Resubmissions

01-06-2024 21:09

240601-zzxvbafa7v 7

Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    01-06-2024 21:09

General

  • Target

    01-HTML-files-13-examples/May_654380.html

  • Size

    61KB

  • MD5

    e0324c51ad89c8d548b0fadcd5433eb3

  • SHA1

    2ea3be2cca7e35dd26fa6c35bbe4052ec5d6a9c3

  • SHA256

    e8dcc385584b5859ef5674bf26a986957a6eaeab87389fad2c9bcca9ca900456

  • SHA512

    142df604bb855fe0172a43bf07ce70e3fc7e8269d021cc9a2143b6a72e84194a10930fcc496cb8ab40119d64859466581acce03a66fec14e72de3ddb45411615

  • SSDEEP

    1536:UzxuJKxK7kdK2FlBNt0kLENLOZ3m/AxH5dyM:Uzxu6xdK2F//B04m/AxH3yM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\01-HTML-files-13-examples\May_654380.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2264

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3a280e17469fc9a64f9177b76acb0b79

    SHA1

    4271526d4a0e0d5264b371824f2825685537b1da

    SHA256

    fadff0d860ef119a8df40d34a881951ba0592178be50dc11b344a8d22cc3fd47

    SHA512

    9e8ee4c9958d9fdd57e477ce291255636026088108f3b43c04150b8c60fe3429b65999bad0291aeca1c5d92810e20c6ae00e253d0187253e244e57ae168cfc13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69780efcf913a6ad15b8db1bd8c07103

    SHA1

    22a19f3f26ec2f93928c40f8e20339c863d89ca1

    SHA256

    959b564467cc6998748322b13021520300870370fe2e16282dca07798b68211d

    SHA512

    814460db2c005d8018c8ca87901be584e2d62286c1ba4886d699396700c29f71dabbc0fb82847147ee166ab410ffe43ddded64fac0b0b71085537c30bf766ded

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3208577d35b0d5c56f070b019e2f60c

    SHA1

    79e60e8cdd8df242abc75d81d4e3287289ab3551

    SHA256

    801b3da74e58dff934b94b6d6f596f3e86dc2f4af6b45b903cd104d42744c9b0

    SHA512

    2f3310c4295df9ff2ed64eecbecb4a05283d294121db11020eb858bee0b2a09cb1ecd216e9dfa014649e8f2e0e7014ea9fc6190850f8b59ac23faf98c8ca2f2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    577b14b92d30fd57587cf0ea26d1870c

    SHA1

    6f03d5e405ee97a0181f7bbe7f3b43fb0d6aabd6

    SHA256

    0b92bc68d9de217fab475dd15022989a284b731a91fa0778e264fcddbef89f50

    SHA512

    251324d0b45036dd9a2368886e27c8981efcb606c6866f7d797486da9c710c67de25c0821a4d4b212785709fe91cafade5bcaf8163624eba1b85ad99451c8a6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a692e9a814be1f885acbac0f99ce115

    SHA1

    5af891ca4d209b4ba6b2973030325f05eac2e71d

    SHA256

    02a5e1264b7e1d80f8b289223ec0a7e96100aa7be4c45badf2d3b2f09c162868

    SHA512

    cbb0391253078a33758f1c5df7382aa0d0ded923c73a5a716bb5ab7f6fb0293aa1ed91636e00a80c28def4d9cf382918194c2bd41a34a4754ec7bc1a089ba2ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    baca81cfa8a198082fda892ca76d11a6

    SHA1

    799d40e99ad7fe844c38ec79d54d25ea0d89710e

    SHA256

    f2fdc726afc47458907614662a32d7e0dc78a7301d591bc1a5b653fb45bd4794

    SHA512

    a1310937f433270da690113ddd9da5e109d900b77f6d300b21e515d09df2fa52a708cd9ff212094ba8e2a953197c6ebb599624656ace4def164aa46245b2694d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a273f1a914041600aec129d08fab5a4

