Analysis

  • max time kernel
    144s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29-04-2024 01:32

General

  • Target

    sample.html

  • Size

    218KB

  • MD5

    4aa88295e0d7e5851266411ace970a65

  • SHA1

    f9090a015c489b96c45029d3999e1cddfb6551f6

  • SHA256

    10c757037b3847e1fa8dc927fc8d681b388f396bc14a2057d2638dd9ebcccf2f

  • SHA512

    d98963fcd308c19269724490eb4c83a474b8994b9ede41592beca883692f84c1e4dca9419b53b41bb5c0a58638a59ba1686d15e100eb23297d05a1e2c8c200bc

  • SSDEEP

    3072:SZyWMKxY8cpgC7yfkMY+BES09JXAnyrZalI+YQ:SZywxip3esMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3048
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3048 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2560

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f6e26e8f13c1b2b45719ebd4bf57fbf

    SHA1

    596f02f07b6b76444ac1596c0c9e6b1522aa24de

    SHA256

    f76b4d6ebc815ea35d30e2ea727054ec122e7d3ec52b7521a75fc418871dde97

    SHA512

    781e4d22f572a0f096460bf87cca6261a6fc3ebcc1d14f395914c5906949ff8c3581a6d5f9d95f79f9af9fcfc7c7b0729067e817339a64debe14c597f8235039

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d979eb9c69b9fdc3e1f03c90ea5a059

    SHA1

    2ef0463fa388251e80690f1acfa5e6a17178dafd

    SHA256

    d7842a92701d346808572d073626049d8578dad352c5d1d9020affd5207438c3

    SHA512

    521d31f0cd86e2110c2f1b6e8159134ae4c5683e1efc3cf8cd43e7d0dd30ed2e332dd7bf30edd906675b2874e979a5bc0cfdbb2f688cc29df76143cc8df10a25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    200b6f82b29b7ebb25d63282306460c4

    SHA1

    364346cb235796c80a82cbf952e8014e124fbd2e

    SHA256

    d0a4dee785d1a06be36e961847465cca90d4566c59ca53573fb19da6d68ec5ce

    SHA512

    96c54fb728a00575d7189908d9667f049ca5783051ba5556388d1168aa6551cbb2088e28f7f2103659852942cb72c0ba721c76cedebaaa5fc28cc6d9c8d31016

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20726a0419a3cfd05b5b9eac755db237

    SHA1

    760434bf4a277c859fcc0fc58f3c8329d2d8b060

    SHA256

    3366239cd4ced4f6d4aa39b0621b005c89f677a8538874ad24c6d30b34aa2438

    SHA512

    6b5f9847bb410e4a1f62233e0c1b4249654b8ce0acc3bbd5d3645072089daa7b1266a228eab2b2f2997612d783383aaff5982e39b859ab25030560556d4fd645

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6303254d5222c0bb9f5838f9f809703a

    SHA1

    e16a9cdf7cb5b121d50d4380732ea60a4bbfa01e

    SHA256

    54766a816492875e9811ab2967184612aa3f7a884de0a22ff225eb5ad7c7ad0a

    SHA512

    ea443047715c1bfdfe6f31ee22d75cbcb33891c1d2ed33d0301f480fd6c08b12e0edd9d7a06b4f867926045c283b9e74a2a3865c08e174fab881298f7f1bae85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f26aee74005e1715372ed9c2c88ab5b

    SHA1

    2cc8d247055fc8a7b19fae7e1796cae0490f08fc

    SHA256

    0964f53db7b29695f6beff157feccb0d7552daccc538a3739a5131d5e82141bb

    SHA512

    215a5ed3b81fde2b0e89a24aad156fc5a4615b180eaf108c6873aba383780be634daa5b5ec6a2609b5a29bf8991fb84e9ffa6f3fd7b1c58769256c0f031caab9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24b66e6fc8f2bb184e2240901c8304d8

    SHA1

    40ecf7d42cc0a111628721ce73ef8f5b8f85e3da

    SHA256

    7e8066d718f41f33d8684a395d4f2ae334d63fac4fd81796c15b557d112c1b9d

    SHA512

    acdbf3b0071ac80cdbd623c7ddcdfe44683b6f157df074de17e2a83782b66b5f878cab1a10f20d89cdfcafcc74f66f80db631157cff955b413e712ce4a8dfb84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f11b55359ff2ed5900c6f06e8e43d154

