Analysis

  • max time kernel
    121s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15-03-2024 10:15

General

  • Target

    cb25925e395056e745737e80120d988d.html

  • Size

    18KB

  • MD5

    cb25925e395056e745737e80120d988d

  • SHA1

    27959424f4b6fe599311f6b78ef021da4fc745c6

  • SHA256

    a21e2e8eab1cc40ce4adfd4dfeca7d77a45d9ee7d4d2553c61db00041bd3a4bf

  • SHA512

    fb7c90ed4300858f1d50a6f09f27de8c0bb61d0b9e728092e5188835ff0de5f3256089e07a1d5ad6fbcab002b14d293559567d46016cafefbad7e766e979c40e

  • SSDEEP

    192:YO0qeN/EXl98A6CfbvFnxJrVMXTkUaaqptgpTzbOF9TUnCtctCGbOF9TUnCtctCZ:FXlqATq6F9TUCmkF9TUCmI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cb25925e395056e745737e80120d988d.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2892

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c933f4ee534409ca74b5a13ec91a3ddd

    SHA1

    d4b4f7dc814150f411f6583d3fe9ddcc78dd44e7

    SHA256

    2888a8d86333c264ffa3f2033fbea5012e3a39c441f9cf37beb0e5faa5bc1ac8

    SHA512

    58558f4cf96557b3c63481579a3f1fbf6f75373d21fb8e6e8fe86eb4862c771fa3894572c88777c50dea27c5cfd7b7db80b48e50549ac36c3899a7dea4ff6227

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d98747f48712857a9ccf733476c8e9b0

    SHA1

    1bba975fbc2fc3f02a3ff64c898f26604e1366c6

    SHA256

    b32b9f924a0f766476d5487451c24dd40422bdc3866c18ba4737d20f059ac842

    SHA512

    9cf28c0bddea24bbb9148d9c762fa173f26f4ac2013c0e0edf7033f6911cbbc819c44e3de2042b52929447293ff2417892d0de5d2fe90b2179a4eea638e2e70a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03752a6143344600cfcde2da51a0bc65

    SHA1

    a1f5492d9991f48989a38c8d2a0279c6d4e0a8e8

    SHA256

    2e7f652da8c5d75ff11f3bbaf29f44287b4205c412d3e290a6328c953994aed2

    SHA512

    742337bfe1fea1005d385fae22a3e05d493f69a148ce35c91d5297bc299fc179167300be87accd1c786a337fa620b490095d8d050302544a03819d1eee201e02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67932896d0ac8ee6ba09bae4dd686957

    SHA1

    9f0b2bc86cd46c48149b05d23ecfc13c43df329e

    SHA256

    25a2d1745b03db07a27c3e1544f3f8addb4fb9790efb0d26f2eef8dc8b231bb7

    SHA512

    998b541bc502eb984d20a7f891ee146ed1d9ee124a5d224b3d5d779ed4f0691e86c432067492cbbb60efbcbbd738c3347d4e0472f7fde40d6c710772fbbf7003

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9707075a4774f1f46a4ce17bfb3f0cd

    SHA1

    1ffb348202097a1693b368c6306c23392b525d11

    SHA256

    e60f01c4688ae1fc28ab12050e9e8d64bed842904cd4cb6132223180ff61a39b

    SHA512

    14f910e97dd2d7d75e7bc35a35e85ca36ae192f302409bdc7e60154d432bd7e0572577a242611d6262025dffcc6a6fa835b1fdb2e9eb9be81e50f4478a716df9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4efc515373bf9adaa6cf1a80c1fdf722

    SHA1

    1f53742dbaceb551731dc7950c85a3bddb39c386

    SHA256

    6a69860ec8ffd2d07dc4462d394ee88a648bfe527aaa0fc8dccfbb844921b89a

    SHA512

    5a5ad7d1a4e101c1bd9ae91aa4ed4ee5169d14d01d639a0003673674c328de540fa728f9ab95994728814722e4b39bd167a98c431d121503475cdd9edc56a89e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0273bbb616255709c513c2113c6e896e

    SHA1

    03dc7ed14ead0f0d07f202032379966a7c154e9f

    SHA256

    fc80cf988b94e2d74e83a61cd969df14059108ab0c9a9f8bb6d6c2fc16673fb6

    SHA512

    f15bea081e9f9cd68694a1392ccdb83f12a5a33c074295dc466c13e265f220018652e1c181a4e4ace965a4613aa90c641c9f2e9395d5563bab006d26be98929b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4d0f859587a5062d1efe4469238bcc3

