Analysis

  • max time kernel
    144s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 06:25

General

  • Target

    sample.html

  • Size

    218KB

  • MD5

    5d24f153770dc59a2718fe3232dc81ce

  • SHA1

    6a89e82ad2e23bf7e3513a33bf221a72c8db2817

  • SHA256

    06cd0f8ff4a56bacd24e4a1af8e25e0e105a5b6a2e7cd6c53a46e9161585af99

  • SHA512

    3f603557a7855998c333f8896427aed7559bbf1b7e577c97bf09cd4565d1dee380a021c33639d2a209ed04742ca2ffb615098fe844a20a7d1eec8dbd9d601986

  • SSDEEP

    3072:SxV6b/RkxgnlyfkMY+BES09JXAnyrZalI+YQ:SxV67RscQsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2292
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2292 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1376

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1411f78863e387156a1fd3bd54a8b8a6

    SHA1

    42faf66910d194e13efb09784bafc2742f8572de

    SHA256

    8f64281f37ed59d7c707a9a07afd7a368837910fd632383a35a79ef140694346

    SHA512

    8930db94cfb2c11e552d081637b56c867fa7f98b361f9787e579a0ee120a65c381411b4b7cace7bc349d415b93a19e51c9f10cbbdc738341dd4403782b7e46b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19aadee0cf57da4242163b454d6a69af

    SHA1

    edeb57f67292006306058864b23788f2c528533c

    SHA256

    5ca990a643044c3c39097211edb2848b148ba63833b2a9e7e1adfaba1cca6dc3

    SHA512

    fada549fbc6d08fad9f05d891c242bcf584816998b1af165e1eb700e210b6a43b4f063ee31b14931d090118ba4e6ab2585cb61e60ef1aed4cfc0a50779ab6740

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bba0a511408984c64c578343e2b6f3a9

    SHA1

    1067a23a970e83cb19ee31f143f027bac791e5cf

    SHA256

    d522d4adfc71d146ded28fa1140459f37b6494122f04aa5e79c405e62a3ec993

    SHA512

    acee8aceb718d395826ac4c7519f36076de7f87b74a64b2785e957bbdafb118e2432eb200cb0ce2b2d154a618a28b52fd05c314ba0d5616dbf5334021aee0d17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8ca9ba3e95d6579af88df0cb893d287

    SHA1

    6a114de58056e411431a2aa0f4789330ae16be15

    SHA256

    338ebc772b1b3da2f88df867d3cd93aacb9664bc13bb14c77202b294ffcb366a

    SHA512

    57d46f3d04aaa93db4e2366eeae8f10b6e1c4790087d62b97a25162e10dfb5e66a30206da403f8e79712dff92d3afff8f1959e6fa43e470b77378c3a0982c5f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b52b5a5b53805b820efe26bb6b558f75

    SHA1

    0d6ec7a044b52a822df84ca6ba9693756495f55a

    SHA256

    9361432399fb0ac9f39c792e6838654ef0eb7da13f86f180c6839291f0e3d003

    SHA512

    8f036b8e8f8870edff272b0b0b0c1113bac36018f24f29b4e67d7e6eee97d9e8c049395d0f40c5f26a8db1a3931652b63b5498f6465fb569eb251e3071b6d5b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cf470b150494222fe2a53cbfbe86495

    SHA1

    e464d95ff72a043259a743ebe84f1ad4ee89dfe0

    SHA256

    1cb95ac1b9de5510fd29be0c6e362040613a258798343912fb19b610b565ca9d

    SHA512

    b3eac1acc9f5ee1d7a21188b02d4ce791debb3e3239ba3a60142376563e62939bdba817f21fb394020ac0b318e25ea5873b09dc87b03adf76f024fdcdfca9601

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    477f09e591ad72e8b2fd75799a87fb6a

    SHA1

    5eef27aa89c88a26a3ddd7f6b6329de6245a3e0e

    SHA256

    7882102c8f8c65e79b4cffbead564ca086e8d67bec65d115877089bae625251d

    SHA512

    c9ea54c8b776b7efd61d4b75ea8ef35260887dfebe370c55b746961ca774e6bea8c8bf2c12ab842d31a71d1c5e60a01ebf2b5c0fafa4c3ef64d588d5a3305482

