Analysis

  • max time kernel
    143s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 04:25

General

  • Target

    sample.html

  • Size

    218KB

  • MD5

    ae840ae005555141a899c19d96aabb5a

  • SHA1

    e58f31b9b8ffa78576a8d1a767105b0000c705be

  • SHA256

    15eca9fd0dc9f4e2003f2d2ed41a8c1646edf6de9f7e3e50bdef24caba4dbac7

  • SHA512

    c5fc424aba32da6fec97533992de9339f8857d6d05287c82fddf062d196e3c852e062c970616fcb90b44501e3a6a1b0cb5c232c92c60abb87c97b725cdbf5023

  • SSDEEP

    3072:SMVfbkf7WfyfkMY+BES09JXAnyrZalI+YQ:SMVf4fiqsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1276
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1276 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d97556a60c8f529ea338596250ad008

    SHA1

    7da73975c19fc814148172646b0cab5096449f6d

    SHA256

    7fc25245e40eb7326fcfed7fb58b8e159c4fe66a6d670952205a1572d8c59579

    SHA512

    f5ba085b1ba329ed424a9e1a420b5faec4ec7bb41ab36a91d7c525502d326efe44d984b5744094b123aee29ec5e9108d30ac2c4d21750e2c2a55edbdd2d22bef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fc763247654d09b5cdddba3acaefe80

    SHA1

    cc70ba33095f1a93984dedc04644bdc4c9baf811

    SHA256

    24743b30015044c2fadcb8cfb593340e4d574aedf9b698f2daab3e7649047817

    SHA512

    6fdccd2c382fcd414db878422f01d952bd76bc63d23fb245d0de72b7be560f4e4b8703e0b34ef2731941c4c543dce05d8d8a713476b71e7adf2f3b546fe7cd28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fea109581f1fcfa4bb80517a85a183b2

    SHA1

    4cadd2de9ab31d59c2af646e49d40e70c70d54b1

    SHA256

    98ec2cb0d26106b57d9fbc6f29610fa4576dbd09b07ebb4829417f2b9a1fb3c8

    SHA512

    adc10c3fac833a81c3053879cb2f804cebc2e2d257b16c7d74a7051a1d7b6048ad1c49f1131a1eb5793c55e7d5e3c93958cd04eacbeda7888e0e41fa383cc0c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86cf1b64723b8668f846b9ec455375e5

    SHA1

    6aeb35315656a4eb8603ca1094c46da3127e5050

    SHA256

    109a2127fe9f1d2abaa7744eb9eeb020d9d770e629fb710fe8e1d123a50ddf5c

    SHA512

    ad4fd87f8b9728d8e7bab36de4018b618e418691f25d7f2551927d88822088cdf7c55dc7e0e49bb06c53d348b04fbe0f8dd9905aa6e5c97e93fc555499cf38f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30b417684ab5d1edc28dd1d73f655b9e

    SHA1

    adbe961253a122580355b1c12de5a51ffa14981b

    SHA256

    f3ea909e9323ce80717123ac3aeea4847157817a437e64e9c901d39ab33e0b34

    SHA512

    e6621dbc6e33098c404b3641a915605c74d446f7598f50f0150c4a291439a161e46d266be98d2a9be3fd37f4a590c75dd6b43186a86eca987715c792f737a74e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cdb4ddeefc9b289ee2f0e4a81ead767

    SHA1

    93337e47b958582ebdeede61658fe4bbaf010c97

    SHA256

    dc6d1fb15e55516fc90267aab7500e7e7fc9bdfa6b24aece7717bb663ba910ee

    SHA512

    291aa685f61fc5b9c71fdf79dadb8f7c9d6973345c8f3126bea1907917d32c0605c9e0b484a2e0574e449ae3dbf67dc1d8a3fc1b93bf18a9c6730ee85ba4ffcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e088147ef8cf1aee026669ff6768045e

    SHA1

    9a785168118bb92de9919f00e8c68a60a1eac13e

    SHA256

    e3a4cefb2f22a936c34f2d2a7d313c3bb9229ca3ad6bbf852757c7039bf57441

    SHA512

    585ea170f4c8d1207762ad21c4e48697b6bf478a0e46d6295f529902c8236e4b78fb9a5aa2542345958272aba5e4825c15c980116de5f27bbebee9c1c590e7df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83f3d1bcc7c0547e758ed14a7b6384a9

    SHA1

    83183de3773434fbf00b9529e1b14ddeca7e18e7

    SHA256

    1a4ddb855651572adabd5e12292bb4989e7c5d6638e9107d7f1b077a74901dfd

    SHA512

    d425eeb0607f88a358fd0a840adb9468971771c3c0e82256550fec89f22c1bfd0486dcc2227c11db53acb86111d831f4777845251d61b0f7c934b13f2dbb02c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44810eac81d9a759c127dca200863f41

