    22ab01247263c7e467a920adb1f95f0db87d7275c83e3bc578053cb3d7f57db3ef8f11283dde6075d54bc502b3a481f86227d357047873d2c3216365d67f88d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8bcc65cd7eea36b1c94a8ac6493693a2

    SHA1

    6fae233abadd2bf8b5b0bc1a5393ee2bdde1db37

    SHA256

    0bde87df12602ebbacace3c4ea96ad3030219ab301cd8c4ab6f8ef42928a1980

    SHA512

    903c19c27a77e3d0c0ae4ff017170d01b339017ec92c433f253faddcd5ca3e4144ae0ddf1b665b32784f6eaeb6e78bd9eb14baafd2aa2456c9bec7f9eaa74f97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b3485bedef6d8f97db929f7e5eb4138d

    SHA1

    f58047cd837118f8d0d06b3451f1fad80f94d32b

    SHA256

    a84705d30694fcb83abad7bc2fb5e01e7911d0a3c124248bfac7ade11f4eb772

    SHA512

    0fe6d6d2cd4345bb7bea205ea13c4d1503c42ab3842b5ba5c3cf55684e2156f3c18065d6fe92d140a835006928b5ed86c16a1fdeb654ea4cb570b047e83a8704

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    79024c4bcac94ffe7db7e0e9d52e4962

    SHA1

    d0cbcd99ddf705de51f4fefa4f9bd9243a2a7196

    SHA256

    c316cf652134f8c63f3755e1c493f0c77fb3286bfa61ff473b04c8d14d0a9d76

    SHA512

    6f7c88651fe8913f2fbd75fcc07b0da014cda4468083cd09cc038f78308742fa0665e7633d43ac7bfec10d49cd7d327aef5cd8ad13a6b526a8cdd3e8646c19ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c3e40fa7b31661c311c739a3f19ebfd0

    SHA1

    60ba5a39f94415a984f82728b78812b9e9663c1c

    SHA256

    eaaed2be5668f85a1996057cb3d02e80909e6d4ec664c8a1d854895f9e439f93

    SHA512

    8d810d8091247e2b518d36026253769e6c81e57c32dd4ed734b644c1c83edf0daf7e5116d19e336fb81c5033f489b9201594be53cb2e220d10e60060e0e598cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a27f6917eb4f2ca4433bd79eefdf7187

    SHA1

    6422553c8949b381d5760ece9f8612cca56ecb04

    SHA256

    4ed5f41a70be909dc3696630d03dc936ec7e1ba46f72c1092cf1051ece2d3573

    SHA512

    2b7e9201eaaf2ed7733a221f4b1d4d63c49ff5f1ad9df98b531fa9aca44dc39c44584c556afd6f97685b2fe5eece81d26137ab44633deb1d1c05d2594c5dbdd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    bc810c2839ae28a9e98ab7a7224e38ac

    SHA1

    09533a23203d633b9cc8ef4611e9dda7f29f6781

    SHA256

    1293bced157d93afe2bb0626355b319b9d391d83156eb396e758c061861ab8bf

    SHA512

    0ad6643ca344bc91e688d816ab33a29ac7f065165fd942247076bd080496f369106c213eb68fec2f66d2ad5550c9747f9c85e5bdbbb88898e4fc46701cb90f2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    87bb4d565ae9c0454fcae0fb6621bd99

    SHA1

    b939c0e670a46dc098a0bbf548b1f66ae760f289

    SHA256

    dd56b7bd1d0b9d27e2581a068bc867d4a7347f9f63fc590b6ebce414a02dfb8b

    SHA512

    4168132e6aaa1ad7f3b3ba787a79386ebbea2ec541d90ee55f4c18c769e4b0665f2be709c87795b9061f57d75a3f3ef34dd15bb42ac66d29a824f9e808114808

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e5d1411d65e735b131a3b046873ddc25

    SHA1

    34c3e34a5eab8b918f0fcbf58fa22e8a77a6e378

    SHA256

    33bfaa61f48ba27d51717338aad43df48cffbb14b35548caf578a097183366c9

    SHA512

    5af7887f4f4fb057721ecef8eb9274bc156d8c93285029deb5c9ac6289d30c272272e28bc58fc474549d6c7f86270cc4757b891029a427b7a1ee4465945d7962

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5d93c7079b61e9b418d8144412c343fa

    SHA1

    a02906c2acf62cbb447c6c79e72dc1ee8da7a12b

    SHA256

    ba40011fa2075af75dbd509a75475a77f018437468e41b635d87fa0087bebac8

    SHA512

    05d0b46a7795f4803301d3fe88d5f1d9500fd0ec89edd184e21c1974968bfde1b485bba4bd951fb98467f3ae58ce22dff6aefea4d3be26c4abd5bb9a69e32e5d

  • C:\Users\Admin\AppData\Local\Temp\Cab8097.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar81B8.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63