Analysis

  • max time kernel
    135s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/03/2024, 11:45

General

  • Target

    c88922ba75cca3c35d57161a056c8bf2.html

  • Size

    3.5MB

  • MD5

    c88922ba75cca3c35d57161a056c8bf2

  • SHA1

    b9e641b4e2af73197dbb4efaf0a453e4124af148

  • SHA256

    86ca0ac9d7c8a27e796ceaed268c336a12a0fadff54fa6d4e7e4036bfd1a10ba

  • SHA512

    9b56fec415a4d9eb4ff6d5e46002de15f169562047548698cb14f1ebd2139d9fd9c93a135f26e68bbad1c53c6ce83cf9d9e4736d2c4112d7b581f0674a699ad8

  • SSDEEP

    12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NAj:jvQjte4tT62j

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c88922ba75cca3c35d57161a056c8bf2.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2112
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2112 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2204

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28afee9c261a2d4b80d052ad152982ae

    SHA1

    a6ef5177e13655d2833090b7582685e13f245485

    SHA256

    fa74b25c39da801b792aad4c0dce7bb46c6262f3e6ece15302688121d87a1d6a

    SHA512

    22a99029104e4bcb938c88cdbcd42909ac334e5d453772c1e41a312c6288741e371a02eb5f18b2998ae0591be0cbe4c43be00147266d07238beeedd2de8cc856

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f909c1936d56354938098a6dfa23dd1

    SHA1

    47ab0eb24b6d5f66505bb713862fdcb6278ec51e

    SHA256

    d71c1611ebdf36ca35ecf6385a58ec3bd80fe44dab274ac302c950be6be493f0

    SHA512

    4e6c4ae40e168e59b8d34dfb1fdfc0b92ab1e2f865c48573f860d686fffcb2aef624f9c79909582fe7ddaa9eddce3d9674c73701760522a14f2e54c04b7063d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3807adf60ce7080f14285078415d725

    SHA1

    09b0e7f3c89efbc5d0ac0cd7f9dcaeeaf77bd5ea

    SHA256

    12df1c2e336c9da8a13b9830de17668c62e246e0402ce5501ee2d02743d54405

    SHA512

    217d65c13ebd5c9fef2cb55a5bfa7daefed67c714efd680bd800aa9f04551af4948d47cee7a3a10637e10571f9f7ceeba658c49eebe3f8a2c54ea3d549803fcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd3dc0acb6ce27574f89652e3c3fe296

    SHA1

    6c42edc0c2eff174f2e0cd27505411e51809b441

    SHA256

    fe2ff405d7e837045e47235614c0bc4d319d3a63f19666f5f882bfc42aa0231d

    SHA512

    034ee973bb137436ec409d8121af3a53d7d23eadee2918340e3ee139e00c3fdd36faaa74166f9afe292695a3d89ffa3d40fa0beb7178a4c19c828f7e7706f2c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ea6ca6eb0c8830c2b506568cd0b33de

    SHA1

    b8aa4b0862dc6ffe657c6326e0ac182021f198c4

    SHA256

    fb94162498fe37de49440852ce6555b1bc692a1c8a4d630d466e9e86e93f86e0

    SHA512

    e050bcd344409438e15e06b86445118756e44ecda2392fb549046be551656d82cfc8b729049192951eb5d2361b4c1dcf7265c77fcbbf60aff954985fc219c87e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af0e8eea598b50fb7101306e9dd49131

    SHA1

    b1c58fc6e56097cc0d6ee32a10ea73140366b7d5

    SHA256

    ca5019260a37e870077a28706e2f7716c4d73432b0368d8037a65da4a8db2b13

    SHA512

    edb94096b6886d6c2bd560ebc9bbba228b069698038bc01eacf18840fcba15498c6b3a8804e0d21e856aaa3df211a7ee8fa5750590f1a85c154f903339e1150f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41438ba6d042e7279d65a1e93ecde633

    SHA1

    0ddcf7b06f759219d178d08bdf004e6da8c7c94c

    SHA256

    cef2d62374865e8f8ce2ac10f446d8f2b10d12b4fd0bd0072726fedb606c1ba5

    SHA512

    95b0208a394bcea584329ac7ed81a8317c03aef29fa1d6bffa2ca2e9eab868db26a3dac7e8eace3f3a5742e1654f25c6fb5a81c300d6efe333a648160763a896

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0c22f79d773bb3890b9633e109e605f

    SHA1

    8936d9334d49d884afa205d24792595efb7362bf

    SHA256

    9cd38171c203938f2b61c41d370e8a18c64df5885effd5bc6669c34379102987

    SHA512

    221784f699d68de863ad2218e4a61a27eead59573c06ee98aabe997a01510c1cb897f9ec516be53d732bbab157b682a20776db649f8f99c845ca95c09e0a2f29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c634bd5114371cd7ba7995584b89b50d

