Analysis

  • max time kernel
    134s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14-05-2024 02:47

General

  • Target

    bbcbd2b68fb9ecb23bbe6bc0257e2541.html

  • Size

    20KB

  • MD5

    bbcbd2b68fb9ecb23bbe6bc0257e2541

  • SHA1

    59abb1cc8caf6a2b946f85c04bc8fc036827276f

  • SHA256

    76e01d5483ddb1210cee9d0d0240fca18f1e1dca3fec950ee2702ce899f166ef

  • SHA512

    13efea7c2babdb210dc22f74d48b7fd21d3ce93eca8ad663b5719b2ca0ed780a83e7a8be72209280964f43f10cf16f480cff78f5434f4197d9133abef4869615

  • SSDEEP

    192:lQ7hEoDgtUpeWw9y89uQABYMfdy8JZXIQhVaEa2i8ca1Wb/:lQeayAbl1BdaEaU1Wr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bbcbd2b68fb9ecb23bbe6bc0257e2541.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1796
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1796 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2004

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\265C0DEB29181DD1891051371C5F863A_527BC5AE70FADE67FCC98047A960E62C

    Filesize

    472B

    MD5

    d9f6dff9747ae2c13dc2077a77a29f17

    SHA1

    fdd1a7d00f7b860fa5c5108adcace63143f3da63

    SHA256

    66c966150495a86117c0f70ac0a8429ff8687976ca384ac405279076b66daab2

    SHA512

    d97ff2382be9598593a0f6440a6459996d2e0842766a254155517a586e7f4c9276beac870a83fbaf7a2fb585f583e8d037742e16cc84b06a866dde1cab563d97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49276a38938a61bb3df314c1d42888d4

    SHA1

    ff8e85dc18e2ab5dd52e86ee5e6a67d4aff50197

    SHA256

    b505ee6b46f4861a568d21aeb36f086f962bff72e4bb8f38ef886abc5896a9f7

    SHA512

    9c62ac039e65d6b3d4a7703beed73fa0d531849c82494bea5c43ca62297e1b55836b79bdd2deb01a6ae8b43710b19a4c5630829d524198675409ceca05fea841

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d17e2bd78cd2306907afc83465994a7

    SHA1

    33cc1707752999645d28a329c155050f861d09fc

    SHA256

    cad78675385a5621baf7baba8d99b04d4f7b6547e11a90f9e169042aff18a7f6

    SHA512

    e6a60b36fd579f27a5c05f3089bcef64d41014adb7953f7a51e03c93750490832716e27402be16b744169540fa6c828421f0522a898dc9fdd923b08b422c0b08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9188dc69792186af8975e5b8e06fe6e0

    SHA1

    c74c811bf24e70dcf1722e10b8bb67db10a6974a

    SHA256

    b4ecc0b75b0517fb597c7af5536510e2f3b196f60c156cd7c3d4327472f88bc4

    SHA512

    cac6c467b98a507206b629aa7f4b8bf14ed39ded10b03844c42e16cedfa782392f034ba8fd44e193f22701c9b1aa95be26e7410b0f3357f6399b389443767885

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b18d264e26ad43a6a6a5bfe6691f8ccc

    SHA1

    10f0bd6fb067644bb9197146c0eee0832cd213f9

    SHA256

    fb611b1602fdf6e2d301950021578c4de29f9352b2fd8570d558e33177989be1

    SHA512

    ee489a2fafcf28a4e1686364b49e59f929e7b0300a08dc7805895c38559243a916086618db5a23a2fc27896c214d30f75838137e83ef90baeb597bf1788bd9b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bfec3aad6421b9c0017f33336c6846a

    SHA1

    ea7a7908d1cfaeec505d252b64da878dafbd8825

    SHA256

    9c1e963387e6e1800f482c6550bea87a26a59337682efdb9af8883cd9c7c1bfc

    SHA512

    a3712b454dc1424f4b1e45b9cf08a68cbebbf54099881028136edcf0a2b4c7f4df38f6da3d269a8f8ba53fceb9c4a85acac28da38cc63f12b291cafd56857533

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f4ee565fa985d2d9436e1e44a81ed3c

    SHA1

    1ed56c8c5211ad3a49786f472c3dc084de71ba10

    SHA256

    7e02db1ba2df7e38db78d600255100414df8d9e80402146ea1b076ce706f28a3

    SHA512

    e1419fc72884f0be6454e9721dd6786d470ad208c3d8ee2bf563e35499f05db680e3452cbee5104aabc6a1f8a9c6867f6b71180ccb139dfcdb3c08e4a045e25f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dba78e979ccca309201b711ea2f8ff5e

    SHA1

    ad19cdfe46b3df27edb01d869e32feff1b7ec088

    SHA256

    710390ed2b5a5b05b339efb608d25f47729a8e49a47e31b9be3d7d0cdc780e28

    SHA512

    6044f585aa13773bf9f3d608402e8596dccedc25651cb1f91ee089f16934fc933b2849981720bfcb5d3b47cd8d940cdc1563dc10bcc3d00725c620513142bc3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab8eb697cd6b295b2a5677535ff21416

    SHA1

    29bad1a0f3953ce63b6e9768b9c4325956652124

    SHA256

    2bb983a2a68de978f37fa93bbdfcaad1d867fc6834a1c0ee5580e7a8eff6d347

    SHA512

    57309237f9d0602dd8542b26bc156340eafe426a2d490645c2089b177964ad98a35abc973be217cc6a6dd938ab7ef6938bf0ae9f2858afb0d33452dea57c9ae0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ff7f23be1e30ce301fec81818a04798

