Analysis

  • max time kernel
    138s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 21:48

General

  • Target

    c6f00e8a723c37580e4d8994112c9dc7.html

  • Size

    54KB

  • MD5

    c6f00e8a723c37580e4d8994112c9dc7

  • SHA1

    864c03da34718664ba977c59f904c0d8a9201243

  • SHA256

    3212700471128c00c9448d13c6d3b93c7c3cf322c5f897e4dfbed9dedc1227c8

  • SHA512

    3f4c7a81fa5d39b7f2dcffef121616490f9b2629cc6e1a77a3111f4d274c700929788d6ba256b0d300deee82c4bb3a808768c036d7abd4081a46530227471925

  • SSDEEP

    1536:/7n8d6w+bFePQUz1KqxM/hYYr5kYyw+7UnGxTOEmxYRM:ZhbFePQUz1k/hR5ke+Y5xYRM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c6f00e8a723c37580e4d8994112c9dc7.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1716
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1716 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1948

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    add1bbb06c8bc984e8938aa5b2b87699

    SHA1

    4e5e804954cc0cb4593cff4aa1cacc63de84aba4

    SHA256

    04d7e1b6ef2aa710e96d680fa7bafb38100d11e3a9bbf5bf40ba8a301fa934b4

    SHA512

    c4f88e5c802c10650d2ce0ed7e9a387f37c6dea8819bd13e085317ab271e564f68e070fbec04d48f410b52b9e1748254d6fef88209c02746cc136fb83e284c80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    6e8316cc79042c7692800a4afbdde377

    SHA1

    b66ae1d7d4b02f56e6ef85eab489dcc00397fa29

    SHA256

    009232f2f163b3fd5efbdd630e43a8a8853751b3d1891479820f6f3fa457da5b

    SHA512

    8dc334d233e5c96c86c68afb7fc733ab0b6fbec8ce7168fd97cb51e5de94c28e759808687049faa8ee7ee8d685757e3525a2628d86e64cf9bb2eb6c339caeb72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35e29e457704e5099d4ce94ab0cea90a

    SHA1

    c9b389292d601f9d12ef30cee6b20812c222cd5e

    SHA256

    e8716e30f063a4b2c1d2180fce37cfc1656f68f18ae222a7932a3314fd9d75ad

    SHA512

    8b77839be49e0f8fa1260819a1cc0cf4f22c742edb36c85eb2f26ec205150d4cff2b0da06ecbb6c33aa79c5b41185b761603cf6e0a37d2b9789d07b5ed43d37d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8035b17eaf8e2f317b35480baf7b5677

    SHA1

    d1505d5eeaaa027e7cd37e70e92fa505aeebc9f4

    SHA256

    5356295f7e2717bf47adb527e1f08e1110cfd83b442e89ecd29e63061a58a09d

    SHA512

    cb2209b6308b2ac020d82934a2d55aac57983ba5850b091c567cd0055c2e380871c56b4526f0b5afa482bd16e1e885d3ac34aa0f5986ad3c91ff8f0f1ffec903

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15e1ffc6280b44200004080836db5788

    SHA1

    17470edb2cf4b266288e1f9e46981c63cacfe40c

    SHA256

    50f225a63fb52615b02b24780d11d6454c881a8fc22e13ca6372dfe1e6352a1c

    SHA512

    fa22ea0cbd15ef8d1bfa88bf618e750b5a173eed6a39fc0da8acbef03d4d30ed71b2505b01af56d08c6139814bc509a092b1b5f182493396a2c199accd385af9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81808b6da8d6f0421ce2eac17a3c929d

    SHA1

    95b56bcab8eb96f1ddde91449006cd7d18a6d0cb

    SHA256

    95cc06b4002cd3ada9b7637915941c394523f2a83e6f1374da14016d6b430b5f

    SHA512

    c57b815ad6735a6463029b3914490a8d971b332075e3b6247bd28fc0ccb34723226a90de06ad6b55efa31b60b03d50a95ccf33846374f5ac6325df77ed2a816b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a48246aa8fedd6102202f82175b8c182

    SHA1

    cd6ad32b2069d26d3fa642379f5ff1c95c84e438

    SHA256

    97c9d6ac655205f32c94dd6d0f20c9faf641cc7cd20d329add7e393c9b2deb6b

    SHA512

    4c5bce6c982930e5b7b88b353f77381c527606cb89c15b4ce1b14d2484716c6f18aa2e627066aef567615017283848623036bb56d3e33e13bec5262fcfb145d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f666d0273259cf1f9ed9aa3c477e0b4

    SHA1

    6fc3402abc1cc8e353eef2d0226f95e8aa769077

    SHA256

    83c77c626018cd931d2c2e80ef5f36304e64b75e388befc8affc42cf6f9afddb

    SHA512

    c14593d90886c2828c8b79efd16c7b382234011f049631eaa2266039b3bb850b76cd61a243a1f84e31d394461923bb09b50b9cc37675907cb375f86ab40bbf58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf543b75dfd56aa08ed3b2f0fb96d4a2

    SHA1

    4f761a52c6958307445de39486cd82c17113fcc3

    SHA256

    370c6fd1bbe150ee5b1c9d0bc7645322bb525391a31df464a8ad789e2b7b15a6

    SHA512

    08e624755dac62a1f4cf258685540e330698283ede2c6e0443a174adbf319167549df9bb14594f869cfbae1001d159fbc273e4303223d7608241275ffca77da2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5f4bea13f82a390d7a3c617fe928de8