    SHA1

    d2dd0ab7c74d244b91e2ac769b414e7d66e88705

    SHA256

    1208ee557294ef7cf62a89c7ea7f9a111e355c25cd0d79fd67b83d34f3e57475

    SHA512

    90c173237fa98908580794306742730f20d761e251785a15aa9adc42910a93b41d0c6764af6a4205534210f8462c3f88c8fa07b57aa76bf08c2270b116d2e416

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd6f61db3c508d97e7f0d6a980b13778

    SHA1

    2708be52e074c4dbb31dec0cfcebfc78b0136242

    SHA256

    285240163a382795f442074122a9be81e1abb2691ceac5892305aaff2323e8bc

    SHA512

    fbb88cba149da7754a719aebb004f63db25b6579e33665a2827ef7e6942ade560a1f3715e4d82e29bad776b9473cb818649b838f99512efbba06d468a19204fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f07dcb35e332ed11f3ea9c856385441

    SHA1

    707bc5bada87a106bbe00ad0c3ed627eb1f3e946

    SHA256

    5d650434c302b44cc2ce7354e107d32b60c095b09100b1856ca5faba2e359de3

    SHA512

    0f5a8868ced170b9cbaf103e1108816d356d8ecfede69254ca5709cb1b8cc48974f274a02f11673a548aab522ba7a86c15849a6feacc9924e87916bf0aaffc31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61350ffc478a06f920058ea759443dc1

    SHA1

    b52bb38155b9693c04d1b184fdddf813e6c5cae1

    SHA256

    24c11c03b081c9f904f0b467f0c5689181c0cab3497f06213128ee86f5a3282a

    SHA512

    e6fe0a098352046a61809e766c8e3430342c1520f9884354209a86b47b43117617e424e23f97dc31710472a06670115347894dd8fce44783bdc9a5706f194c4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    106d5095d668e430bfc3f98f0fb49ad7

    SHA1

    e16003f9db8ccff7dec2ee957508f65a0a82fc54

    SHA256

    fc8613febd4965dbea15bef2fcddbaf7693796a0cd0db6d52fbfc5d5dd411d1e

    SHA512

    301863a0441cdf4f13b2dd79fb74f5bd841aefb954543c6082338e2d453cd1829295b0dd96ec62453a24b0798538cf56ae953a0b276eb29d7cde592fd40569af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0feb3b3bac1394037f602302a5026b0

    SHA1

    269307dd17c27a69e4e39ad665138858f0f00dc8

    SHA256

    0b69b14cb25a265ccbda0f72cc2a66f599b2907c20155a8d66ca72c82f47c870

    SHA512

    3520b604025bc898f934c222bc225ddfff371cabd82c050a4ef2296b1189f793ecefc25d938c05aa00fce86a9b7b5bf7b7363c90a0e9853937f03d83dc4b7f60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c671f388e541f972b45c2c63edfdd7b6

    SHA1

    469783e709c657fb9b7762b23ad59d8b0084e53e

    SHA256

    77fbe8f2119edfee767c35ac9e92273e72928dd6735f341f3b5e6e0f6355d692

    SHA512

    c0306a11b3c3c64c73d38075242fb097924646785b3d39a6e333615ad72cb6414a4f1c655c18e4ceefb341c7e1b7849dd4d2432d942dc2d5b1500e75afc3c40f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5705de09d39b39a267acc1a4d18a9973

    SHA1

    abb4736fe32635bb474f5ce286b917f2d65c97a6

    SHA256

    deb098c12cd25b3345ae40e36f9d297c9e70938e0cf37a3623f3d573920ca0cd

    SHA512

    c7d5314dd2934d1132ba06e968b4a65ba0a195364c30232aac774eafd8772c4b771396414d74aa493f0e8e5846d2a35a5968bd5359dd2c1d8f7e3ff170903234

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b5d702ee4eb651553f42b4db4596504

    SHA1

    402d52b6fb90bdfcd624056aa7d27ee209521ece

    SHA256

    90a928ac03c3d7704f3dc6ecf48fef6e85faa83b0aa2efc67073609443428d0b

    SHA512

    fb85c4a95b8c3bb7add0b54c8073ebafc9408e2fe72134ab637455d7c3bd2253d68d9b9f081897960e51b0e7420034c62b7295b258ceb8d85ee03bd26e02c752

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa499eca83afb8f542c694e017b647ea

    SHA1

    e276135bd517317ba5aeaf9116afd4a8ef334bda

    SHA256

    8be4465a561c3490b5542f91630aba781386a8693235bc1bdda04dd4dd9792c2

    SHA512

    e290bbb683beb946094a4441de4fb458208fb2568aecceb4bb2e42efe89a724fe85ab7d436bf3fae8d9ec1bfd978af72817ae6b1b38e0925cdce95bde8575c48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1454358778acb49898c77126a871e048

