Analysis

  • max time kernel
    143s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    24-05-2024 22:04

General

  • Target

    sample.html

  • Size

    218KB

  • MD5

    7ae47113d81a496a08634ea4d6452b40

  • SHA1

    da0d5d347aa0ea7c65b164f29bc980d9184f7758

  • SHA256

    19879059a66962bb60213d5923e564685fc1737894e39cab5bc748525f4c6a06

  • SHA512

    4b36f8a749ee5a42552615ba08d5119c1d550c381c094747f27cd410bdb4f0887a7898a7e37f9e2070b9ee34b771d171a9f39216b2796e75a761d44dbf819ae4

  • SSDEEP

    3072:SYP8Hlh23wNyfkMY+BES09JXAnyrZalI+YQ:SYP8Fh2AYsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2180 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2600

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    790c26830819a17c644554ab3c4f6bfe

    SHA1

    105f9fbdff9fcaea03269ae99c975d4f77c721f5

    SHA256

    89fa3c11e88a4322d002bef71ff96c9154f516d90a623347c71ccf7500786567

    SHA512

    596d3e75a504e24cee9bf336e7ba82b4e7e34b3d36f4446595dbdd096c909956c6657a40b38f77245384df62d3f35bd3db84eeba944dce76395152fab9d5aa94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d70c496e90dcf0e80cc22ee19058cdcb

    SHA1

    61a294ae8c31f0caf94ebd63f1775f89b04c7e26

    SHA256

    035d881dffd01d0b884f59075266f0953d013111b908eb7649e2776a28a1c2f0

    SHA512

    d89c2df6be18d5e5d2fb69389b4bd02660ab3c6f8e1a0faf4cb499f388c380a515fb57bb326c983d09d0497e9f4a3603c2896423232de6c3c86ec99ed83f2f2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b068881a9aae6c8dd54900350fc10d0

    SHA1

    decd08285196abee95c067b2bbc34ca64c0188b7

    SHA256

    b9de742df2e8eb8c67ae4efa622d963ff2b61a1bc061fe26947303f78003124d

    SHA512

    5872a818a392a879a3eedd36d627bd3aeda19a63a8d30187ae396ff615a4723a93ab55943a61ca97307b7c22619714ba218229f498b3d15337f97d12414ff2e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    704c7ad9f40d505093a5a9887e0a4bcc

    SHA1

    0bf3098a05669054a6ec285d568c0199641a900e

    SHA256

    050539c4560c4ecefa67357fc6b3dd34d094d25b8f9be2e4eb97cfe15389d5a8

    SHA512

    a9e83d4f690e8f4733a0218a9df576219be01fdbebc9e75a72f1dde0ce7c51d8765d9ec14801e7bd2ae91fc3145529063f699f241c1b5bad4d791e2292f23653

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3e8c42893f9cb593066a494670a0446

    SHA1

    c5eab892ac0dc27f21fa032acc3f726070b2dfb0

    SHA256

    fb4a65649686dc884290eb9da8ad363adff9fd1d1b8b88b2555dc8bb6bde25c5

    SHA512

    288755de88a10b7c139e708822b96b846790e33511d268fbd2c291cd4a15eca13721e5301ad36ceb88c50c6b29d8e0aeb2acc01e67e6b64118686a4f7105f36b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f639bc9dc5f3a248d6e84ce93ea5bdee

    SHA1

    104db1fb6771e003c6f41178c2df756aba4eb2b7

    SHA256

    5f97564c305abfb0056d6d2920e3f74b63aaf1b72a836d256f70e966747a9f51

    SHA512

    4ae914027a4189dbf252305c0418c5ad4a8ca75d0c777bdc25938f46f18fbdc45c6822f9ed4f6b1abd67ee3e39c980ca140358f20dbd35857780ad6b7c9e92ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2166614803c9da9006f408d1df4414ea

    SHA1

    ac9dbbce7c39c3bccd9f9cd67557e4ef5083f287

    SHA256

    70855897b05f124816b5d2175b3b29a9062f1a2efa56555ac554372895855be5

    SHA512

    b3c1656de717d5a2725c1a5014f434dba6f5df35ab9327f34e6c5dcff765e2de960f23b1209420c1df488d5cbdfd575aed0b7d890fad33d18570b8858bbc6be8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6aa51f6c913ef52b7812639d18029670

    SHA1

    f3441c46fc58c687a5cc1bd9dbb84738908423b2

    SHA256

    138669051e4db306f61609aa228411bdb09136cb4e1f3f47b165fef19e2c01bc

    SHA512

    4c68bf01963bd60c5994bf934622eb61e0fe9db20e257c5edeb10280a47fa8020723125367d0f1d0c873cc173659514b31a92119e1304defcb898b85ccd4da69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5ec5ecd047185214ee309856ec8e324

    SHA1

    61ec8663db05be673e4617af967cdabf426faff8

    SHA256

    a2fee1600cd3b389b6a8ecf361ab9be7ec6c93421b4869abb60511d172e0fffd

    SHA512

    27f5b7dea399148483c31fd2f9214144de160d74ac5decb255c0ecb21a65b33ffb9f167e0e7f7044ce895ccd1d52f616b1a65cf5a046f29d12e67d25c9003dcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b0b0fa9f4e5cfc3f2a7717a3312f872