    SHA1

    33dd5549c1aab17cf0ba5b4f4172622c73786bb9

    SHA256

    ac0b054e89f558b5b277532a34f7c8c81ca78cb1be34f876307db930e6da6f3f

    SHA512

    9e17a10540720177f238bb5b188aa4a1886267548644ed119cdf85fc9dec47c4416886fb07e8979d19a324ffa8cb371124981b8a144bc37b13f0d70b70c2abcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    302fd86983d2af382ca1474da0aa0c05

    SHA1

    cd76ff8e4bf8df5cd6bd6ddc12974bb81ed43ec2

    SHA256

    47da2f9c28c85ac686db36a718e974fcb667a308bbdbb1911976196af00a1ad1

    SHA512

    cd65fe2989f4c380f99d879aa3f17264b682bee3d9aba4d70d886f4ecd1c8e4b466c86860a841dd3fe3bdad5517b446cc69438d7ccb563f1a93e6b043609448f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44265ea29e9c0de6bf7a64dda09e70cc

    SHA1

    38bab25a85d3d5e5c5e7f8b4dff4ec5586724a68

    SHA256

    dbc2fc4c1b9ca58fc9554bfc7bfb2f8fda8515438feba9f441a0aaa7038f5708

    SHA512

    0866220e5b8e777cf2b03cce3675fa9222fb55093690073bdc09d5b846035846bfdbab782393adc410372ba377ed20fbff152043965431b178b9d55d420fc82f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be1363d90ee1a0ad1e6128e2fd9c236c

    SHA1

    d1897261f6df773d5c5a6fd442ad649e77706a43

    SHA256

    e7d14492cfcca5726c1443910bef4efb73af51fe7c87ce8ac69b86ba166186b3

    SHA512

    a7ed5675c3bcb816a03d4aeaa4c6909e2b85bd6311dada3aef2088d12fa0b9c506d8013c74f355582a198ffda8cd68af959156d349d92195eb82d2bd06ed9240

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3a3ba64569863862148ca913bbbbdfc

    SHA1

    e935eedd3736e73b5768adf5517e0479d0ad6376

    SHA256

    371cce70bcf466677599be6f7b520f8acc76c359a1c9d6a80594fc439a86abbb

    SHA512

    521e88dcbafa72e068c11900692cf01baf062643e67b4eb9706c2edf501d3039b45fefe57f5dc63d6a66f1d49f85215196cad7abf8607f610eaa771713d712c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fe26e9cfbcadaf898eb5e5af827ab9c

    SHA1

    59fcecac35837320c0f197f21ca38005f0bcd837

    SHA256

    240b6ffa9ce3f9250d6a0ae32fb1155958778abd2fab4615e33ca37fc8c138fd

    SHA512

    eb24edf33aec44648d2c2c3624fe0436a500b346690cb822d20009910e173270dede474b75be91b32573b3228d353b0bbc6e8c45c3dce6f7f5d5e21d22f59718

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    797b8560953adafacc7811a4ed7a44c9

    SHA1

    b1d8bda67f814986b77be996a1fc9f28770e4b8e

    SHA256

    51445e588e626c46d8f0d482eec9e2e6aa79388c0c16377bb19f47cbe94da7cb

    SHA512

    f0b5c9a18b7ac1057c2ec92e4ec08a4e0acf36d349a812ea3ed2a8a181f88ae0faeab0524135e57990467670312c2f524b408c6a8f1667f386f708d14ff7b88e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31978aeff3b511880a20e3900d80487a

    SHA1

    98c2c6eaa8e1167d7ebe578e2b51559351f17b55

    SHA256

    cbdf487e0e249a0942299dd3136267537f77b913288a7de261dbbc0e820b1e09

    SHA512

    51a4529a45e2ed394f158276b2d5cab79fd1594f0959aac9570e66375a29d7db1b50caa5a6338ac4aa776843ebcd48bde71e99a2ef2bda55016a97d8f3ae3f96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80531d2a1b8a494b3bf7c8cc8fde1c93

    SHA1

    2fe21d74e675e79f3672a5fb9d1e6126d4559236

    SHA256

    8225e5d19be118f7568c93bcbaba423a9be55240d1d9b323b215dae737778a67

    SHA512

    b9ba90a334e6c73c40759a223b5778e0baa5c7a02d66626fae4cc71dedb0f4977f9261c1c364bb48f01a6d3755d7b3b86d9c50b9ce7d0d3c7bce568a7208d8eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4186e843ccb516ae5d1e620d0e8468a9

