Analysis

  • max time kernel
    144s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    15/03/2024, 18:08

General

  • Target

    cc13f986565b34d3473c0ffefac0e83a.html

  • Size

    57KB

  • MD5

    cc13f986565b34d3473c0ffefac0e83a

  • SHA1

    04b5a0d25240580644cb2ea8dd246a6811d088d4

  • SHA256

    e5edd4dd80ec28f97f3747eb1328581b0e0d42a147459991728708de8c9cf087

  • SHA512

    ad65362add5c8a1d5dd7aee3c12bb8d7600bf48cca9ed74b58a0b2b34870b05d4623a92d814cba1395da15b3392b255f8c525f9fc861bc2bc6e8870b13f15889

  • SSDEEP

    1536:gQZBCCOdo0IxCKZCKfAf0f5fiflfAfkfKfEfgfJfJfhfcfBfsftfDfufqfmfLfD0:gk2y0IxvI8hqtYcCMohRZ0J01rWiejr0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cc13f986565b34d3473c0ffefac0e83a.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2368
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2368 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2520

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    e248e50d421013ff5283d401bb223249

    SHA1

    a71e875e1fd43012cd0f55afc64b9d59a4eb9215

    SHA256

    33a1c7efdde8bafad24971a992cd1809723bd5be941cb36533f2105437dc855c

    SHA512

    b273e8e209f4a352152005b9148688a4b79703ad0ade676cb6740692d74f7dacbcfc67f058dd70db0d3ff50a087cc0513ef7895d216366d9f97e65d95685b7a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a25a17f1a36bb1fc8eb5c0f6d11b0e09

    SHA1

    c87624bce0da318da1ac079f4adb13accc3fd379

    SHA256

    f9b77158bc1eb8c8c4a8f2f009654af60cbeb6a8a6ccc135544c84c832f9cb8b

    SHA512

    bb4b6055b6de312915cbe3ed7201f73b6000c36817cabd7c503f64e138c4922f81b817d1c7bd2ee1cc254d73959be2c030a51cf95ca6b2008662e25de7c46ec2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8555fdda5a084d79a59e3982116fcf4a

    SHA1

    fb76cf4c039927fd969ff782edaa345586290ef1

    SHA256

    d5639bd82054c5dee48e01b8f87a2c2707f57ede632f0d2d5218579cbe269742

    SHA512

    a82624d3bda0f6b89436121dcbdb0ee07935c21e773d03a4643ae2acde18f2b16673f8a75bf117d1f3ed81bca8b3bac3779044844c88abc0bf2b20c39f2e22f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    adba46bdfa9263917c8be1b5b4db6cc6

    SHA1

    a8afad97082211fa5c046e1dd7cd54a50d527619

    SHA256

    4ae061034514126ce2084f1ce8d5908fdb59c4465e940fb4f1af42d549aa8235

    SHA512

    cb326d045954f81ed14f949a7dffb4394e27b29fad4846250a45fa13bd4aece8bfbe7132351ddaf7e867db39e8484fc5703f6ae825c2387ac400d4f63e9c0a6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ecbd68e1a86e14349f9746f91fc830b

    SHA1

    a33abea2921f12087ffc5ab6939dd1337268ba16

    SHA256

    bac6c29d008e3256c4ecb15f487a9d5a834dd9269947f68e6fafea6381865ee8

    SHA512

    a6d059df0b3bdd4a55788fcc14d671734b3926232077facb8e92d2cdb62c62901cb6e01c20c7842f9bcfedde520a080f2df9fa51fbc058b8e8a358e72657046f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b84518a601cd189f11a01aa54c487552

    SHA1

    495103270d63cfa3a697fdc5ccb7231dcb69403a

    SHA256

    2d938abee866b356a47e7a1ece54531e0cd63f0fa2d7d8b665aaf56bdd1ff135

    SHA512

    19c0b727c05810d03b93b0827cb63d5b77cce690c949c8a09110c76a8a7f94c42d8f2c51b067bc2edf0005369db21b0a5d369cc5ce65393981c502da4870ab4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c379ae18e1c00a619de29accdfc24425

    SHA1

    aee2e51e8c907ac93b4c10db7cf0c758c2dff32a

    SHA256

    3026eb52cf29ae2c1d0d32f9818623e0049a3a8f7d64d45c638d7b731135570d

    SHA512

    cbfb22c0d94c3191060b96d18e36bdd6466b2ec1f316c4582eb272a625c8a040a88daf8aed52468192ad92e5adf4941185d1c0e5de13cf81405689d685a98edf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a682e2e3cb6cb824b1969fcc7f0cf36f

    SHA1

    73143d57b778a2ab1a46703c06e58dcb238e2f43

    SHA256

    ea8ac6b219320376500887b67dab520f0b6b4d7129ccdc6cd63bc30da6c0899a

    SHA512

    aa2ce900e299e10325379caea479bc5d23a48a94de4ce57a2a9e56463e7e7fa2a03dca0f7f0a6ef28184bbd823668b685455d6f2dcbb7ca00fa97ba04ac70d4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7c5ff7a4b6e9fcba67f87843951e0d1

