Analysis

  • max time kernel
    121s
  • max time network
    193s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14-03-2024 08:27

General

  • Target

    c828b142a06544e5c97695a655b1282d.html

  • Size

    3.5MB

  • MD5

    c828b142a06544e5c97695a655b1282d

  • SHA1

    ea8fc48f9af0bb826b1173c089e57d535c0b1def

  • SHA256

    ae47cc7552f6ba13042e60a2327ba46d930ede4bb14350b5fd8650e4cfbd63c5

  • SHA512

    69fb1373197081de3bdd40b14ff2d5635427b72d52919c75bb63e9f528f78e990a6ed5a6a92c8e5843336c59b7d63fd9bda04971558c2e12f8b3a043c5cc073a

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NNv:jvQjte4tT6Tv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c828b142a06544e5c97695a655b1282d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2464
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2464 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2600

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a646f4c254cd8e6620aaf9932bc1825e

    SHA1

    920c19b67841770769a36d7c6604f0212f23ed43

    SHA256

    41efb72c3c070e58d01362c67dae276542d67d0d7168391f5fab716d1ec3bdc3

    SHA512

    cb4aae1443da5e76eee9bed45848478fc488dfbd0b1e0258becae544cc57ef5390e8704b78f221db9ba931f4a701b083e9bf35e9b9c441e94c99e1430918041e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e034520b315566bf623d7d44f28d44b

    SHA1

    8edaf7bf6ce3212690b937892ecbb7512381eff3

    SHA256

    47037c5f24fe8ac59f3c0c78c56a4eaa44b1b0a1f70432e03449889905e7ab02

    SHA512

    50cf0c8229bdbc1317ad075a20ddb02d721d1002ba2ecb70e320616090783e7c8cd16d8b8c95c2f65ac77896c7284511f7924ac66f37dc9f96ceafaedd7c480e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d294cbfcb3c4b9d0797408ee1c4465db

    SHA1

    2e8b64cf8e9836a879cd741b9f86d8c0a91fe8c7

    SHA256

    59162b3118a75379ade462ff5b447a0fe4146289dd8368e53f5e8270b30ae93f

    SHA512

    ef0bff19e83b981f6204c557eae0d1b12793f0e004ae5086c5cd057817ee75f26c46a7782fb67dd6a62c9519db1c7c260a8478d0babdc9d46d25ac4100ec6a26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    516399d0e1f9c9d82030d2117be5b6bf

    SHA1

    fa0a557665eeeacc959ff97779971e9bf10200c4

    SHA256

    8a883e12770885dbe07a544cd3c18592af9ce662b5622c2df9e78dd55c199f57

    SHA512

    d91bf5eead635ec645d547c2abad9fd88a3dd9d94e3119621a53d16bf0d56a32c4115a445f6fdd5db3f9e62903e8af330f4a3dc15af0c98819a37ab39f1afc5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0f04713209fd5ed5dba8301e1c069f4

    SHA1

    5d7596038d329839501f942c2eecfc13c726a3fd

    SHA256

    fb386478eaad4164ed8d8eec890015240f98819f5912600cb3761f21409c30e7

    SHA512

    0889441b0b1bfe777fb44ea2819d98af8a6d054711a3904726d75f3afcafeaf5f3032018f972333ca3024b3a62f9f384d5a60c30bbccb93c7618ac9fd7e46f8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    954274727d87acced006d2c461c40c89

    SHA1

    5c765dfd6d6877c0bc0b17ce0574e0942eb72c21

    SHA256

    b9e0010775bf7b93cf3ed70ce076832e1d3e7af80768edd9a8e44e67efae6ae5

    SHA512

    031047fd1a292ea27ac46c43fde582215d6c246189ea4c8e16ecd065099606f2d1a1363a0d0257e1f91ecb0e5f11d4902a54d7cb39a00bb39d5854e3b96d5390

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0758e7492ab38f664bc7a11968575d89

