Analysis

  • max time kernel
    143s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 22:24

General

  • Target

    sample.html

  • Size

    218KB

  • MD5

    e8674368598abceae869a8d928657023

  • SHA1

    4c8d139a33a59e4d3d455f0bb24a3f1f2f8953dc

  • SHA256

    9dce09e50f394eebac03739811b34ad5e041ab4c5e6245cc4d4ac7d8101e47f8

  • SHA512

    ca93b8eb60a9c08d0942afcc9d539d1a5fe80da14f90a5f8c2599094535c484516b427393845a61414b2d0308d2f74ac95e529d313009c5326a204b40480eaa2

  • SSDEEP

    3072:SQUkFeSOFnSXyfkMY+BES09JXAnyrZalI+YQ:SDkISCPsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1276
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1276 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1540

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a81590ed02471ba4c9a422fe53b75a43

          SHA1

          12a3bfcdae0183859fddb7f0af1fb45ddfecb420

          SHA256

          876b8fae4fb2a5b5fcb0d3573ce702a49b443cf6232e0f2bbdb1de70b2c21f16

          SHA512

          87924dac4a55dddfec0dc889ad58b8323d27298e3719a364f4de43c50233edd1f79c06415c3c7eead6f91795bce8e835ddee857cf76da8ad0e30154bc1957b52

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          993ad313fcb90b506253d0ad3c10c9b9

          SHA1

          7606ddb2d4fd98ecdecf47c4ab241675567f2fd4

          SHA256

          991b4fd0d63b291b298a42c956f0488da6d61ccbf34a6ef1dea2f719fb2f0559

          SHA512

          d789fb5c74a0398f6fb2248cfa9734dc28e1a8de77a2fbf48fed22dfb4037221749f0add391b998a285d1ca47b69583a39eb186a04b5fb63948de0b6850c4550

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3b1bd72e0fddd42f08ffc493d2a5c335

          SHA1

          a1e754d5fd0c1b695f96a93430c4a883ccc6eb85

          SHA256

          7bd83723658c89a316d6544b6999de8d685b22381734e9de3d579d7ffdcdc8fd

          SHA512

          934986580a7979be2489a25181653066a075a1b8f43a53263ef9ca9092618719c8625321dcb1d95d3686a7e0e9b8e8b5205e46044da50f44f55e7f4a72813ff0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a7df3846fd179e58bd2a0c3685ccb89d

          SHA1

          c16d3fc03cd11236a940eee329bc9b4f8ff3c641

          SHA256

          5b521a0616a4080725e66584791c1ea9882bd5ff7bd73e8eac354bd30042dfde

          SHA512

          96e241a25e82b93bf9b1019a620bb9a118ff1765aa88296ba15491cab267581d51fb35d27acc5cbb2de427518c356476cce776790d16be430a318b77383a7ce5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          011f46fcbbe6866410bb7b6cdbb0f05b

          SHA1

          34c2b7698345f4de7e7f2343a2f9af8249b99628

          SHA256

          244cdd7add25e94fbb790f9f6b0a5611b5673102abfd80b4fe8f526d8dd69f78

          SHA512

          db227db8a76e336f20c0557fa2f7c8f9b8b86c8d8b3c1c46cca9524c6f8d7b4d883e67f756408074465f377639d40f16f9da7347c10a5b1f9fb93a087e24b44a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3d504c6a46772d6de22a3f47be76ede6

          SHA1

          4520d06957841656b683f547475c0e843c05f666

          SHA256

          c66931b085e7141d030469c4f21db94d9094eff049d22d7060081e748619359e

          SHA512

          9c8f43269eb9a51076d4f1a88fbf1118c618daa6818eb6e05932717970dd101bb2bec4d1517d797ba12a632211c01efa16f854cc18fda62319013195e19e4799

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d59b8562fed52a3f835c3ea0fc0b857f

          SHA1

          20e5efeb004188c352a69ac36340e1ea163c1760

          SHA256

          b2f5a4f6a6871db7af0f73da80853104472ce59a2c1530ba28faf9dc58dc2b24

          SHA512

          f08b11c54df8b584f7bc0735c93ef1b3a97bacaba0d5f6068660b9c8437e24d6e33164eaef417c23000cd875ac8a4d5555c21f04a76e5339386836ef2ba3901b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dfd6f734468bb2f2b4d99034bf2fce35

          SHA1

          ecb48c5f3fa13db14a38c3b86e7e8869e921a69c

          SHA256

          56efed03defeca0b140a4b451c35b39c036b264147d06cc28c67e490f87e0521

          SHA512

          64e588af4aa9699cd8137adbb8b4a6e311cf078912fda0d6c5a04c4fbf6a39dbf3a6356db6c6456258943f8a0ec4ba718313c55529bf03c6de64b3af06075e87

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6ad2fabe53b52ea814e6d01a9fe23c7c

          SHA1

          63e0b0386905b8b3be97a456b2aac7790550b67d

          SHA256

          f68c9560506ab14a87c348a57cd0a4c18fa97cf55b2fdc5ab93d677e51f79944

          SHA512

          c5c2da87f7b426e12148bb35138e5cee448850400dad3ecd2cd55b4fa129897d35e3170034dea1d2ddb8c8debd7beb9c80150b7c830eb506107dd8995cfcef6b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          37612bdb2bf2ceb8f3ff9ed723edc571

