Analysis

  • max time kernel
    134s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    08/07/2024, 23:15

General

  • Target

    50sjv30/admin/Html_MakeClassAll.html

  • Size

    415B

  • MD5

    d17684f6cf6e951788350ce40d6a24d5

  • SHA1

    3cddbd3606eebf888bdb9d8203560f408850b3e8

  • SHA256

    348c4bfc885b9250ff279c74e6b19d86ccda7c47ee2fe86621159cb6ce66a284

  • SHA512

    b63ff1604104669d865c690fac1a103b3d93d2f783b6894b4b619c761c790d72d988914eb0783c81cd2eadf54a5d64ec0e60cc18a2266503db6d7ae69d6d65e7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\50sjv30\admin\Html_MakeClassAll.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1680
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1680 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:884

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1d6f294ef9c1d1c5ef9ec033149841ea

          SHA1

          b77ec3c228673fb6f6afe6fd99bf39c936b0c82a

          SHA256

          4d6048b0df623b6c4a2de07786d1305880a8a11bfda96070472c9b76aaf41c6b

          SHA512

          fb9b0907ef12bd2237cb04f152b4f5495c2ad2775084b3258b9a0862f1027694f518fb6e06975ab6790341377723e72fe0b2ad7574fe877805a35992fa47f780

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4696d7deaafeb83f7c2c6a721ba2054e

          SHA1

          f3013735e0b8ac8979f5c3b69ce01d1042ff951d

          SHA256

          eb641eb2dd7882058abe0c2b2610e53b1c5c007ec05dea9cda9083632ae49dce

          SHA512

          db5b81702053a7b3eb89e5a11d5f1797a2c65f7d9c4fe9586067fb5f332c5d046a30d78e84f9fb115c6d88aaf2303266de8ded1db0bdab4f892e35fc01d5c181

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6960f64ff9ca81a19bc5758fc11cd7ff

          SHA1

          c4c3438c77a2a887ecf621d82fc362cab8ed4f74

          SHA256

          90f1a4b7885913df06cab50166f8118485f397868ee2a758387b5711ee91e8ab

          SHA512

          af4f3e2953c3d6b94d48ff36bb9effe0adb33802ad627ef4aa0f7cd7ba7e5cd0bc08d391c71e4fffdaa3f8e85f13502faf8eb9362b54d3d0b877ea7f8f18c926

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          494a7138829a654b5ea05244a9b212b7

          SHA1

          f76c9d7509c4f4b9c52d411288e0eba29dc138e3

          SHA256

          6d5bbb795dfb46ac77523da955744bb54f9e407a378b58415d1db17b8982a5fc

          SHA512

          772d1fbf2f757be059cff8f993051dbe7699a7d35561152991d75272ca55f254dd41e5ed77f138f4128c7670affeedd8bfccaecac93297ed6bb8ecf31bbf6d31

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          54ef7b48def2899da68c58a1a10b734c

          SHA1

          1ef03bc2ab67ca49817222642e884fa1ab24949a

          SHA256

          4bd40dc3641da1a414bddd0566f32f390835a54bc8068016001591f85c166827

          SHA512

          f390e9f0240c91c28f7743800e40aa6ba6e6945974246be15326015c7d7dc39a242a9cf20c116d2bfd4162adbade5bcf29d7b702f215d30e1e3b4c127a45484c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          76efc9f60b823622fe5175461f75b134

          SHA1

          eb4b4ce657c6f6e000153dd7f50532d03d83ffab

          SHA256

          3ebb02d26c0d52caca987b7ac00ac90e535617ec4d4a4a240def131250b90f7a

          SHA512

          0b9a62552bf36fe922d7f937aa642fb39e44616b838b55bc1ec08a426efa6ad521a68a2e72f3b81789401bd247e957ad87cddcaf2a62e4ed4866050cc8e4412f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6d678ad703d430929efab3fd4765b3fc

          SHA1

          961949c378f2872b877eb15271c7b2f772e068c6

          SHA256

          eca2d4fb939bd9e677c08b211702e9e0b541e4612cb3ab7976160cf1a4e371db

          SHA512

          1a02657c3a8d132c242eb5456555b7133e93734b63da2fef7d47a30f8010a3c10b7778a30fb354502da2861d7b715e490c0be0425f56be36fca6a40fb42fadb3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3c5e51571ceb984fd2ca7121a12056b6

          SHA1

          e5570cecb39e301fabc41113cae9221027d58194

          SHA256

          d26e192023b33369f8aebdbd950520165d8f91dcfcef900515d205132a4a56f8

          SHA512

          ca15af29fb0e33d736fcb98178fc16edd5234a4e9708701efc59ab213040db075752ffe674d9d1385b8038221ad7b2822ee647eb3121dd9f5830185018c22807

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          333b7abe52947c3d5dbc7d2a4592d050