    SHA1

    6fb105e98d50390bfe980e1f8a22db18b87122f9

    SHA256

    045c2ac6ed42e8e261fd2722119a333b54a0495fe8e136ead781f79fce2f0c3e

    SHA512

    2bd1682542fdd0be0ddd6119a9c00fcc75c462cc0c33c21d0290c1a883afdaeee4d0ffd1d38168ee76ef7704bcdb733993814d1fac39e8bfc037a195770724e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d1c25d46ceb39f17d130fd316790aca

    SHA1

    b5ef2ae7376eb1e53bec6458d20f23809d7da95d

    SHA256

    f732f73ff904f99b7f5b7007cafef7c27f213f4e9f36233c5c15c1333dc85c34

    SHA512

    67c8ef7e90705c188071cc56fc7e244e9ab45f56244d586bdccc1d8df289587606ae82affb75c8f6cfd73a3ce1b588cd330e67834959fd7412f21566a495749c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a66acafe91ed4cc78a0dc2d7f222a1c

    SHA1

    aa810045f0e09c9f7a1329e4512f86626a7860a6

    SHA256

    6909a883619dda4e368b20fe7a0545caf8ef030caa46123eabf62f8f2815d820

    SHA512

    f669a100ddbb1bd8ffc83367ae31e4826a3773bcdbc41145501fe1cd523f5a3a5674c5232548544f32452fd64de5b2a3d5072d7790a5fafbc3768f350333929c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea8f4ba90b45e97d5290de995749859e

    SHA1

    fbb9ba9d879831cc83286b4da094637ca9342d8d

    SHA256

    27b421c944628cf21d6e5a2854342c37b97fda1b11273d0ac0b551027a92796a

    SHA512

    03ecc4f5768cc46c6b4f97eb733f604468331152e613b3558ad7c3112233e9a6199f774582c8be223265c36a6d71dafca936483f5769975b4e91d45a2b03acae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ecac7ba689ef0a2c2a99a8b4b9b99a4f

    SHA1

    189c2cf3493c17860226d6db61d4971239260702

    SHA256

    c518022449cd7d0f631f2fc2d8eb2246c973ae3cf94e6ab831c57d473f7abb6f

    SHA512

    20d40cc219e1ce9c2e0aa5a173d4666e1f9cb7f0e668f1336f9e851172fd5e30b3e95ce86f0c636d753e55439e11d016bdc237830f12e7d09eaafb2a2982e305

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd4a0a88682f218e5eb897a144b61a31

    SHA1

    fae4cba7a0c217ea64dd985464f66fdafa38dce7

    SHA256

    caf7f2de074f825314da672e5e3a4132c76b7aec6ecbe0f73f84e6142ca1ffb1

    SHA512

    821efb1d3faeb8b07524ba5941474da8fdc85b9dc223d1c8cda6e4475a65ecefa70226bd738d34648e116fca8ee6fc29c1cfa8e4b4ddb1f7ee82d88bb19fa907

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7dbc4b8f165c6d9875425b8ad24bcfc3

    SHA1

    e78797c554634f2eec8163ed221637f7ac594240

    SHA256

    12409a35ecbe8cb2c2ce301009e695a9671ae0d43481c7d45703942ee11088b9

    SHA512

    82b35bd8700e365f4ba151caafbb2a88150decfe18d4be2fc1b1558d5badbc0cecb30c0b1acacf70cd97202fd44cc38c8e3751cb91c7318b723473357f81ee47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da2c72e78fa5f4b33ed3697b48f058a8

    SHA1

    367ca7b8f1cebbd44665919081fa263e841eab39

    SHA256

    191098898e27cfb7a49c4a0d42b2a2c6f94b0148312da306a8178065e60b863f

    SHA512

    0a6a042767b4587c7e95b3f5ce365f62c7ae43d5b100ee7f7633bb08d42bcd248cc4db535965d0d58c2db09de6e03910a7357cef1dd29bc52277bb28f99ff95b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d26f073187fc791b00cae686010d100

    SHA1

    3ffc2a26dfe6ff5f3dcc070f867b30f981e619e3

    SHA256

    bb7397011f3dd67d3b454f43d1fa0d9d0355d5c9aa02a9549df36b4984c24ec9

    SHA512

    89ef1720b79317a7f5f0b4c583bdfcf2085c2ca210a8d852ae7bb195770be78dd2e345c52f362b51aa4e9602781165ccd8cc98e07081a853d629b3a296b6cd85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d37468e474ffc6d9ad2f3d9cd9a8064

