Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    03/07/2024, 23:34

General

  • Target

    .html

  • Size

    320KB

  • MD5

    abe77c2ae7306fbb84906500f5383efa

  • SHA1

    c73428949ecbdaadcf6983b6e06a149331bd37df

  • SHA256

    5bb35dbf94e4afd60c919c8ea19ca615fc32971fa2877a89a1e7c7e6b4151018

  • SHA512

    6f6839ea40a1fbb5fb29399570400c7edcf64cd8565bc2982d3079a4f9b458cdf2a4972fc2757b515380552ddee54357d83ad575a83087d74fcb84a6a09592db

  • SSDEEP

    3072:ZjVmvoYzg37xhYBnlAN0tytQ35xXa7RmxSAEdq67E3ZbikZ2Joo6T6EAWzzH/p95:/37xhYBnlqEytQ35xnpEdq67E3T

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1752
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1752 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2652

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D

    Filesize

    2KB

    MD5

    3d7112c23a3b49dba40b208c75022c2d

    SHA1

    a427a1d57460be1c725301b4a21cc516e58ba90e

    SHA256

    c456fdb6335b213205e907edefd6f6cd8382c04129079ab124cd1b5e94241aa3

    SHA512

    15e277622fcfdb5eb9ae5a5886210570c49227b765d49d8e3e165892e3966b57378e27389b339f293e0e0fbc712921bb594d364273f6d5f5dc51c06536605b12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\675D3640C79F3F2CEA3AA05E5FB290DF

    Filesize

    471B

    MD5

    dcd40f56c1e9452d8568be6819a2d85e

    SHA1

    e7a40551bde00752f1a3170322fefcd03c796140

    SHA256

    dfdf2939ecf3e5b1421109cd63d86140a0c03fe87b532c7ca7a5db8c7d85842b

    SHA512

    1442fdeee791e446f95f5818f225c8169da29fb91f611e51a81798b99a1c823018e62775a065bd7040e674579d458f6c29116cc26897d09df5f5bcd1c3e44aeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

    Filesize

    1KB

    MD5

    a088ca6b56e82ee665d3e12cc8551dca

    SHA1

    c31810b848aab637374a39131f53e65896ddca97

    SHA256

    fe889daf74283c6b7ebfbd9ac4839de4d6d4cac6db0a7c840dc4b48fa4aa1650

    SHA512

    cb5e6c32d5025207d661ff16e2b07b68b74fc01a758b628613d4ea2f4625ceaa9398d925d8027999f0c467c7243dd2ad21e8743df936527224c25d51f18c2f27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\675D3640C79F3F2CEA3AA05E5FB290DF

    Filesize

    484B

    MD5

    684b62687fe710de26a1c601ef58a156

    SHA1

    9c07ec745c97a7951c7160fe161870d26f004df7

    SHA256

    39ebe87cee80e2fdc275d4b4b9dd53a3db8afee8834ef2fbab812410019ef04d

    SHA512

    412bf04fe542e0fe6186a60154a457e4d53cb3078c29d9dbab2c885595cdb398856d06740cd7b5fbe4376a2883afc598159ebcee2a721cac5c794b5b83e7ad58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\675D3640C79F3F2CEA3AA05E5FB290DF

    Filesize

    484B

    MD5

    a0b0ccc44ec74a37eda9644a92e69dc5

    SHA1

    5c0585f119e64f61c824260f1419ad415621b865

    SHA256

    f7c0be0b8591b619dc8472ea52c1f7f0940e4b2aa7d2c7f99e076aa71fdd6fee

    SHA512

    0157edd023580759129bfa8d741fc9a42802af402818bbb5242b0f933ba9a751ec7d442f44061059d78e6472c656e1bc5f2d721179d11373f5c2e55f8ec7f9ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a008b7b2a5733cbc8c09b2b1ca1064b

    SHA1

    4471c576535ac66ba44e39e30bb2193c7eda36f2

    SHA256

    d9829ee32c7ef557dbc671257fe001cc5e8ac746c4c25ff0eda1cd9dd80c1b03

    SHA512

    ea9cab4a406442e5b61583c4acf4127b3b472cb1216d825325cac30db711c9a4c2d1860590dfc821cd55b61629f61c2bd7ec106f2aaf4a5963b54128e35b55c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0399f609856d9452bd9da84993cfdbde

    SHA1

    6a1f52bf956c868a716072c9e395df923c3031b7

    SHA256

    fa0757c4ee32686e2bd2b721e91b86ff2a19b7562e9827105f9d1f742ac30f17

    SHA512

    c14f6eb8172bf59113d7f4d12f1496e47129aef74b791021ba8e8e8ebe22827d3793286f47da520a236fa8234bdf05f7cd51d1141ea0df121fc63f0d0f816c2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e390372ab3afe89fdfbd365d810e5680

    SHA1

    404b994c9ef5a6f38eabcd5f4546b7d96a68bf74

    SHA256

    a08f2a6483449e21a46d4a9207c1032c861bb538af90b5cb516a951c68fe5394

    SHA512

    1180a89c7ba2bdd46f004d31b97be3bf25fd35cbcf2b2ebd75ee3caa1cf34710b959f68b814a2b4c9b647af800e4c2777077d9bc2e3f6073b795fbc5d8c95dbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    253a91e226f48e90b22d9ce64ae4a7a2

