Analysis

  • max time kernel
    121s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15-03-2024 18:42

General

  • Target

    cc24580c93e13e1ee43106b03dd0bcdb.html

  • Size

    53KB

  • MD5

    cc24580c93e13e1ee43106b03dd0bcdb

  • SHA1

    f3aec84f99412716610bf0ae5af34273760b195f

  • SHA256

    e18ffcace800b51cdb8ae198e54a3899f02cd2a554607420c16bbd6b10987224

  • SHA512

    d3a8db5b0305f5bbe174f1d9d7c6b0287e36b8cb43ecc733457314fce8d61a87ea0769f7961a8778e190e0be25f376485e6ef998b63794b9c3636777e9c982ee

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUkrunlY163Nj+q5VyvR0w2AzTICbbjoq/t9M/dNwIUTDmDV:CkgUiIakTqGivi+PyUkrunlY163Nj+qF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cc24580c93e13e1ee43106b03dd0bcdb.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3060
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3060 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2904

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03a5a6590d44258d50ac10ad210adae5

    SHA1

    9e4e7a9ccfe6044a5ce25c7ff8da1806a254b66a

    SHA256

    284ccbda1d24ff3992ed3f04ff6c890b642872f065025c0e762fdff36e362d52

    SHA512

    014c61bd68d70d248f399becb7ba6b3c0cf1e978dd2d62862218d7eafbe25607609c4f11b60b4c2fa2a512582fd2639bd949e34904e43cf7ef01107865d9c9fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa82999c26b66e3761ea26c663be47b9

    SHA1

    db81c6d866015c41c54220f4d1bf4656e2f44dc3

    SHA256

    d6f8bcb16d95d2b20d4e02a2f4e7ff6cb2aa7fe3aa3aadd181f54aae266315a4

    SHA512

    62a1a0f1f24d3b93e4c79e5bb0772ce02d188a62f9a9d3c491ffae59867fc3808297c3719264cf1377be92175c01a28badbce7c107fb8a83480b527d53f69a83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    702c283d30f48668c1ace73cf885c88a

    SHA1

    83588dc18d0ae8f36db08a8b3c5984fcebaed824

    SHA256

    333eb67e1938ddcef28f615c7c678e9afc1b93b29c51dac8fd378bcc7b29e724

    SHA512

    225fbc350bb9ff94a1f523b23c8f76f57622d047dc3502cde057a67b8e1c4ff6dad4a61e245352a936c2c6fb5aefaaae6f6819dd928f3f49dd4850f5f25c42a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3b695b966673efaceffca57958094bb

    SHA1

    fca5f0024916227b2afad209d379f57273b60048

    SHA256

    f8122b056aa13d9fb174752cc0d0fa11feb020f38f51ceebee479d3e33c71339

    SHA512

    43f7b30b6f650802922374ae06e697776c4b332b95960596782b184749ea26a8097310442a754802b562fdb9e40a714b7498bfe8a3539a8670f4a01f85495c53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6749110db23978d528f73c5eaf4edcd0

    SHA1

    f56cc2030bffd9e1c4f804365ee650f13a8b6911

    SHA256

    d70389374d128bd902bcf9d443d653c2f53936b1a1ab712428c0e163202d525b

    SHA512

    6fc4ae6fbfec64cfcf960618f145505c9939234b3860bd07d9efc474335105106b4fec6a1aa2841090dcc66d847f6f2963ba182b4393548a81b4cdee17ba382c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0db16737a683f2b07f1d716bba477686

    SHA1

    c42cafeda0fee654ef2f874e95708bdb3bc8b5ef

    SHA256

    675eeffa32b5a4f506e772c2326b9115acea4f4f8109e53a3ba29e5653876947

    SHA512

    da30e00c7a75be71fc4504489756c9c846afe8e04032bfa0396bf83838441c160213b2f93b2270f6a18c1623f09c5654c90e537c8937d9fce538ff6c7b6e9492

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    addd1d6d6b98e8f70d0ac0543b41165d

    SHA1

    4698a541491ae75320df69896b503db87144ada0

    SHA256

    b1e6d15a583ecc2484b796a3810a5c11afbf0bbbcde48026cf915624a228dacd

    SHA512

    f9c2a937e78afb3fa6b6d98d00ea48e5a0ecdbea723f6131eb0f4d3394d9556602b5bc4ba3393f42051d1f2fa8e097b9e6c4d8842506d8c6944be14b4643f845

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfdcae07ec28550a73c0494771ded31a