    SHA1

    8434c52b243ec996684e0d1ab7e4010cab4d5305

    SHA256

    ca3ec762b096523503e619239a8138489cff226dcabc5b771bc3cf204804dbba

    SHA512

    bb6eaba68b2d23e8ae7dfbe1eec07a8314b1611729dd3f6a903b030aecfe9617d55dcc4dec3b745e7e8c1c87c76e2a13480d770e2a91e78cb4e9936ec295c280

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    864ebbf65f99379e6f84dd24fc5a4da3

    SHA1

    d05ecffb9ba1ee59b45456101cb3709a14540c39

    SHA256

    9f2703e75fb9afcea1dd8a08a842fcc06ce0ed414e78e27aa49c60e6c356b83f

    SHA512

    5f8814be06bad194f31710201de175e5abd07da6973316f189cf027cb0e6426146fa37886f83902e5e2bbcf3067121d6b97cb43ab4254dd7ca9a355014f2aef4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94e7bd55fc80db5fe71af597c3ed3c1b

    SHA1

    688872b9aee5d44ce99e941b427b55e3b1c59eea

    SHA256

    c2d3662ee8b8a070716d55aa65617f17d846f3588454e77a43176c9ea519d348

    SHA512

    572eba0ba02daca625c58bb00dbfa7cef97633aa4761e108e832333119471d9f8cce01813a31b95fd2130a7b79c9bb0dda4d070f0550088d132f0ae33ef345f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    016a23f2063e525a450f17d0be3f2aff

    SHA1

    e17f1314e0c7fe8cb4665c31d5f22c4577c13beb

    SHA256

    3554c45cbd3ec7f1321b6d6b6dcd17c371adff09140d5eba126151a198b54a1e

    SHA512

    9e19440c0ae88e2d36b331578232943bb4c48a58c00e061e84ccd12e33740d7706c2d2cfe01cd71db1597a16bf0c5b97cf22743826363c1e528b5654f55f41ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fa35bf1a1f9fdf437da64983819ab0f

    SHA1

    c6666bffe64927a5d4214dfb39d1521f53a7b78f

    SHA256

    efbdd9229b75e58d645ffe9d68f1db73205424c5d9360053ac83c8a96efb2679

    SHA512

    97419933191e6b8a27b0ddbf2ac55ea6d1b27dff6589ce95331f4cfc160c370bbd350daa4a285b524cf49969ce5148a276a199efc20ca36ca124df9b0c6f636a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0225c3dfa9ca1fc22e60fd449a711e7

    SHA1

    bc25b80420c1286a300fe8d14084ddd4b311bec0

    SHA256

    cd3ec05fd4b414b7d88c5ce3fa867cdb92468ca7f295ec13036a6e0dafeb6920

    SHA512

    b5af6ab2b6fbb5ab775979cb13befc8638977107a7c58324f3a91e0b16cc89399db710cb3b2ba1d05ba6086ad245d3a77361b05364685d7e9bcf3581873fb39f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3431357f9f55ef2c13e17a330d54acd2

    SHA1

    4154dc566c0a751d0e537e6e684827b6928b224b

    SHA256

    7e3e78f62c65e332ee888b15bc73ff26e9b6caf5f44b400a455458e28629e8f0

    SHA512

    b3c58e058e425d1d6226ae1ac979f518f15e0327b4b414b749c081af5a459c42e5aa90e067c269287742ad5382f05aa45d2042698e43fdd092dcf190832e7343

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbac302d2f5407ecdabb98b48cd749d7

    SHA1

    1c75d12bf5d1fc3a12e546a97d57caab3a88d302

    SHA256

    39baf9bc0fbaa7ca4a441c163b13ac13b5a505ac4615359f5f2a5322d40c7077

    SHA512

    b8639f48d04a85bc1e6bbf54811aa5e633340e674c0b6a73e97d691b1b09c661b1f05d2f9fb128964e70e2b3be8ca40b4ffec587d8dbfb8d19a55bffddc9acfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74691091e67cd798893a608521c72408

    SHA1

    045aebc64ab87af82d1dfed12f84f2eef0cd0387

    SHA256

    9d8276cf330ef877b77a5e803d3c309e664264858e14e5f0119b47c5f494073f

    SHA512

    c078f78ec51712a97381163dc517d1fa140147f37c8acd7012fde28408e3dc991a1d745394048ee9f01837a775abef7723843a230c7ca91a07ad2161525607f1

  • C:\Users\Admin\AppData\Local\Temp\Tar4E86.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63