    SHA1

    ef8eb97dfef394d5e45f447d484c8b3630ecfd93

    SHA256

    0cd0263ea052a994beb06bb7d30fbd701ce2bea7d2be4818e113adba14bed440

    SHA512

    6edb2148bbd19571b32e6bac7fd0f767077cf92ceab4af6965034e3fb5f642a85c7309684382b86e2d81c19fb840cf463073cfd844072d34f7a7569fbf911084

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c891eeaebd461467f6e06c74c0766349

    SHA1

    c88850a20894938698fc03f4eb2004cafa656838

    SHA256

    65a13dec8ca1c85696dbb2ac23edf44b9cbdb951322630afc45dab8b922db288

    SHA512

    24d5ab9d20e9aaa5c7df417f6cdafc03f65c298488b6256af086f32d2a21a4f33a8ad4d2006379f8a40ef6e185e2266bb50015718ac3db856889fed49068d31f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    962e425e1cbfe5fc186389d025414197

    SHA1

    6281fd6153babc3dde8c9b7756318fcad137dc71

    SHA256

    e5b7656954bfa75eaa8ddf3bc61e74a70c1d1ebfbef93ac6fffe1e715d6e17cd

    SHA512

    4de39726885c36ca7851cd2dee304bbf08b894504105186eb824bf3fce75dbfdd4a4d0a651e40d16629b35b14b8b521ed2305db06d718606fa1f881c637e7645

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b5e61d7b52b1e726762ffb2eb4aa320

    SHA1

    1d8bac03e50cc2c887b7b173adc924a16b4c170a

    SHA256

    ea606dbf820906eafb446ded92a1a4634da2d7f581d03b722398b532a31c4600

    SHA512

    9ce53ed2533bfd23e3418f7141b636d0d9224e77ccdc905f626ce92c6ee57858c5cd83aad0489d7801a9a95b7b131adc29329c27b2a3488d62902d5ac365c4d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    184c4e5e51d589b3cf0318e0579002fd

    SHA1

    cff2ed493ee271bad009d748ff740c952304aafc

    SHA256

    3a1b94b180c343751d2f203b16d058ca04a8a00d3faf25991f0f01bf2b6d2256

    SHA512

    73500b0356f88dc226d32eff694f7b74911ad346ee1e023398d49b33bd5043bfda4eff42d361c222d863055427d80a9c6a400c4d0704e1667926ac1c1dba4a06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8f152f3f0094681c441295e5bc8cca4

    SHA1

    27d05cf68398ba10efe0d0e1c5e2b485a5b4449c

    SHA256

    fd033091b26851704f27db752bd9fa633605a23bfef98adb45db9d7a4fab32be

    SHA512

    b9af2911b5ad7f3b8f8e06c4812a1d3fed6a80be3dc93d93a4da399451f325dcb9f6d07daf6f56b84eb6426af2940bc1c90cffd562951242bd593b2d520984ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f7f05591605b205db22be022e1e919e

    SHA1

    c6e53372e6c7717faadac2653e3c31d2b92010ea

    SHA256

    3211bc2d2ce1a4e959ac9ec407440c02ebce7b2edf12de4a21d8a5ba082ac1bc

    SHA512

    ce64cb4638e85171735eafdc9cc33f17ad7684b1c9415f744e952ea6dbbda66b4d3e0e36922efae62d1757af06d67da09d4233b87e90a27ed407319f526efa0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1bfdfc2180f1c9dfe2b7318dacfa971

    SHA1

    a6adfdd9c3d4b5b9fc6f10cc4239b04c2931fac6

    SHA256

    0e55babee9a2bec886e04122c7403575036b7bfd70601b3a5f8731ac7f3f586c

    SHA512

    3a98e8ff123be03060a6c3d140c965723eb2066f8ddbf240d01091f6ff37757dd274e9dfd6de8f912495f2f36d90a1441627eb499bff69d5f2cda6e0e2bb05e6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BD3NDTTD\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NXAFS242\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab2187.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2197.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar28A1.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63