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    427ec9a6016615dfcef69f4078e6cbd1

    SHA1

    61d6054d696f17bc6f4ec29a7b338cf974f8111f

    SHA256

    6e61f02e70ac798c2e7de6feabfac306018c787cae6fa2b8b889f30f90dacafb

    SHA512

    6d854621b95306e47e0c406f60dd0c735e1018b3bf96808d5d09712300180eb3468965d93a758a5499117e003fc6a4ae2b9cfaabea5d607f2850058ac301e22d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    538467cc66002d970031f5eb570e6b77

    SHA1

    bd351f376d9e01023183677cfbe0ae2af3d12633

    SHA256

    ab40b02dd5fa3e599781ac8ab427c43527f4252779b49c0a4431a5c859b1c19c

    SHA512

    3dce0b43574b80da4f1eea89bff6de30dc5364b450aacbbd3bfce7a74e87dd48757a67e72212300b1694d60294ffbdc2b263665efce6ce007cf650eb3be75f67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c0f97b16bd3ca358a29f63a061a66a1

    SHA1

    4434d9891620bee91ca2190bb904df8ee392dea7

    SHA256

    2a82cb6e27f04a1cf53edd7a9773c1949f80d9e0ff3536396988b44dcd31428b

    SHA512

    bd7a2b49153deb91e27f0429a4a7e848f24daf79f29501fef9d04d61ea58582d1578cd395b8bdce2f27a47be81162cb3bdf4db7569c55d669bcd0c51c84bdf1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92deaa8e29bfbb95d3fc70e55bf4d99f

    SHA1

    0bb80ec54b4f1f0e58593464a6346e06b6ee52fb

    SHA256

    d53eb16e66f0a5806743a3c979824b6b65322ead730040d9f18367c922ec6e2e

    SHA512

    4243d86772b0134eaebc11e25d4ec2357f14c96df31d6e56cfa7fc8e4c343756dd3e5b472e9064bc956aaacc32ce80e664873390b7b8d79bcaec1085f1b1a46b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    636f3ec0a822e804710e8b5f916d82b5

    SHA1

    74a8e1b8e5dd9d57a5f736cf88f71cb74ae7e70e

    SHA256

    f1e09618f25af1c34896ddd57c6e1f35f741b8167f4abc925c257d46b3819451

    SHA512

    d6686ddd1b757bcc0a73514474010c5ad5c04dab835e46e390d04dc6c6b2367689aebb663d62be4af5eb26171744a467e68e17bc0fa8ad6788700f07d77e8292

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a0e37a3e8af30784173f6b1308d66a0

    SHA1

    92ff4b63accf4555b8530b8def87f77f478cdd91

    SHA256

    6f1e4166a2f5e9234168d29ff5b0496a3a5e4f56de0ff62afec9f9ec5d521434

    SHA512

    2e037b276c52de41d59eb149a9a953ad5186981b4c53435e80f3c1eb853a70b38bc0c2c971ac0c71064a90b04b261cd0170be4376b4f8ab9a2c8c1ef4f33005c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ec8d1b7e0a05b642943ff1ec62ef2c3

    SHA1

    a69bd0eb9581cd36357c5720261d4448f01aede8

    SHA256

    94c1b846822500a521d276d803d0e09e777c7783055332509356cd6c91b0e604

    SHA512

    448c8e580bcd17df0bcb431d7429df022c75e30ac509fd13712e896a26b5394d14833de8ebc9472ca7e0e69353ca841a9d297f204785fe437aa5a78c398e0302

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d68ec41c18cce4c8f3d53fd0e6a7bb7e

    SHA1

    6bfe6c15973787bb59d3933f359f38e28cc59a0c

    SHA256

    576a1b8d870ac9e5ba567861ad3dfd9016aca8697987c9938edd7d8083979777

    SHA512

    fc099ce7af7249dd5e1d6d3602f09ccab0c5d833d9045acaf5864001a1228af49a0a3e1db09510d6706a137b06203ea63e2d72c21890b308bed8830ba5185ef1

  • C:\Users\Admin\AppData\Local\Temp\Cab1759.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar184B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a