Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/03/2024, 04:13

General

  • Target

    d52b1e3462d1f751944713a8aeafa434.html

  • Size

    31KB

  • MD5

    d52b1e3462d1f751944713a8aeafa434

  • SHA1

    c3ce0f0a5bd4355e4411dc98bbc5ab414674608a

  • SHA256

    2882e7d56838b8b4e93ad77b69fa363e4dd94d2b2d93af0111191646dc51c501

  • SHA512

    459f6d479d0b244828485a54b00896d5c2cd20504ca57293ba389d947445ceb7a9a55dd9dc3ca087e0c66addebd62450e797edfd351c0795410176e25d52603a

  • SSDEEP

    192:uwTlb5nyt5anQjxn5Q/gnQie7NnT4InQOkEnt0unQTbnpnQmI5xOZkhU3kJ4z/ws:sQ/1oExOCDksA9Fz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d52b1e3462d1f751944713a8aeafa434.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2104
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2104 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    67KB

    MD5

    753df6889fd7410a2e9fe333da83a429

    SHA1

    3c425f16e8267186061dd48ac1c77c122962456e

    SHA256

    b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

    SHA512

    9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33778d4c30a73320086cfac04c42167c

    SHA1

    9c0a3d6f77d5543e83a768df127bed2717027c3b

    SHA256

    bc76208c357f959605edeecad6cd4de98df8338c4c437184663b3a12f61e9a47

    SHA512

    3f6010d2c5edba5661c9c685c0a78610596dcc73afd1233a62c4a2906c3034fd00e05d861f640276e1492260b6fb3e26e822ce1460294273de5ae235437d3152

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d071dbde477853ede402cfc55039dfc

    SHA1

    cbd94ab2a88530daad51bb08f1cee892b24a116f

    SHA256

    20982d77d5242bf7451a04fb0de6b966ecf9b199029e404d7ce9b768f14c3571

    SHA512

    e775d7e707d6dc340d83f7fbc213df58b3b146579f0163bf517541fef3336da53fa49466c579084e6ec9e676d22465895ecb846ca42bb643cbdec3de5b110359

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5ab6bda042518831d3269d18a05cb33

    SHA1

    2e1134993dc6eea73eddba4a74c56c44138ec54e

    SHA256

    0fd25c017b1c93f39b8b265c57ced50d656c1f3be32d5a1bc07259025e49a87d

    SHA512

    3a1f5da1c39cc7b3cdb303efbff5875cc9cd3346a085b6a8e55d159d88a1e64778b32b2a605eb2d781b86e956594f875e119f705a96ee1b6b505194fb0b3f61c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d405b63629dfc6749dbcd54308519ec4

    SHA1

    debea86bba3b1fab1412beb14daad05d9b6ddc62

    SHA256

    1af3923d0a22694fcab18dde628fe22e57103b5089bdebf6ab500e71a6295449

    SHA512

    467d3110c847b8cf007fbd619d5eb57f7bdf09ba45eefc566fac6be204a2c0e6c5aa92316c7a81d2bd2174dacb93c31f796fc149d409f2597797dd36058b2327

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    392e3f7eaabb8efedb6d187fe050d10e

    SHA1

    560336878a46d823ae66c1381d2e2541facb19af

    SHA256

    f02bb74f2b2f321dabcc649c571cdc3dbc46ed5b37296e8fc4c14dbdfe0f1a54

    SHA512

    b29733904c031fbf40742312d2153327dabecf24e95623256d10ef734b04672a2af074cf7908f8c9f5e31a31cf22e992de295657f6922e8ab6ff120b5767a5d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0770e6ba03a2f03dab1d8134df2befa0

    SHA1

    a8d7add4797fb9d5fa2e20fd1042929f77200267

    SHA256

    b350e6a31eee022e56338e7ca6e36621fba332e88cf19ea2414a0eb092d7b00b

    SHA512

    51cb124c386f85bce451f9f5e51a6f261490fb03007944376b557242aaa41c51ca4e18d112a913c3290d698d6ad3651c708f2d7e2983f1db9f17505d4369839e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee29385636297516b6c83b5905eb8152

    SHA1

    ec728ffc4d8a9f9be1950211d91f92d664f5c9f4

    SHA256

    f1dfe22a884cc9630917f09cf4f3ce7a27443f2e9ab00761d4a0bfba71507914

    SHA512

    b778f5d1259555bcd981202b3e0aaa21d081f4ae3ecb395fcbd2f38e31c62d40f2dcf1c5485c17c15773383fc18aebbfeb35a6d0d85854fa0533aa6fe0efd8f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8dd3cab12f7a939977c3e1d2c3376479

    SHA1

    bca51939934ae268a2523cb21578f07290162933

    SHA256

    fb2ff5737dfc66da50c7f4aac50c02fe75ffc9031ac77881f4d7d30aced02398

    SHA512

    ad7f60892ad0dbc3072d757a66d9c74bab23636ce5836b65bc8f7eb94af51f1c195574eb4031d2d6444916cbe10d1006dbeb83fbe1c41604fe042690086ded61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36b193611559dfd4412b9afd6fa8469c