    SHA1

    ca8fddf739905b2747550233d558e3390e412a80

    SHA256

    3c49ade0dd2f2ed327e27b3a18a1828ad277b3bc739a7b4f02a76d327c146701

    SHA512

    ef1e71f118b871f9638cbfd13222c7dbc10400d596ccad408f44afcec140884aa69e44c3aeb9b4ad57ba22a25d4fcee04a6676c17f7108bf20ed03de1a4122bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    109276b76dc1e8f578181485d4e3d6e0

    SHA1

    c469617b9af643e967041c3f2e3633054102cc08

    SHA256

    f2277c71c2bf94e02858c3145b8bfd773a96c4dfa37530205bca64ca9a740d51

    SHA512

    25d953d34cfabab567d72296d0e329c83bea13a2e38f79fed0d2c07cb535cbe4f60f35623068bfdbb131ed254f69cbc2b0e3014c5684757a61a5bcb0b5041df9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c3f20a9d5be0169ac5ecd4863bc7bee

    SHA1

    21a6a89f0e5f57020fff39310fe04cbf0523ec3c

    SHA256

    e36d16104bce1064909ec26ecd5eb93b7611ed9233be7ffdb3e61218653ed767

    SHA512

    2919238df079b1389a7fc596753d83f5790c93e78cef19ec86032377a437f8a1c2e0f5a480f84f40c74c4ce33dd6ed495ce08cc3688fb31f8df0511f965c0937

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60fc44fbddbad490ae2f449b4e52ba09

    SHA1

    2a37e4d5a1915800ed49831f8591f49cf8949e42

    SHA256

    984feb71d6714e9fc325aea41894cb453f315ee76ac31b133e1d715382a9e149

    SHA512

    c86fa93978a67c14a5e0af80ad75fb7c13f49a636d5fb8d20cc3177f77d7fedcc75b1fbab0066c920933ba4998a2b6439d225ee30ec8e1973cd08c8b65da6008

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00a36e2629a3068d606477bdd2432f1c

    SHA1

    24fde2afca19e4190749c44f73543bdd5353a302

    SHA256

    3a2ce95b6f041f49d4ecc9335b3c26283ddd0c56d2e23c479e83d49da0660fe5

    SHA512

    a5eaf95cb7e23b31ffa0be023480cb75f7c80dfcdcf83e1ee1d0ebb27bdb99a9870b24bf67551d344caf1c478680001942c94f7c3792f54abdc0d2cf630f7397

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f287e5be5e9e25c87e2fee00b651f7b7

    SHA1

    73924337ad23e413986a02e8630cd78dc9d8fb2d

    SHA256

    75a05bdb02f13af228c0918b41690239b1839ce2465044c56f66aa3c755f8713

    SHA512

    c3bab94dcb5fb663e33a7f6ff8372f53057de4f9890e9c3e1027d50a858be3b0e9773dfa053940f70007256bffbb2ff38be2c9e56e88d3377c32beef5022b9d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69967f027beb0c3277a0b706fbfaa77e

    SHA1

    abb743bd5c08aced14938dcd041e2b513bec5f3a

    SHA256

    f44beb7bc60d0a5014e33facebb63bbe58ebb56d12667324017580e5a46bdd49

    SHA512

    66e7e23b874fdd33d5c8a1880c043d0636de9f794f27b69e45e71621796fe135182adec653420f1000143c0f5dac6103daae0f4d49aeba9e266a2d938bd3f1e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d65224d8b3d950c9d7231659582a96a

    SHA1

    c74cc3cfaf9e0691595c148aa4ea2ec95d5aa52f

    SHA256

    96fb9891c442a677d411e93fe2df58a84929d43880e7dec8b1266cc843ca2de4

    SHA512

    7d60ee46d11dd5a2b316d4ee1fe44492cf53732de3b20ec928e857b1c6ff06dc5b7f5cab5c338860fd7b0404d2e1e428df4c202d6f409436fa4fa6faf209916a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e139d24061f3c0a6ee2d138803019ab

    SHA1

    b9918d5c96f801ef802c6b8f309ce0b3c65135f8

    SHA256

    d3f8ede46ddedea27904b19156e824774566697722457fa8b3c7b45f855c56e0

    SHA512

    3ec0af49eab04f1fd5017ea945191048a0a6fefb5c9a0e4d67a0daefdc04907684036d8fe0d8600d7805eacb36a94b70fb44afffc0a2a944d7b8ce340758217b

  • C:\Users\Admin\AppData\Local\Temp\Cab10C5.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1125.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a