    SHA1

    46278c8b8f7cbdd94986ba5452bf3815443e1b98

    SHA256

    bc8a2517966675527932b1f457dc33fc925b23c3cff866427173bfb877a1b31b

    SHA512

    a974499de4f7c76cca9008986289a23162bd4d4c294311bbc56a1f43b35fb1ea97f7441d48ca40ea434c474f41b32bc9e5f4494615e03ec30f2aa38d0eb456fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef2be8b38dd007e71693d92e3cf92047

    SHA1

    ef3a5a601dbedc11b9b577642cb0adec6a24c3d8

    SHA256

    12b6333ab0576c54dc7713a71dc0498dace79d67af71e456f3dea9c0b6c2eddd

    SHA512

    4d28069454ab2b3a6e48be2616b6b846c79a7f3624e068ab67179aa148b5bc601a4b14c2787992b0378ae1614d2b8b5dae63cd29047e724dd7dc0b43667a791b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1bc196ae6a0952878882793cc42570d

    SHA1

    739d93b04d516918aa4a97b1b27d425af97a4f09

    SHA256

    55d0d779b78fd3f66ad562d7bcd8c40410272181ce86658fb388d91561e12fbc

    SHA512

    a4d7ad7650206fc9ce73f6d954ce04ee307fee3babda239af21669bed2199e80e0fa386e7321aba6ce00bf041fa657c35db8d2c674cc943c775e311fb226bfa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f05a8a3c1dbe8391edcd43d335a2399

    SHA1

    e2218b360c8bd058f2850470898bf27a47fa9f0a

    SHA256

    da0b3b6920d623b55f5d9ecd67cdbb9f0d7bd56b72f671b07d1a9db5f56498b2

    SHA512

    fb0fb223870e94d7ad120e4d63fbe4a1501017006ca7ed439478c00419803a5f2aff750a56ddff05fa733e19150199106cbb0db870aa00fd44d8420b8ea86b4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2923abac1507992877949ae75f74a5b

    SHA1

    92fb8ce1eb1ba275726046c2783626d30e53a517

    SHA256

    d42d203b6075dbd2d1eb9961a9ef48be3f4ea211d9167c298ef44814ebe35c4f

    SHA512

    f017276fde51403299518f9f03c0a1338865a90c1f439bfab71d77eb22619843b43dba8a8acd46096769b662f6dd44f66df154a78c6f1fc0cc397a8bc9448fb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    197530d986c4931b667c95608fe8d0ce

    SHA1

    58a820cc2fd2b01dd5882f9d70552b2183f6c1b0

    SHA256

    26f14920f0c8259a156ea4ad1d169d1837e4c1edbf10617dc3388c0d31f36a02

    SHA512

    d270fa365c981c993e925d2d5f066971e5613c0c58a8d459556df31d6d619cbfecfde2cc0f2df9c2637d87216fdea0e3d746dd7c89acfc3a308b5541d7790f3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b61127fd1e817191fe6daf5d565132c

    SHA1

    e9ff5a68864096457ea51b0966a8212ee864672d

    SHA256

    16978a2d7b3a43755a0d1bb9e87f4439e29bccfd68cffeac9a31e4a5dff09459

    SHA512

    cfee566f5c889c3c638a816908bcede5228cba5c24eef73a13cf958f155f3fdc727bf637e19e3d86f8640875fed56d50f0a1232ad8259037ad96471dbcc02c5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23395ed50bed82945e6f51fde94259ad

    SHA1

    e36734e089bec1fbd0a5b09d6cad22a9b31c7624

    SHA256

    1a6d422cfaccfdd790c4630f8d340cfb636fd6491bcc6c59b8909a8e81384247

    SHA512

    3c065df57f0144030abba4d423c3ef44ad0aa5aa8f9cbaf8e21f0f3081c99f3764bd3c2447f4741080eedc1675f1ee62dacdf45b035cb6e7372fe23f111b598f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e5da5cfdcd744116d153a91d349966a

    SHA1

    1cdefc949a011b310e6cb6c2c0970a2027c947d5

    SHA256

    b423b577f6a2547291b694770168a907631df97c6fc93733eb479450d31bb27f

    SHA512

    c1aecd3735afea29125b13451d99c5cdb83cbc7e18b1dd05860080c12633ee81f404ede1386929d8eb99792f113bc77a3380d313533898f2732c455ae8f32117

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    271f084cb820ec708a4e91d13f4f6625

    SHA1

    6b7827e16a2dbdadbc57a33689f070c9d202ee85

    SHA256

    ca703df4c8fe0a1c2c60e0d03571a9c71c6410bb882421e1884ddcca24bb71dc

    SHA512

    b5e34f886c51efae69f77b83401298f7ca0e26a036be900ec168a9070fa101cd25b548ef444051776bca96ace354dd457b76b4a1d379850773721bebf5b5413b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar30C6.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63