    SHA1

    92f7ad9b0feaeacab16c6dbee8aad634c40add60

    SHA256

    89e8980209c01bdd8d6ae64a755d71c263a5535c5b88b3a14aa5c724c5788560

    SHA512

    1a87cbd5d10335becdc912fffa9d9c4b06be45acb3f9d04a69491dcb4a56c7f5b7a29b411a4ca827cca34ba00fa4d185446bf2c446ee640f7c73cecf8b3e41df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93ba5bb007d4622918dada0e7383f5b8

    SHA1

    af7edccb49db46defd1111e06ed73b8b57258078

    SHA256

    91f190a093300462d5c4c3dce02a73c27449c612bd2b4c06468287e0999b150d

    SHA512

    801252b5457eeaa0496e5ad2c002a53b61727f6fd902d42db9b25049b923f570ba22f7e7d5a53c7243c55843b73d87096687cc646b9b90da4c1206390fada88d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc9b1be4608915e0367b3e1db62efa0e

    SHA1

    7bd8b790d6758292935abbf0d3b2d772ce326f82

    SHA256

    ab920062569f284056b162240b904c12d2d9cc634210a68dead1d89cdbd0b22e

    SHA512

    33323e8a05175e87d7189bd125dfca9264087a537960c719ff9d18eadd3ab74d1c38e35b59b5fed7ebe9eaae88cf60b7eb30b3d508bd2d792fefaa4d98da0f8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9ca4f125a0ff8ef5598e86dd54384fd

    SHA1

    0c5465d3eaea8c336f20235836fc1876d8cb6b06

    SHA256

    184b1b118f6fb79d740859d01c9585da327046afa3246e12d076ae4f336664a3

    SHA512

    37e588c434ff107568dc6bbe0ad39457b61b985351a91136a36f2ef8887f28f222629c99c44eb09a329aa306568cbc9d55d895f2df7a3ccd9e61a6d3578595a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e840301a4edf223e451d989d36dae9e8

    SHA1

    fb3781515daa21218207e3ba27dc13c7de4501e7

    SHA256

    30a86733d15b9717581c5e8fc488f4aad9b5c28a36a161b98f289d8044465284

    SHA512

    f47905590aebc252c5c2346368f60dd70e0302928d6a9f452f165e2653122e6b76f49b0dffd463e2a37b42d2e18a1453d8927b16010f7c8a56012fae8db7a0ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a6042211e588b87df1847155d570d89

    SHA1

    a11b6b1fe02eb2c9094ae8e639516cdfdb5d7635

    SHA256

    d60f705e60c4870f9d3c8ab212c8606087d36be18869e712ca8a95ea8f604dc2

    SHA512

    4357b6afca1301128d6871ff1edeae9c15dc13c19d449a2302e39b0580117e6d34ba6cd3f91cfea108f0ea891a870b38ce0a4f70b5aa9dea64b43953b617d6bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0821a67f66c4786bc03a6aefcb7081f8

    SHA1

    fdff124d085df995d0c7b73e97c95c9ab2f58f23

    SHA256

    6bcbdba90d1b7f3761139d26bf694872efac762559208d2434df65a038c399bb

    SHA512

    c466f01a8b2e62b4e8ff3f3148dda86dbd1d8834c887b621416eb95ef63fe6d099c91b73e093baa69abbdbdd51db9c1208605f85b644bae703eea53480239ed8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6487f576bc8f9f5077437f8b34cd2793

    SHA1

    56a2f508ec6969d98a70228ba110f0f76683e821

    SHA256

    1af879631766422e0e3723e4be466acaf719e5ba91baa0bea1cf10bba200d2e0

    SHA512

    2e9d9bf01a0ec7b7d603bdb236b2b266f18ce11b05ee606c02399a447c372b78e41572c7cd01c600fdfcc447165c92bff1c0f27fa6870e29b9e8ebba488593e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4e4ec24c50d20ffbddc121d0cbb93f0

    SHA1

    12518fab7a2eeb23c2663d3c75568c8b3fa47baa

    SHA256

    6a03b40d8df4bb2bc52e5eec842967c6feb3ceb6c18b2f159a5c2e16d2655cdb

    SHA512

    5297044b86f05d0690cc69d7083f9f96b8b1cf6557c0de7ba1e42340cd6d742a68639f7bc98405df23f67b5a3f285cca23fcfee3325d0b52e6a9c0da7ad3ac74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2df6b63f7be1c1f5718ca8fa39106c83

    SHA1

    80f19470f3279f65df09ddaa2341dfaf1175386a

    SHA256

    2852af25d9d8ab55be1fcebbe4e4e627e1228d3647bd2c987f5073342fb2ce9e

    SHA512

    4289840df48ce9946bfd46403fe5771ee70f35ff978321ec8551ddf0cfe00c6766188a79a7d3940cb9b9b2052bc85352f5cf002004b497c045ce178ba7b49d68

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XJ0RD6PK\print[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\CabE62D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarE7BA.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63