Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    14/03/2024, 03:47

General

  • Target

    c79c24dcf8faca3dad35c04afd237877.html

  • Size

    25KB

  • MD5

    c79c24dcf8faca3dad35c04afd237877

  • SHA1

    8f2cfd6cffc79a409b092f926ddcdcd3ef84cf34

  • SHA256

    da43a5bb48b2685e00c40c4dddedf6faabd21f23f4a977dc0968b538ecc201e7

  • SHA512

    97978ea0a02d98f21bc8befb121050867e76ec4452b501f0a011073d4e0d5088e23f064b246d7a108d15f1cc7b14f6057e6ef782b1753e6d131d01fc180c18e5

  • SSDEEP

    384:vdg2H8ol/GwI32xOUtxKTeBfKTpK3DlMG5VLgWQQ/U4yhoy7jfIWrYc51IlSAuVS:1g2Hll/NltITe0AzueNG9p6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c79c24dcf8faca3dad35c04afd237877.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2216

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          67KB

          MD5

          753df6889fd7410a2e9fe333da83a429

          SHA1

          3c425f16e8267186061dd48ac1c77c122962456e

          SHA256

          b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

          SHA512

          9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          89bb5dfa8f0a61621418b42727358926

          SHA1

          134bb32fc7f5346d0920a2474f2ab952e1abf55e

          SHA256

          563339c5acfa17fcaccce1a736c3ddece525f7a0197f8859a9c46fbb360a5086

          SHA512

          0c2fd2f37cc7cde4deb9e5629d682f097e28b0d7b2522afe1f50a75221eef7a30c25aab149a7bf7216c405c126fe617b73daaa778708b2f6f36dba0b56cdbb99

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b8ed707f3600ed7d2494ddc98c794410

          SHA1

          1998f78fe25d9094d3880bc6893a086429c6a22e

          SHA256

          3d20e645ae9f06761a6f1e60529dad4061969b22de86155bb28d63685473f5a6

          SHA512

          24db45425f8efe0a691d0b3586d5030d04a9ca1f4fbe5d22f7c3eeb95eeff7fd69a375d1bd29ea9f5e303d36a161c8f123244b7708afb965f90f43729565ed47

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3ec1a38620364aae805868451bc7ffa4

          SHA1

          c33614974cf93db94e9f83a5660bebaea0fd9bd3

          SHA256

          b7b873b1ce05551f7fa8ce5a0f0e214ba3c3a4dc720a80eca4888ac70fa6b2d6

          SHA512

          e984fabbce1095b2eb22822dd2ddfd5be6defd47dd844ced8c9ea8a5d67374447c450ea7449b6236947750dc8b1bd50b3feee4b37ccbb5438371f6c087b2c499

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          eb4d011b3d71d965013e6c3a681049f6

          SHA1

          7526729eed93521289b6dbd00dd037c075c6303c

          SHA256

          ecdf8301836b238029f7a41ec2445da77e384c80473555d8e15eb1780ecbb5a7

          SHA512

          0bc65091452e6483547297c9bc6476a19f6d846051034164efe976d2bafdda14532748b437b93ee92935754a08853396280da18255cf54b7ec0f7c28b3d5f55c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fdabdd0dff92928bc99f908e04d08a34

          SHA1

          3cbe379e9d5b1c3d575c9037c0e2ca9bdc54c25f

          SHA256

          0e31e487eea1fd45f169d65534c7e892de6a406327f9e664502cac706621cee8

          SHA512

          d0a8513ed4cd42bad52aee1a33930dfba379caeda18403c36264e66fc3e865ef2f518d764ee961acd47a3e2a212073dde1cb651bb458f5e980d59a53bfe57542

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          87d9ca4f1ea79472a128263506c8d5fe

          SHA1

          bca82158326c5ee5b64b767ac2546f10da83ef12

          SHA256

          1354963d0fa464b97f869443297d93309492825d47a73483fa12df867b6877d5

          SHA512

          ead39017d3b7b5ddfb82069a190bf17cf070c874356b42f14ef6b26fbf0578d5b4bef1ac09097946b8c01f980f91e43c43fcc532e04b27d12dcac7be82891820

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          21e90217df22a7fdd3f0cff83f37bd15

          SHA1

          4a7dd9ed9e5193abb4a6b822f2efb5733965576d

          SHA256

          07a8a7620572241fe2b864c594b24b555818ab9184713d7ae6a7586d25fcc687

          SHA512

          060e89846cc026d4594873484d9a750ae1e09a16c5e97d221663089c2c0c8f7fcac82b63a96bd17098b1b52685e14a8b660d10342a469ff27e7f5b014424b923

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          eb37894ccae26ef6f313e81bbc6868ef

          SHA1

          f915457f8ac946f8357feaa02ef2f054a6714f67

          SHA256

          a455d5f68eadbd5c1236cf752e9b52cfe0fbb021b8ef6dbf89a93b0ffc94d0bb

          SHA512

          9866ac2514359298455e24f254a712cd14601dd6fc9f08bebb844f27f9fb61d0a7ac19861a455c0700a2d1eef92dafc023dc415dbce41e24a11da4f848efc2f9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          797093db4ccc3eac2753d6a3a81c507a