    SHA1

    589ce231dbfceb4d5a3046cbaacfd5e51f2b4e4c

    SHA256

    beb22c9ec4269e17c3661d9289b0ae268faaa406647adbef34f13f5c128f17c9

    SHA512

    c5fe4fe54593f23dc7388b8274b59c659ddf7184e137945231ee9699281b175f53a6a212f1135f1b638624563b56e38db6d1be579e81470bf311ca0db0439c68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66d26440783b83851d1238da1a6b3cb6

    SHA1

    4a3ae77f57f0f3564ea24fe2522d16ae16487d88

    SHA256

    9103123b64cc954e47a17c9bdbccf14049fc55255dcc8815aad24fd850d5ab71

    SHA512

    853c056a37ce89a6847ca913356094c6a18037faf7d1f2a539f6389e377559ccbe8abc923676ce37cc0b948880e84736e76a1e325d5a32ff13059e1cd0bc1017

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88b0d4041270c2543df0ca584470adbe

    SHA1

    aecfa610b8344bd3a0ef2e5fb572672e9fee7500

    SHA256

    b95fdcde0baf96b8555fe79d0f5f6149bf87248e6c6498f691fe50b551345910

    SHA512

    7c9fbaae95b96b7c72745844a31007e4191f74b17fe7037fa78da7310080d4406239885fe23e765d362c1733d22d827f0909c6a3b05c03efa8d7e4b4c3a9d65b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b3b6e3d75ca94fda90a69ac20edbc91

    SHA1

    13e937ba7a97d55fe16c165e9f23b343bb3efa8e

    SHA256

    cf26cca0c9be8721d0b10e6fe946686c2503ab8f430672b2414470c6cb604ccd

    SHA512

    c476b7891a8914925697d8b1637043af5228a42acda76a7f0c4be317d5475bceebb6650ddd4d93c2c92726512820b29e10a86cb3f5970c7003d72de5fefbfb91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3919a3a0037d138831b614661cbec1cf

    SHA1

    eb5ade8c5629c28793de8022dec5fc58b7717573

    SHA256

    eb2022ed3874faac8c791371db73332e1225f4ed64d9418c4ce25fc204fcfe55

    SHA512

    25621e49e381ecf19ac2c9206b0e25baa7898331b6bacdf2adb14f1670c4e303b7f19032e8d45a6463488c0d82885ccbde96d99457e18eb2410ec0debf2e34be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c14ba384c4d0541c2c6d7c7989b75aa

    SHA1

    082ff0f53d88ab8cce50b97d8180b931860db703

    SHA256

    fde4fa27f9e60eb279fc8edcf676d414513a182df62a38026819ae8b41ee813f

    SHA512

    72634f68499a295ce29773b696fb96247185392f8d7bfede4e80ebf9819db521a2485d4c7b64313fc55e4ea71aff6a40d77b7932fa947583219108f6d1217965

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57559e709f450f6218b2313af9333276

    SHA1

    d692000233aefe024a0a21cc32e6a77512d75dc3

    SHA256

    8ab776f419efd1c72f860603e10b880d6486d99ef0a501903cd8b11e8e806af7

    SHA512

    5ecbd6cb74d99dbd96ab32e55c14984cba4add91ad2fcd14382f65fc098625ebc06586eac817efd0fdf108f8406f4e0d196e7de9110b1379f4648d7b75551cec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7624c4dced6ddf86a21d41b12e7c50e

    SHA1

    dd4bcaa9564d0a58e5030a4d72cb364a957585e3

    SHA256

    2de7781584dcda3ed3d44e2f28c384913a16b1ae7ed43bcdb019196f9e24b9e4

    SHA512

    f3954672859d43e128cff60dc8145131b36576e0222286266040f7e4fa08d0c2211dbe70f80f9c04c4b035d68ee6228116738fe0db0a7c5ac3b2259e6f8965ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    054103636856e9032eb1b897d6999d39

    SHA1

    5e76407bfe528e2fa0b8746d860e07a42301c049

    SHA256

    137d3e258a6c151a208273e617f7bd1857e3a9cf8fbe85ed2774ddfddac499c4

    SHA512

    bc22ca48a66510b36d638365e6721fc4710aaf974d9d18c505c8dbec27cb9decc38608629d9da04d87f31460f07c756d944309317856aaa912072dac77df7a3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a33d907c1e2f6a244addf2df52803463

    SHA1

    4b6bc2104659be9abdb7d5f2c736bfebbe78ede0

    SHA256

    fb6b883be6c27e9a2b2840a38fb98298ba592bc8ab419b3e1c60b1252639e82d

    SHA512

    49ab216fbaebe7bf72f6bbf8a07fd7614c46dd3b9f1e85479e80579afb3127f049ee7b922a16087573887ff786895ec119bd018fdca7205f5cf8224beaa65a11

  • C:\Users\Admin\AppData\Local\Temp\Cab1E2D.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1E8D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a