Analysis

  • max time kernel
    118s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    26/03/2024, 09:22

General

  • Target

    ded29ac25d9d2784d95767f2f0d9e093.html

  • Size

    3.5MB

  • MD5

    ded29ac25d9d2784d95767f2f0d9e093

  • SHA1

    beef785defb01448733b793e279c87fd8bd81f95

  • SHA256

    7a298b9b35c63b2d38fd81da4bd6c7a5494e7a8afd33ca4892bf9432cf31ddca

  • SHA512

    2fd1299dc10e30ecf8d29006f0bede6e8d6a597d307aa4d07495771e571ae9141b14bae3368418cdd921431082bc72d91f22986f9400d4e744dc604e4aa63935

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6NfU:ovpjte4tT6NU

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ded29ac25d9d2784d95767f2f0d9e093.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1656
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1656 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2508

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          914B

          MD5

          e4a68ac854ac5242460afd72481b2a44

          SHA1

          df3c24f9bfd666761b268073fe06d1cc8d4f82a4

          SHA256

          cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

          SHA512

          5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          67KB

          MD5

          753df6889fd7410a2e9fe333da83a429

          SHA1

          3c425f16e8267186061dd48ac1c77c122962456e

          SHA256

          b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

          SHA512

          9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          1KB

          MD5

          a266bb7dcc38a562631361bbf61dd11b

          SHA1

          3b1efd3a66ea28b16697394703a72ca340a05bd5

          SHA256

          df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

          SHA512

          0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          252B

          MD5

          a2bb22408d7a63257b232602d08a3cbd

          SHA1

          f273d46f4134e84d716ef4b47c7229fbc6e62cff

          SHA256

          5bcc5d84eaef03ea212febb94a27dc501409e6859d916432156f4fc452712996

          SHA512

          5a626ea42af421968c10431098ad0b93b7178518da60b3738e529b2d452f035ee61cce0ed3c47c19c4cfc373aa62d6063f78b3b28c98670d271b2986259c6ee8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dbcfabe776c9d4298b7db08a9beea3c0

          SHA1

          9c1d7a41552c601296f5d5f0e96594f4693e897b

          SHA256

          f4dc1039b927c1b4457301a606c80cf13e59ff013e6ebc9c3eeaf2c9c515bc57

          SHA512

          3b953954c7c8d24fc649d3ddbd8b36121f66658f2daa0c07ff86cd792ebecfe2a3808f1d2e057e6c7b14272be7d8293246d59d2d679663adc66a554acef82d91

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          18284dff4bff42156a379fc0b104b965

          SHA1

          fbec493017f0df110395740548f189f1ba91315c

          SHA256

          ba15f527324505825f737a9ad9c2cb97ee5cce3c715262cc5e659fe3056f455e

          SHA512

          d38ad37b00dc9660d2bdbe6104c0653d9b2c2648633f4d522ca02548f3e6f1c405a74be5add39fdad31ededf725466cbbe2947534d003cc83cc4f2c8553dcf4f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7aad326812b20c21094d0e8f14d225c6

          SHA1

          1066c08bb285820bd795402c494e60a2e90e4c90

          SHA256

          c644ed38e670f7daf4478d205e3461c73415b92554b9a353119de272cac8a7be

          SHA512

          31f016a445875af04ae2ccf556af150ce2cb39fc1c27f5435b511d7ee6004ee9392cee437f243d2c364f917bed0d2b84bc3136dd04a6a4d5d8d02915c3058909

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f08eb76c8189a7c6683c2d7885dc71cf

          SHA1

          99c2c06f5b14b72353c0830bb222827c48dba646

          SHA256

          9f7dc078d1aa8d4b091485d7384270bfcf77c3b563868bd5b057e98494ce0c73

          SHA512

          3b8fc732e9f585dcdec4eccf14b275e7e900b5f5857e731268c5bda0df9d7e68364b8d8d4e62224220d4214da75ea67e13a51cb8a5282cee9b9f92662a785e02

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          58be56a10cac709b1e4c2b67b97fcb75

          SHA1

          3e2fc8e4832f95b7697ea18990abb9a7ba0b0c06

          SHA256

          791fe5820bf406264d1ccea6a2ae319e04c7a173d2247cdf564b0db3abc62f7c

          SHA512

          87c949e3be922236c816df8b18fa65ce5c6343378763a8bbbd15e5c8a3b76512b4f7250f49c239929a16af5e45711a5172d32ea52973fea22c1038b53d154bce

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          55a9189b04671e9c3dcf2083516ec834

          SHA1

          2ce88b7b0c6b828a7264eec4c085efe7735ff1a1

          SHA256

          d596b276fc5957c7c589b9e634594f71bfdbfdda9e9b131500cad555e977e002

          SHA512

          fa66a4d85e3686c52e24e7cd70125b0adf737fc6bf1753bf5326a3906a7f60452d1c1a6a873af3c36789f75b5ece4735198be4426f75d0a731c461d29ecf37b9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d21cb0d32e26339e833a1740fe7ce1fc

          SHA1

          ff1f4ed5e42eee5a94e238cb5e75fd0e0036cfba

          SHA256

          fbb2e50dac49fbc7272fd592a80f5c883cea47159aae365353508a5064575bc0

          SHA512

          031ccdf5323c4339e055e1e6458a74e7b1a3eca752983959b6cbfc3dae31a0f51078df51ed41b51f733c55422368d81edd7851a35d7cf067efc262f2ef522076