    SHA1

    499015410dc4d871791693dceb50adfb9af6059f

    SHA256

    ce50d34572f41b860a0a134363e071ddebc0b7bfdaab01fcb73f1af0af0d1c0b

    SHA512

    df91dbc781e722d5d47d9e2fd8ad8fd498cb0a1e85efcc463df906ae8c30daf59698748f1078dc76b09a0e5d0e7e01c6cbefe082e9585dc1bf74dbf659808408

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b6322fc309493c5923d6150a475c476

    SHA1

    d05d027314ea2eeb2733d96140c56db17f99e778

    SHA256

    ff37dc739f2041df9954b7d21e64fd634d8d59a9ae9db0f99cda2f8644b352a0

    SHA512

    756021db81cf5f601361d23e1b75cc826d1acdd7f71aeab3aad71dc5adcf3e171850535dd8d5504ff931a48b9f2af179a5d6ebfe237d27f7a518d98e9ee20233

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6efe9217b0dd8059e3e01828bbf23bc1

    SHA1

    86ee7b2a77a6499f19ce51cb6ddf887dec8e4ad1

    SHA256

    3e51777dacce81b6ae2563c91d2343426f252dcaf445bd19e585d75ddd73af3f

    SHA512

    589422c124468b926a5b30b5455e39dcf4addb069236610f94e5518fe239a8d778e851caf025f9681f9c887c628cdd5d8e41cb978f9b3b1f422a1d80649ae211

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78fc8a46a462da971dce94d4dad2ce00

    SHA1

    b49358bfc55e9209944baeea28d23b1b041682d0

    SHA256

    0ff1dab76cad7b0267a4c31f93039a3a3d88756bd7dcb4a1c685991f555b0b20

    SHA512

    b3f8c315eb4c34a4a6bac1c5456eea2d62fce4732e1b1c138a2c383e7ab7f0cc00665789ed137cab495f7b37ffb5ed7aed80c7d37e246dc1cc1a0fa9680a673d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60df6c347f9009e9ee562ebf810123c1

    SHA1

    8c3a49b5f4ef75afbd700c2bb9b3529ed3678707

    SHA256

    287340b447f1391aa61a99a4324ae74dab55f60a7ec4b4fac5246c9e963fe006

    SHA512

    55b9c25d5a087b0711c05b49bcc8905f7f3326fea9c20e2bff5efd6a725c2cc1f58c0dbb05197aac7a817d9fe180b8f83e85c37b7121257c5dc31339b8a6ce60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    932a4a385ef67d27292b24f4cd846f96

    SHA1

    efaff25ebfaf2377ebf8179c4e38bbc9bb23ed88

    SHA256

    b180fa290bdc71941e93ee2dea9749716c61d192c013fd780cbeaf3b13c08fcb

    SHA512

    ae9246422d397c766fddd08e4417eae467d57dec97d5bf7fcfc7eb02c942ac4ee719edc182cf66237ece7ba2346e48e3475e995fb33c63aa1562313043bcf454

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0fcf9a9b8ce867cc626ea9d445a81dd8

    SHA1

    eb679d7d0df97fca4058ed3000a341870c12c788

    SHA256

    1ca11d7fb470e0544b5eb904193212d41e0931f14443a28c41ac24a207bf5602

    SHA512

    401b2ed5a55378bbdf54d4c28a22ea581926c2720d0e6cde07257c182ebad81879a39cf9bdb8fab55016c4f7b42482dd54d89ed2acaf9deb8b29a88dc5cdaa1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    675ad7b0761495cbb446d498f347ec9b

    SHA1

    7b619762b6fe8847d816966888cf0a90e4c48066

    SHA256

    0d50e2b72a892e76a57cacead682e4fc7ee2411c8357cd08682af1f9ca6497ed

    SHA512

    89f07969fb65b485b12433a7a36d8fd641328015627873b63d66a9f1d81c1e6ca7106f1901bcbcc4798712499b09ca3a19bc086de17d346446cd8fa59cab0b72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14ef16e52d4fe1c82073c5577f92455a

    SHA1

    e6e1890add32c2e0822341546b82b5bf5463850b

    SHA256

    b800fa1354e83b89d937bbe0f3b0b607d7aaa51c1d9de7f315ff38de16e8028c

    SHA512

    9f92041299258b66a44bef5d8218d49902d225bf14e094277521ec643aaa417ed70d14f8cb109f33885897c83297e4dcb7ace31e032651862fbed96210253dd8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NPBB818\beacon.min[1].js

    Filesize

    19KB

    MD5

    dd1d068fdb5fe90b6c05a5b3940e088c

    SHA1

    0d96f9df8772633a9df4c81cf323a4ef8998ba59

    SHA256

    6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

    SHA512

    7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B1014REI\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EDQW9R5V\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab1CF5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1E63.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63