    SHA1

    28d9dd57b34ef59d9f1a519ed1228b68878f327d

    SHA256

    a4d27cb50b183f70a249a4e8670b6faa7479752bead0a0fb8095aaaf761be631

    SHA512

    898bd39114621a584db873bf12cb0317a0a7a31323a1ba580d7f0c3b7e381d9c33b26ce422d2690026f7f0196301b5d6066d75aedf4c56ea8a132450599d4cdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d336f130b08d0c2ccbeba6315f5784a9

    SHA1

    73494eb4eee800c22558a39adafe17f920753b1b

    SHA256

    14a35068cd07440fc6fc80b6e21693611e816e0e47d097d9fdbed4d2b4d0aa4e

    SHA512

    e2828750f29b4bb0d11a71265e2416190de48bde7ab125134d37e49de52a3642cc09564a7d2b2f26b476bca210e1bef8b0fb008beb1ad454d5adfa10467651a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d041ca2b0df807a424c22a3e10e161c

    SHA1

    51772f65a32e88b19693e2ad6474ea17e9a3e0b6

    SHA256

    83d514d8d7e53fb8c9a663ec48bee8b27079aaf4e8cc8a6e8fff9f6189f97ce5

    SHA512

    386dc91d9df1d8e2cef5a941a40fdbb1e204974b36307576a6495251cff167388c2a5ebbfad98e065f1ac7b6558630429bee3285afd2daf43d0ee1603d8937cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c00c111adfc34b6913d872ad2e564c6f

    SHA1

    24e679dd1bfa96cb7ed5d6c19837e99c28d8c827

    SHA256

    655498391e38023cf9476579fac6830596375e90d644af2dbebcd49c4e394153

    SHA512

    3bb83f8c38f737b92828b38caee0b5e47b42258402e4213e221b90e23ea159ede05b3b66cc7c26f0cdb5bc6915aed9b943252bcd59ef018aa5895daa5b675a28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    095de6e85a463c619ad3a8028bde80f4

    SHA1

    ebea1d32131563f89f70c96e13f99a951dd9ffef

    SHA256

    a83a9e83295298e6a084255467206310a188024dbdca1c615b870865236efad0

    SHA512

    5d1f0663a8ec2967481c853538b769b4a320164e81eb9e6b42af3e1aaf547c4b0c6a1a84ad538e427e8d7d4723a4c5ad1bc4e1572c5eb40f82b90d7dbb7e7e7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32c0591022d671117b98f9f0ae77c88b

    SHA1

    de62a4b3150ab4710b88fc8f7dbdc810454acb1c

    SHA256

    374795408470cdce30cd10925a45f7f98618b369da4088bfc246852f4f335325

    SHA512

    3afe89de136de482fedf84ca09d1c07936d85fbc034dff6dee803abf3af49e692e3846b1e2817bba021bf940f817466c1f35b9a2e1d0868631d8a97fa6555ee7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6c3343e0a7e41562b14b4e859170b64

    SHA1

    8a8516a5eb8608f73727353a8fdeda927ecc0c38

    SHA256

    17bc2e8599be13a356037f760320a6dad5ed6fd2d928ea4e8d1ea487c6422e79

    SHA512

    ce68fa33ff58919240e3f01bc358a93fb43cd7f9f08c6ab75d9726d5d628d569346cb92785c0b99574b0ccc55607810e8f2d0fe63c3d6554278bc798202e7153

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5458ee4a0a9845a46ec849a811c8bbd2

    SHA1

    09611ca87c1a04b62824e9a6870abeabffbe644f

    SHA256

    ccd8111fd29fa3fddb56780f3e437353db2d4c4323d6f79819141d1eeba192ce

    SHA512

    f9c4b28bb5ee2ab8136ae983edd3b0f4b747b59f2871dc22debc30e1ccb4f20d05632c163410b1e6b82f805e75ee9f6b8f9d2156ce86869b2c0d4c058b50489c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ee745de283f0bf2bd43dd5808dd5af7

    SHA1

    14c621e257d9520020f0a9a0183eb598f3d929af

    SHA256

    465b6d79c78f1b5d97beae70498d8f4cc1df436a767ef1565d250dbe4f43dd97

    SHA512

    af9dad25ed1e3cdff44ad8c4972d098d06e8f14bcfd71b7c83ff38095137f1d06d6b1590d94605640cac30a371ba407729c8b8ba4a6b8ef432168b97827cbf1e

  • C:\Users\Admin\AppData\Local\Temp\Cab7B1B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7C1C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a