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cede977eac352c62a7819cbdbcecb9db

          SHA1

          624b4b34fa4e25a6ea3260de0ab4b1723e8335f5

          SHA256

          fe66b053cfa0e8a0cea6ef94dcf1600df31c15ac278daa0d1629a2735deea42d

          SHA512

          725d1c0a166661fa4a062330a059e159cf0815c2920ddc757755cb0f748f6f0fd62bb83b3a0ba0f0276c878e52e465e8d132ae847a3143c68287e2bebb2c1076

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          49bae145113d16b34e77ef2e86abef94

          SHA1

          63d3858da39b69fb5fcb9cc50f23dcaad78d51fc

          SHA256

          9172470f97fae75d9620b861ecf15ac8f9de5107590ee1948ef8c8ebffc659e7

          SHA512

          6fef40041cf4850a64f07bb5b631766f5e98e7950ae7a4c457ed00293511acaada348ca023d041f7e606e69b54b535b52af75d4150850c852a78ec893da241c1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2c832091fb1f68552637b642634495e2

          SHA1

          cc626e7289e3fe1ddfdce342322172ff57d4dec5

          SHA256

          9ea6035fa4e2bb5b84bb035abcbb1d256a1edb034f4991dd730ed1dbfc04a235

          SHA512

          90af0c0dc9b5b03180627070b66425ae39fd9bfe52605df0a45c4e80639a38a7e2b19df72c887b3de54698242b8b4d6aee712a01fc590098a2e57874d7c1284b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          55cb5b267e13f8cebd325bfe85b0056b

          SHA1

          5b8738a53a7e1448ebdd7ff540da3f01ea7a31b2

          SHA256

          3ca05c94f270dc1ac3e1ba6be3730fca30ac7f1994ba6a359188fdd0fa4ffb7b

          SHA512

          a802745fd982c506b8c3b65ebce9964b9ffe00abe82eaa6b1fe6c3956f2681a7033c8607ce5f6ec3e8390dbc27f0961facd3ce484418429acec8cdcd0bc0d4b6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dcdb94785fc016519156d56cc40f0acc

          SHA1

          c1ab8d8189e4460aef0af292f1ccfb0825885a95

          SHA256

          66de5562321e375a1841edd7dc80bc7c82eee6cffe942df5b9ed523c5ec2156d

          SHA512

          1bdbcbafe1f61e78759994d492b19513671b8fb8cc7160ec2501aa7a74ea20832257a245aadec39f85f2685bf6f109c313fb1009ac086e8b334d23a59c0ae52a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          06073ef2106b805ab2a79bba21dd952b

          SHA1

          af652f8e07a869faefbfb0bda7052273993fc163

          SHA256

          5d768ab99599a9b75b752d47ae0244441063a50ff9e3a7a5a0f6195b4361ee16

          SHA512

          1ded34ac8a512600e3dcfe7f0c7754d9c3e15254454002bca690bed40bd8a83e597c29ab0c9dd1954741a6b73441137310ce94f3cf87a766e651dccbba9def1a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ca712d3e59aeb935b6bb31434c1a4d57

          SHA1

          6217f88324b2d3e433641598437b76ea6be841ea

          SHA256

          70559f203ceed602a79cd914f27ddef3947ff4dd2642bc30d181eb4d3655ee89

          SHA512

          edd2e5c922ff3c21d6a5e9f9e8a2371d383f844df5c29b5125c0c3ee1f7d6afbd0e7b9f8df9fea37cfb7920df4a7c37cef9eef33250e9616f6bc1f73bb5fb17b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          242B

          MD5

          599c209a9172076a3c2214eadf23b4ab

          SHA1

          b2dec8260575686661004f8e11027a30cb40f53b

          SHA256

          1b77e8192fb0b4fe9a6e38959668dffc3a0cdaee3c487e5a84259a7e45a0cd3d

          SHA512

          c518e158132accd2dc40ed39721a05444f83c7c004a7ef7ddebeb8548aae62923abd86b1ebda851ddaf985b1f329cf74f1c1c294f843e58e2178986c14d60680

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\beacon.min[1].js

          Filesize

          19KB

          MD5

          dd1d068fdb5fe90b6c05a5b3940e088c

          SHA1

          0d96f9df8772633a9df4c81cf323a4ef8998ba59

          SHA256

          6153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101

          SHA512

          7aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RSAB58HZ\jquery-3.1.1.min[1].js

          Filesize

          84KB

          MD5

          e071abda8fe61194711cfc2ab99fe104

          SHA1

          f647a6d37dc4ca055ced3cf64bbc1f490070acba

          SHA256

          85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

          SHA512

          53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RYNL6UIN\jquery.min[1].js

          Filesize

          83KB

          MD5

          2f6b11a7e914718e0290410e85366fe9

          SHA1

          69bb69e25ca7d5ef0935317584e6153f3fd9a88c

          SHA256

          05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

          SHA512

          0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

        • C:\Users\Admin\AppData\Local\Temp\Cab2963.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar2976.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

        • C:\Users\Admin\AppData\Local\Temp\Tar2AA4.tmp

          Filesize

          175KB

          MD5

          dd73cead4b93366cf3465c8cd32e2796

          SHA1

          74546226dfe9ceb8184651e920d1dbfb432b314e

          SHA256

          a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

          SHA512

          ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63