          SHA1

          55b98e1ca6a1ed067e8340166072439f368cb5e8

          SHA256

          87b1985091300d73875c3291777e29e0de6bb9e8a41cc3dc4d19c9bd483cd233

          SHA512

          122d864b126a8b703fb65693da600e1ebb29737429f22d6921090409ba58c698b8fd88e6e93fc380baba14a0db902d7cf722607ea4e1627085a7287061c3a7be

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          78405d05c2af555a031515561540fdae

          SHA1

          c7dbfa6d916f85278644a6076c1a56522e25b8db

          SHA256

          45551e009ebdda8368f80a41bd84b4e94561a555890686c326cf99ae87781fc6

          SHA512

          453b70bb7c43ee31625a96ba65e86d91a782971e1c6fa633ea53e7a86d555b1222b98ad24d490a8f6221fd48f97a48ab4ca4d281bcc3d120213e986aef8ad54f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f94ef52e6bf463c1ceea5580626eeb55

          SHA1

          10b5ad435bd363b43b72e9e3d7ac6f14018f4113

          SHA256

          7f2879cd144dea11a15417febbba705aa6552bed98e479400999f5f79a817c74

          SHA512

          591172e15f320ba8a66043107da04ec4882443a8dd6661d58642fd30bc8d5ff7ebbc6c9001c5f80717700ed67259776ebc268ab18b82918889709c4b99d81af5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          511fe147f0733cffcbc81acbeec86c75

          SHA1

          a47d1051349cb51a4575abd4e14725ef37e10fb0

          SHA256

          74c2e77bf25d6b12506a420b60a1104a3225c09396d05a8158e3ab83440eb93a

          SHA512

          f6d4a200a82e94c244e064a9e604abe7ed688c57488e6c25550c0e6c4fae0a773aa52e5072ffa699a1d6793eb84bf5f6b64829888f317d0edb4121d435086792

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          46ac166468775928914c0fbfbe70563b

          SHA1

          0ee0c0d93bec1678abb84b5972629d2a215363a4

          SHA256

          74776b1378aff0cbd09d2edde4ac20ad0c1332e491ba11cbcde81dbce61998ef

          SHA512

          0a996432605692431ec335ca26ecf22245ce4962793912fe046f6d32f9f414dccc4e17f040766bb571c4b8ee0669c759723bcdcf566e9680bb5395df76b5ba1d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1b7ed8e7060f62d3743e4cea6b1781cb

          SHA1

          964f835d43c36d1b8765eab25366c5174afd0b72

          SHA256

          9f6dff7f52e9fe0f371dd334bab961771b102e7dc0efb367cd1e8a6fcb2de5f6

          SHA512

          fd748680f1b98d9ca6cb9564ba0ff57f3154523b68ebdfc9983ecba65e0c6753a5261c1370555114d203cf6ca00577dcfa823c8acb51619be6a131e2b0b435b4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4bb63abda5be3dc6d8322cfb33382988

          SHA1

          9f2021c6ba96b8f635c7ccde197b15ae448846a3

          SHA256

          d30035c280e98bc9274d7d773984c1f38dce1d27a340b3a5c7503cdd55a83477

          SHA512

          350e2c9317a02e12ffb4dfba88fd7110d270eeb9813f9ac021f0fb04009753d65f01b24c587060ad885b408802bf088eaea0faf302f74f2804c3f7da314861f2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          701948c5902e763c8e99131ced7e4b9d

          SHA1

          ec304378a69e71f8f32632b5bfd2cc12f88e0b1b

          SHA256

          25fc43b041820c114114b030caf23f61cdd5f5dddef8d9ba48f6723b37fb7e8a

          SHA512

          4f3ae46ce11cfedeb5495e12b119386636b803fc49d47c60f96a6be1162f260e1d8c194312e9bc206821d8be22352612855ef7a4fb845c8f1ad102d9418fd50c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          83c4c8f7d514564f0542ce5186c9db97

          SHA1

          55832892ec494b6999cb0fef3981b11d2f4824d0

          SHA256

          acdceeacfe503672da774ae8adececf0893757f4d8af88f082bce8b95bdb5811

          SHA512

          69d1ddf86426905ff6a4b9a4da05b2da1391bf7ab6304270902e03757bf905f3ae001dcae607a26fccd6435b4e8df427572f243bd83b34be5cdb026f9fae37e0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          158bf1e11c2222ad992609b27e1bb867

          SHA1

          ba0064d63f79cb0537091666b98f34fb9583c0b1

          SHA256

          5e1abcc479036b65a1e8b56fe33eef146931df6419d6039b8758a68268a26309

          SHA512

          d6f8b8a1279cfe24b8172c53a2deced4f2e96e21602da365df7d1d86e23154543eed9c07895f12ef698fc76a959cf3581e5b83399000a96dbcba0e83c7aa2aff

        • C:\Users\Admin\AppData\Local\Temp\Cab24C3.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar266F.tmp

          Filesize

          175KB

          MD5

          dd73cead4b93366cf3465c8cd32e2796

          SHA1

          74546226dfe9ceb8184651e920d1dbfb432b314e

          SHA256

          a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

          SHA512

          ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63