    SHA1

    543b3d66269d1e3f477851d5aae1ab13b5bbdd06

    SHA256

    22f634c2876f9c54f31268e2805aa6abd1fe55f935b4fd49b0a7ddd61255a8eb

    SHA512

    c6150b7b9de48ec9d2f01a2c78975d359b267fe3c461cda180d1d7bc2b69117811e00c9f8b95c4cf74daeadea56370302dfcad8778d3252494e17b64ef9047db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98354a86415f98fb794c69eed7549c7b

    SHA1

    9184d1db9cdeca96639c0655a60273b1372038de

    SHA256

    7cab5499fdb0959c68a191b9a85a24988fa2c9e12fa17bb669c256a1c5daa3ac

    SHA512

    3fe6f6934fe5a506f2760298f6567e07e5e3cca7e624fa81a6f86a0ec4baca3c6990d6a465fb765ebe33f3100a4f3376f8cdb8cbb2cd3eddeaff53cc4f398977

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8712f4ec59231b97e11a68d711114d8

    SHA1

    7582cc8da8272573c4c57c9e2013d5b291bef6cb

    SHA256

    38c6a697e845a4bf46791c284cc1e2346ba0c75e9864f46063d822b9ee5262aa

    SHA512

    0cac897fe007479df331bf7332311fbc03ef23bb94b9215ba6622eaf036bf256beaf2f4ffe58f119b3a6d7660f39b07f4aa6a23695b55feaacb9f057b974b2d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9170922eb624a8b4647f177bfe0fe67

    SHA1

    aad0143f4d57f85fa8bfcfa050c360eaad735933

    SHA256

    af0d5d97151d95e1dcf6599d33b4b95d3b79cecdba66f3955929c8d382773539

    SHA512

    59c2f3d1ac840d333ba584a093690452aef79d33f2d7ebaf08926748827ca06a3fff02cc649acc6200effa8171161a68ad38299f30a0c3d43fa334ec4acac563

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15b95b7f58ed0f6c7e2162b0fcfc76a3

    SHA1

    1cd4adc439f11b0955d4b8772a515ade37931411

    SHA256

    2a0d44dd46d2656650bb63f67ca06e5bbfd3173b319ea8ffa485a5e96a357882

    SHA512

    032d917717e32db56b315308a3f626341f46d4cfed82839be5a2d084a6bc8add1e3fe3e4d5865877b1d5de230218ec45a11629bab600c23d45e9b1b25e2e8430

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd29e2d61cbfb4ab4e4e0884f0f83a1d

    SHA1

    790662c6ea6309631fbb1ac7d10591d4cf852708

    SHA256

    a231c015513a7c3fadb8882e05cab32711d6605b19c466b3c0191b538a4fe4fd

    SHA512

    5093230948a699fb344eb3e17621f70aece9e097e0902ba223ff3057d89789519ee79d0d2d20242f9ce3ea49fa224e3420f5a219957044b63c166a8d1461a3c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59fd691291d4e86b32cfed59aeaacbe6

    SHA1

    da68d7226500b02bd3a3fd19cd88a2d069d2e917

    SHA256

    03b6371dd28bef2e7cd726a2b15508fb47edef9f3fc7d95e4817220c9e361cac

    SHA512

    deb83f80f3d3110060751ab85d1d41eddbad063bee65bee91a3e14834e876d6caa904faaa93ec6aea234493aacc3f40b3f3a97b2422aee36fbcd501e6bd7c469

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c24f4f53aff11ae8f5d5de6113b60898

    SHA1

    1683f5d635534017b8746ccc781da2dfde162e28

    SHA256

    efa7f588ca05fdd1f2b9dc1ef365eb6536e28e607ff6dcceab92d82c44b20f79

    SHA512

    e1b62a6470fac5491832a7fcab3e0b54ac17b5b32b2c978712042b5a4441b735502dc388d30e903418c78c15f801997dd1670f8c56f1b6ef42eeb8f90bfefd75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3cccddefec92e9d95ce94c015c778ee9

    SHA1

    343bd302c8f0b1aaa79e79167decd00783285e5a

    SHA256

    cc1e993194b5631af9d22ed8dc9e9ebdfa899bc38fe739a70b6ee490b17307f8

    SHA512

    329119d9457344a1f462859c4bd2c9958e0de79a46843856f9139b8fa1e9124f19daa30e8ad172c4156e01d67f2ad18d79913f71f085e96f6c3816848608ba97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ba9b805480e55e2add219ae7f96a4d3

    SHA1

    7be8b49da0ca6e666724f25b5fa2aebf292bb8b9

    SHA256

    2fe7502a9227db30a39b8cf8557d22ce51e027e560f0e9ac19434b40bad1131b

    SHA512

    a1a85be4e131aecbd9e8e5d1a315f9b58adea8cf54d0dc70ebedccc228fd29942ef07b4917612ce21a7dfa31d477bb690a428bf88a7bc0bb3b12110b8e4f5d61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c48453c67028a8620e25fca020116582

    SHA1

    09f6b374560caf6ea982e1ef1b71fbbb430e0fff

    SHA256

    21705e98c02c0af27b10dec75b1bf46d9442fd7678e6c9d09d0969710235e81e

    SHA512

    a5c312f65dfd6e6345ac780acfa6e395eb782a9f5a7ef13bf5fe72c33d3d88d5a4839c6c704d519d4b24032589a8995103504a5136dbb6a4ea32c66f1bae1772

  • C:\Users\Admin\AppData\Local\Temp\Cab3D61.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3D60.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a