    SHA1

    1ab4d5dedfca3ffe0b560ed7e1e9888c049cfb60

    SHA256

    7054ed67acf26cbe744b3a027befe0c5116f665f61ee8164da1aa6ea18eaa46e

    SHA512

    c55217a3bc51d28765a2f10087c5ac3dc0b56ef7950ae7290ef599ba3802714c730e33fefa4fe007bcad038df3c2d8537cf7009ff857268919cf875fc4d9e6c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df551dc9c746f02feb2229d4fc24a2db

    SHA1

    6713423c5032988e4b2b91b5f60266ae4a4abe20

    SHA256

    3e34fef1b0a34b0cce14c236ea7358b178cbdfdc71830fd0c0dc588a45633091

    SHA512

    e591baf313f49525df9f3370ad85f619f2c12309e27f9ec4a81a51869f4e97122431ded9b7d8c3da8c4528c1c10afb9706f3fe2f4e8dc2afd2f7510d8faae011

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    346f637644c758e6b1857fdc97b65365

    SHA1

    7956f15da1387a14bd9031a354f15af407ba0d95

    SHA256

    cc6c442ed76118c11fa1835b30d2efd31bfa54bb48c808eaa0f6c2cfffccad5e

    SHA512

    47ecb5c3d5cafbdfbe9050b6d9065475c99bce88e12c3cbd067e4248cfeda85d2d6587cd07ac4321f3d8a6c1a8bbfe6339d3bb62aa0f561ab76d7ce547b34fad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af1008d8763a7b8bbdd63d327e01fe5e

    SHA1

    4268f2c50ac1bb711ff5aab463ceb64e9ea2a993

    SHA256

    eaf4161518a62c8942c05164a4ea4e0ce6d381889c082b3cd7dcda72657a7006

    SHA512

    89760c99eaeb84c1f4a2f9ab97b448701ab4efe87d6637dd9962b976b7aaf6820bd324b3e31a5c44f02d4f657c78577e6648bdd68ea10be2958368463d3095b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc79e9d6e4673fcc023f2e61eb9ffa81

    SHA1

    261c0d47f9b1904d456c55f3ded7081b0575cf3f

    SHA256

    878743b570a4628fdf6de91a0407bf850d2638c08aa26f94c17aa9ae91c4fe56

    SHA512

    66208d98f48605ecc749b497d03bb31871dd4f818623aa581583a6843ba6af96f9b42128831794b10544d51ca3300073902519865ae1157be74d4e6272c28b44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c332f5e1897010b93fb0bb63aa16f347

    SHA1

    00b2680793ebe2952e5e285fc67b232d4ed8ce5b

    SHA256

    7303a028550a1a219598b8d43eb71e7d6f0197f66d4e33741d5df684fd19e90a

    SHA512

    e65a6aab2a66ab42db086670f74efaba96a586ef6ae576d3eb8bd50133dc2832a4b4f69fdfb35390e1d85573720cad5f3809124eec261cd83861ffba261da28f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75db0541f5d7b59cb87e78ef135a770f

    SHA1

    ef650bc73d38806549320bdadcdcf7d089b62784

    SHA256

    4fedb56d27b4c596c2ea49cd0d9793e970352a924bfa7ca6d8d3e17b0033452f

    SHA512

    4fbfd734eaf1f2cd4226cd95127c53ce2fc82e2704245faa8708a79eae53732d233b0625df14f4dd28bb40b486d7b5fca118ce74400efc045f204caf39e1ab8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc53e5cd3dd45b0677f378461fe34599

    SHA1

    76a084bb9c76673cffeff0df6d8ed15d21457810

    SHA256

    d6f9b4a9a5372a6f56ec5e440439e86657e13f46584c4d8b7eddb226231f553d

    SHA512

    8d0f313e2fd1322c87c88908d16f7ebb21d4dfd61981c1c82ab6312e486dd0b196f296443f86fbe5d0436fc0f1003cc4d91715f52d048766008d0a0ee4948b9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50e9f085965bba4dd09965a0ba32a407

    SHA1

    3336fcbeac3dfcd8d50b9c81648418e0d8429a57

    SHA256

    03cbcec57054a10b1d4bbf5ec94a0b3b90aa024f5664defd978af4b477520411

    SHA512

    4124ade0204ebd561b0f1f22c58515894d2f06842e9b35dfe27552338f5c222aeec8cf9f97866324de1f0b61bcdcfd40d983dd8e115e9d2b423757ca6ea5c302

  • C:\Users\Admin\AppData\Local\Temp\Cab3B4D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3CEB.tmp

    Filesize

    175KB

    MD5

    dd73cead4b93366cf3465c8cd32e2796

    SHA1

    74546226dfe9ceb8184651e920d1dbfb432b314e

    SHA256

    a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

    SHA512

    ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63