    SHA1

    a42366c5f5b2b4f208ac43ac6afab94feb6828b0

    SHA256

    0ad6f77dcf58dc208adb7595a365030a885806b93ba69381a889b21d74f78b1d

    SHA512

    f7ce41274c76594580e97275732c73367d0e72f123334e717881a26ab7b36358dc56d9d1382c9f13183bbe847d888e5d11fc1925986db9a3a658a2a5c74281a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    949d1929ccbd13699c9f534de8cb8445

    SHA1

    4f2ce0723d9a2449bbc5815bae5702abefc5fea4

    SHA256

    7e596adbf4072f2c6693fd44c9a4fa580ca18cc085da1e14b25e9d048893caa4

    SHA512

    eb481587a0eced731bc7c3616204153dfa9a4565d490323e1bf3f5e12135e9c671408b246de13cc1d27afaea963a6486409c4b91907524b8a9f1ee37549408d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4d181852c0dcb6098921e3faa287404

    SHA1

    69b1c3cfccf8e494fc3b255e59d843cb13cbe56a

    SHA256

    0f12d385795af3443e0de5c7a969c656d6e54d5c7ffbb9756263495155ce1e32

    SHA512

    bd1af603866e276a4fd2c4447cabbccce6c55ef4ea4b4e4689170e5180401c2686a4d552c924581254abee6e31fdd7b14ec99cd6e2df6318b16004f25e35b57b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1802ffb88cfa46e381bb6e4c9ea57ce8

    SHA1

    51c5bcb8300a887febc877c3c9f314bfab050cd3

    SHA256

    21fa5406a9f4faddf6d53925ab5899a76ea7c77781bcdf52f7c4a49a34b8266f

    SHA512

    bf4932b7e8cc5af71d4b6899b3b985a211e2a001ca8cb4c577613932ea39947a37a1b2debee9de840160bb6328650a9ced704bcfa4c9839d521fdbd5c3821122

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c790fa8143c1c488e6e03ea1e0814302

    SHA1

    db4195555ee5d3b42cab3303d3846d1637292bb4

    SHA256

    873c3469686c4f17c2fb39bbc865711faf9fbeeb89af7e011b6b6d64ec7a631b

    SHA512

    e8e7dc0e03ce1915129dffdd5273f9ba451422c195ff64c6f354caf5594cbf840a0ea1b5951f37f7f4e39464be0cdc44ab409359841e5b5c9078b1250acf3d3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5ae77c249990f27a53caa7affea3474

    SHA1

    2192a199b0d0050341a6ca24dcd6f3ee8983225f

    SHA256

    f79ee22082c8884d159a343079f3c4d90c9786295a6a3c938d4bc45092d5f349

    SHA512

    50a7f3ebe2875b6701d6f4255f941e4a90d7bddc8511eb9112649dff0126a0e980f09b29a6924a489d47ac393d46b4fef0327d40d9055a373662d2a17d85a95c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4e71247f238a1c197c8446e244f3aa8

    SHA1

    465d98424dfc8ee641dfb6e9a3d09cbfbacdb3de

    SHA256

    a3d10080446feb444cf8ec382c36207588ef34884508f64e5065fe42f25de38b

    SHA512

    6f28f8431099c4dfbd026e8109e40a23036940e3d7518bc4b608ce53e9e7b3b92733354a77521bc552b4fc18b94779f76782d9b4bc10ce65e0e6046aba5826eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    14a225b8124b69d8f465310c7322d397

    SHA1

    e2af4551d24a77c03e0059c5eef5bd69d1e337dd

    SHA256

    a018e8f4aba5fc66535e2eabccfcb89240cc1056715f7fe7293406a494fc450c

    SHA512

    a5566f2fe71cfa2e21f0b9600ae4b8f436480622aed6b27cc9b5e41629b8c73b0e496d856d8f0da7534b6a97307be8555c8da9cf4af2da7deff80a6a15fe66ef

  • C:\Users\Admin\AppData\Local\Temp\Cab983.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarA47.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b