          SHA1

          2ee1906704f06ee45926f45efc618cf33876d724

          SHA256

          e0a78ab181b4147d1b5dfb48a25cae524b05d2e366d737e42e19d5a33c89896b

          SHA512

          7146b08ffda5940c2c68b51aef5a6fff2c900e408b9e3c88ce5bb5b44b443b9ef7f348b59ca9ff032c05961ba7601a46e12ef25ff0e31bbe69721937c8ddd9ea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e97e4d28749328fa1eec6c8828fc4fbb

          SHA1

          459f96a85440026af4d0f7a5941613e394efa038

          SHA256

          b42ffea8dbc8e2ba647d7020533a8278df1fe107b83da9b328d3b74756076fdf

          SHA512

          eb6049d869c4d0bd49467245058475f681b254582521b9a23b9a91f46a33a249faa5d54fd6fd5cfd10924be2c345eea350a27833de08f04876c0ac033b8391f5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c9ad6717379424944916d6423359aca6

          SHA1

          846a84bf587c5ae038687165f94acc1dd835776b

          SHA256

          68a1fc1fcb60e11a90a14b16c410973c2f360a84779e2965f4ea74e304c22e96

          SHA512

          05ee4a445bca6f7460879f35a8f330c04a8a3e9a7d21937b80f6c16de78379e46b660be2b35dab107451162783dcbba672006be24cdfd731e68f97f11a33f662

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c321ed6f9aa54ddf735576d576f17e76

          SHA1

          4197f2950b85adbc1386047fccbd053d0b9dd3d7

          SHA256

          4f9a602ac3eda1ba9df029871590901b255e792801b4aa49583f4f565571d414

          SHA512

          3820fd7fe462569f95c18cef1da17907dc8a12cc8a7b4989ff24d9781a2bed0e22f07bf353e649dfd9a1df5a3d684a541e84906b52310d2832d2576cb999a666

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6c48f7416d563a7f44463b88601774fd

          SHA1

          f19fb500e7c069a17bba4e59f26f78705e90e432

          SHA256

          a01eb9117fb525030d382ea0a4aecdb1f912c85c68e3abbc4b2a9ce76b5bbfe3

          SHA512

          113cb74ccff4b3bdfa9238f9a4709b82494e6717d0fd8339dcae9c1194e5e819372e04f5ef433e910ab93fd0e4cfe6913ab566741503e423001307143e574b22

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          51a14ca8c2c0ba571c5f7c13a196323c

          SHA1

          aacbb6427b66da8056a200c14215ddc2ba9a767e

          SHA256

          41a025eb9fac9b9fcd972cc63812334814d1a95ecfaeba7a13a8c9cc47c2f915

          SHA512

          df71f357b4ea1cb983832cd76c589b080c4b4ed2a6dc5dec574251649bf22c99a760252bb2f5a47c80a159fb6b36ad7700bad8b13ca205f2a48c90ebea0c9a99

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          34d5ae4551326274a396e52db1b281ef

          SHA1

          f9d09ba8bcb625a3b92804f858e18a964d7d5c2d

          SHA256

          c9cb1331e3b7b61c96fc97b54ab97d222f9fae33fb5814e17650dbae6fea612d

          SHA512

          a0b0b7e8dabf463c768b49fea6cab4c9182d4000ef2cc21a92bbf421cab9ce58826bd1ba6bd112c20266949c968f3c4e9502fa7d0b06d3b6a4e8f110524f5a9a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f04b7b099a14d06315761b355f806d33

          SHA1

          947c53b1b728595b2ffa4fc1b1ba725507e60c79

          SHA256

          373f69f157cfd71294ac8a528f060a1cf66873b22e48feebaac8e4fa8de5196b

          SHA512

          94f4e9a04be6f6ee8308fa7b765eac8703f6ffd24660bc3f0d6cb473155d83d819d8184240b69b3a9259ed953aafa3ad732810f974997962f4e625af4023df03

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c70dafe88168c4b51a8c8a6cc082477b

          SHA1

          ed6056c8c8fe9e1600a14dae4f8d6af060db7e7b

          SHA256

          8c04e37262aaf196cf4aea8daeec0415e4f5a250bbe6e4aef8744996fbade417

          SHA512

          51ed2adabfbe02ca2a5531bd35f0c9c6d1fb53cdc27c4436dbed47d880a81da64a930c05fd0eac2b280232c7791e97004d524f7e2d921a8b9ffd3871c3cdda0b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dc7976c62e2301a231440be531c85463

          SHA1

          486e348a2b7f720ed68612b6b9786d4f6823e7c1

          SHA256

          60de52f91b6974112c41c98be7bafd77ab2addfcb69e0fb572d2c776d6e2a729

          SHA512

          6f3e71dc816c94f7fc4d9fe2816c4ff8c3fa2324e901c6d9c9bad2f2c9c8f3084ca3668dc01ea06014f040b44b1a0c112d1a00faa7627bc5a74c6929f1e5c33b

        • C:\Users\Admin\AppData\Local\Temp\Cab13B2.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar1483.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b