    SHA1

    ffac4e89cab3868d4a050b68f0598cc60a0f2037

    SHA256

    d8584502416bb09b0f7e6162befa5d22b7e08cd18f3c884bb581eeb23cdd8b52

    SHA512

    3c1c1711db7aa372a86d0ea69d81019d766235db8a603f633156b11f6682b1957fb5a1d3be9c8ebafcd38598c2b74a73d5568ad6843a3502b0c0b280e273d8ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6861456bd1ccdedcbfe180c9eba3cda

    SHA1

    42560a413e367361dbb18ccadf3e06f65fbafcca

    SHA256

    96ee67c2ee3b1a2aa0d654c0bc0a5893f0ca39fc494e3f5921fdb9e5bbcdae8e

    SHA512

    df4487feb3b76ae08eb1e8f6416d44feefc1d3c6c33f82b4ff5dbbb3b7a69f763bf50b8905f21e63297c28177534229ccd9b8690543d3333c11248745378059a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee3d90476193c4f3fcd7aeb30921ccbd

    SHA1

    947eb7d68d1f8070f694f30a68d928f1ac410150

    SHA256

    e6dd233e907dcab1e107985c4f9cb90b3d2f703f0f753666e9c740dabf5dc421

    SHA512

    44e0a4f157625617199c2bd49ecd44457b7d03ec9242a11ec56edf059ea2d08fd20fbfb2950fd4d88c186134481c6600252b59a7c9f11a8221e8882b75c89b0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c056938a87ae066bbcf498ff148a0a43

    SHA1

    295588fc62894325d05f9f95b5c52f2d73438ae0

    SHA256

    dd580f8722e8529f94b2ec744b5c1edad61636714b142ce046d6c293dd5d9bfe

    SHA512

    437d33ef1ef417ba20093b6af99bac3eb8adb7a86e9255bb5c792563fd2cd3ebadca04de3e9c9c95a1fb77d011a12d76748200f7ba24250da8c785e2257ee6b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    456851ac3cafea940b1de11c477165c3

    SHA1

    62e7d05e49ff51ea47827df71022fd588572e87f

    SHA256

    373807f6441645e8525dc88f4009ce35186c06d3faa5a7da355f40c266f68007

    SHA512

    275f724efa31ecc86794a9822b6a55c2923b2ea3c635a99def2ace5a2b1534589d4280cff75a2905ce3b615b6a3219026060cd2d1b59dc3c7485783d5e1b5533

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca058b1e1a1cdba9cda13bb491fbf7a3

    SHA1

    d74c58518e5bf4877f4232c888b24217c185adca

    SHA256

    31c2603a26aa20f04134fed23fffcfb8569f566989f7f85a3ad756151f1d5cf4

    SHA512

    67420fc53598e1b549262b2c0a2f7962aaf9b975ed35d1830e4f8df57663430150aa1276a31a8e76a37777d711a5b9e7135191e6e5cfa0541e0e5b5fcdd525ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52f0f2ee7024739a764fcfcd9fa7b6eb

    SHA1

    be95d02fe7be6ebd4561a5064653d4eeb404c580

    SHA256

    4624ac1391519db15c08bf5d8bd21edf04dd097adf1653b11576ce3a568e8c3f

    SHA512

    894eee243139e783dec12275f02b83e8af9408ebb8c2352424c58b27318658dc4c8d502b3d39dfe362e9251443e94dc04e8a46a07a48c312dd1cf1a305babd07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    976115c87cc91bffdc0db0e8ac632ca2

    SHA1

    cc89e632425a8bed185c6af17bb84ec4b57a8796

    SHA256

    264330dba2faa87ca0e791004cb97c009407a4c48701e8537cd57c0dd49cc284

    SHA512

    4ae1e8d5df221d8014b177814959c0256d7b1d28c434907c9ebb578d603494f6f65ea7c40b040032173c17e9245e73092d7cddb0df3e1d4fac622d6b148294c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    f23fdc132b096dcf8283e6eb176393d7

    SHA1

    e85487cc551076f8ccfd4b6262fea92a1f83cab9

    SHA256

    e905828c35a9ccbda4b16efcb41940e21dd2cc662a0e27fc9b465540cec78eba

    SHA512

    a8127eced2b78de47c8f635d07d29302641fc207c881555d1ddfca4f75e793facc52446615c227de27acd713dd8f847d7bb1d6a4cd95461e82b24ac1936f670f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3SGP9G0V\cb=gapi[1].js

    Filesize

    133KB

    MD5

    c8be3350843695958a33474aeb3ea8f1

    SHA1

    ad92694d9b189ee479c1be438636e39247b216af

    SHA256

    22494eb4f5fc2ef8c229b9df2e171990687e4837282655145cca0fa302af1278

    SHA512

    54ba5d4076fe9fe4c4ac22f45cd7d2ebb4e8027d8b8f82580436dccbcd60fa2adbb948ff1234d9912c663bf1fb33ac834007850f5a3f2abfb96a7a4feb110bc8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LF4IFORF\platform_gapi.iframes.style.common[1].js

    Filesize

    56KB

    MD5

    bf78e91c4b8c660626008446d6d30703

    SHA1

    db09dae5dda987e24027a540e47650cb970e31bf

    SHA256

    f554260f317f497231227b9def0144f0bf370ae71cdd7a54ac60d0ae1a56e096

    SHA512

    15cf262865ed7a9aee617939501430586460eea04599e7c09f5b223ecbebf454450e9e6ba93b81e6e1a35b1039d0e80039bd4d4c768dc72ae5e3bb3ca1f70fdf

  • C:\Users\Admin\AppData\Local\Temp\Cab63E2.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar63F5.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar661D.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63