    SHA1

    643ca5b06adf81aaaeb32d47372f583422ad8e70

    SHA256

    afb2ff49fda8ef5a7724b783aaaf2a44c1730b7871a413edddf9559b9f9c434b

    SHA512

    ca1ed87ebf2ac1562d2f561968ac688829e8b68412c1d3114b9e6f1b341e1c6a31f33553bfae50631b5006407a21658c6ccf1e9ff1813459a8fe8661639beab8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8bff42bb17a3532f0bdfecf1ddf0bf03

    SHA1

    9b96b80bfd7b54ce1abaecde2b3fe3551b7a7732

    SHA256

    05b9d54acc0daf69ad00337393044a82ee518500f418341d833ae94a39bbaf53

    SHA512

    5198745903a424a7ff21afb8b0e0cec02effef0a2622f435070af52040bbc2094aa19649937342fa9b8001302ce9414c0f92542262f4d5bb3c28804e1b602ffe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0057c31b869b669d32e58395b1dac80d

    SHA1

    f792b40febcfba06ed9027bc6f87715f5b6daa9b

    SHA256

    211587b1a7bed8b9c31e4be4b23b1b715658752f854ad22d9222abf71503add7

    SHA512

    0d100bd28ef1667afdc15f48c9a1f43ef57bf09d05fc042ecc9b35fc3922b6bee9265021ba3655401a6f2d4607799e36073583f3cf621c3e6f1de90f2f2e17c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a61c550e40a04d04d6360c5b39d410d5

    SHA1

    ad48cfe537f38452046dec6f523f79b388d38997

    SHA256

    f27ef69e1604df2999627211b812ad630b72e609ba6cda4460a8ed7e374c8f39

    SHA512

    ba9c8c0f82fe1ca465c47ec0f5560f2daa3d72a6a69ef2930f88a375df076a1d96dc37b24fd90c4bc8771e7883c755333c605d1e9839f07d3c5a8e42434aba44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a024288286713d160760097b22c805b3

    SHA1

    0518f882ff8dcb4c6983210ff0a64586cc163b27

    SHA256

    0c3407f9bed18a700947b19f6c2e00badd6de29d86fa9f8042da8558e1ab4866

    SHA512

    3aec5c7fb1f2e8babfc06bab387bcd818a04822f0699dae925332a705068ac6f876da4c450002a07911b1a5a1a7c513dca1c4adca5bda3334312867ae80dd557

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34f8d626d9597d9728f187f23d8d846d

    SHA1

    fddfe85ee41df499e1545dc7fca04f76eb61926f

    SHA256

    635367a627b4c7e7a12085560940809727a136bd0a748ab5b480c0e7497b92dc

    SHA512

    89f3bca8f7785afd5558f00fe5d7b3f717a3641b4120c4d09e45f46b78c9525e2009edc962e219d6db31926afcf1c5033469a983c7868828ca5effe996e4830c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5cd177f98610de530a66e3c04d2b11bc

    SHA1

    6d0a3fd51743a8b7707e24907e36f20042a1dbe7

    SHA256

    3800b75399ae8fe07c95803b5cd530780987999bfdd573f5e341876f562486a6

    SHA512

    9b7647231e157ac823d509f11e7d0070f545ddbfead2da49309ec79c35cfdc6eccd74719bdf5798cf852efc8ca4622dd33b1d2fad9e3501b983ea27878dd8e46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e90d471234167b3edfd7cd4eaf0fd235

    SHA1

    ff218b5b43020ceec0bcae05036f939263ff1a7a

    SHA256

    4217243990afc7e37cc87462552bd786e30dd835fd317e6c18138b26c92819a6

    SHA512

    1ddbb58af79e845c192cea73e4cef6f4a62a616095d1fdcea07d4df40f1170974dcca38c5f678be97df7004ce76d2673ca251733bf927266b3eb9a798e4e7adf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85e070f7d342c29f33a9f4fd866cea81

    SHA1

    65860ffbc0ea64b845ca85aec421b033a3e32577

    SHA256

    7df4c706c50a28776ca7663f0c942533256ed3b9389a3fc196344097c7e8bf5b

    SHA512

    4aed46f03af9e961cf77096ba0ea60406480d0e43fd0d60d100add7aecb041b9a6c9c4c1caa163ce417704290e3a97348556a17516dd0ee197f1c072525a0231

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b16f2cafd0b0562e44775ae5c60c9cd

    SHA1

    0dac96891d43fded6bd4a06fa649e9b0a60d5340

    SHA256

    b0e53beb60dfdeaef0f498290b459f5556d0c612b6f92bc2393dc6a904f72908

    SHA512

    69e8ffcb6c9c93c1f62e22218aa12ea5a3c10f894f868d660fc7b57f9423962062301b46cbe5a9a8f90999238ad24a4d409843f7356f99d89ebedfea3c27084d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E

    Filesize

    482B

    MD5

    928e06186bca3376a0ae6be40e1657db

    SHA1

    6044234e4c1a07af09311c2e6f146a5fc89389d9

    SHA256

    f6c92b62bb91ed4cf7d2e141521a2a3e64326857b6d1952ad678453fab896de6

    SHA512

    5c2cbd7cd8c7b929d7f030a5c3e7db24d2d3a0c6adac33dce7a3bff165eb0e0d2fc11ecbc2ed452c84a281a45f653941fac9dc0f053f652e4ea58e9801258dcc

  • C:\Users\Admin\AppData\Local\Temp\Cab6B54.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar6B65.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b