          SHA1

          4c18f80c66c0e9a714b5dd2a3c55cc679ac96441

          SHA256

          f54455a0d4f1aba38e5aa8f966a4ff5a71855afff96d60a22cf817caa265fa54

          SHA512

          e9e3d3f9b5b68bcd68ea4bdae6c582d9aa28ca6c47f8fc2e9381a56d7fdef94b3ba8ab5f760a13ba8e7f86564c82fec52eae5a1c61407055ab72c1aa17a3c904

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b275bc476cd5607eb72061578029cab9

          SHA1

          7f9ee7c31125981cf794fba4ed7a00b5093d1e9e

          SHA256

          c1a7273818f6f13aadeae67ce2c85d5916ce887bf1e67e2f4dd663037b3cf35e

          SHA512

          ec55f4e94092c2668b79d9cd0f05763de7b0a91ee8c5ea89f03b4fcdb170a3acff7f396ec8bc46edc13e10b512ff1bae66d967fb4eddd909a4d81253afa7871b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c6e637e5edb02237fd62fe4c2210deee

          SHA1

          3550e06b67dae7fd3c3334e862b693883d555fe2

          SHA256

          9aaf8874c6bc56141da4e4d97bbb4801f49fd318fd5661b6771513499c9c836c

          SHA512

          71df926e73d027d505b0f95c6e9f61064c520d0be1eeb4368df34f84169e0471be949ca2c4ef88e2ab59d8ba2e9359fa74c5b905e78cdb2e2f004bcf54ea940b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f14380d654b200611aadb0a2138a6ffd

          SHA1

          4fd2f5fb39307375f92e3ef2cb3a742dfce0a5b5

          SHA256

          d4ce19cb26b2b25a3ee6d20cad97fac1e680e86cfd50ade2935958160e266c83

          SHA512

          7c56f20a02c7eafee4678dd5cc5b15feb77d9365b2bd7fed70c45915518280ab7340613e2f73b4c0b67cda729c43e59e18cf53958e8d96f5d4c6e822ed9164f5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dcc1e6fcdd04066187d5d2820603255c

          SHA1

          041fc08e2a19dfbf235fc42a86b2cf976904c000

          SHA256

          f78db3882fbdc32f4ff59bd348f9a151633c7ccc68544ab5990938ef5ea2a350

          SHA512

          c44e5361b620cbcbfbfa692e61a7fe561c5ca8ee5db5a9888233c5f91a915f1df3cc07407e891360be4110cc1b1385d260405d1d071ec9a4c619d95d4d5b0e4c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d59e9b9ce44326fcd0e2a1ed7a2b3756

          SHA1

          21a5ce54864c77e2d82245dd81d6db0d395b9865

          SHA256

          2bcd36cf61214cc77f6c4167919f9cb44afc488aa7919bbc5a03ee456e736f83

          SHA512

          25f3d782f9ebfcb0724bef32acdc5b487527c77a376dbe58e99e70787ed968631e56c6604d01755000619dc137d1871953eeceed5f7e023614d945431b7fa748

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          facfb3dae29902c0e6d648e9013bb5ad

          SHA1

          5b3a7690c634a64b4e45f001f8e0f59a912befc2

          SHA256

          734d1ff020791bd5d34a9900e278db1109ad8f5d810e7c3e49ad902f02d127b7

          SHA512

          209bb481d04a5ed504653fd1336d1455e6e5789ac8d7ff308238edb7a40450801cbfc9f4a4d6b33b324075cf59b6adfc2f3d34e2b8068dbc6513839a27f1bc1d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9e585a8acc7c113a898124743cafaa9c

          SHA1

          30959be5bff0562519f19f16bca0c976ee77b9b7

          SHA256

          733a5a492f32dff0453b136ecc330a2058779ec1c329651c339ea08772d7cf0f

          SHA512

          525289937de0687c9f47633a7ef9437383c49e2a3d6f9a1a3a8a01f08418c9506bb4bba576c8b587254cd26cc6f69d88c15a186787a1800e170d112bd2cd9fdc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d0b54f081cf35022a87e4b343b4bbef8

          SHA1

          6025cab648cb21e3efe5ebf639c61d3bc081f445

          SHA256

          bafc3e32cef2073b9e870d3c4a3c87d0fd11c665075a9b64c892fd58170e2999

          SHA512

          b46b6fe55b84a6027e3daaf4b9a808a387c25d3afa4fc9c95ce06ab537c3f18de2c1149bb181a490ddbfedd2de8bcfd93795ddb7df9b09f220e3c15f0083a338

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          910155ad97cb5739d2f570921e2c2338

          SHA1

          9a8ba428d596c51422573993570576ea774d6579

          SHA256

          12f84d6a6601c0abf2a28e5822db319a766f47a14d4a2cca31a9598ddcc03878

          SHA512

          ddaf44f0665d78244444ba446c56c7d38d78d9a2af17d2f8b46cd66e0a54a887c52cfbb49e3e3a233b4331cb0a6b357a246daf55ff72eb38263a790473967e7f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          117f03fa8d28204a23b5372067c34d5a

          SHA1

          fd2cd2995d308562c25374dc5c5fddd8e2e93c15

          SHA256

          db16371fb1647fc3fd19bf93b97b06d5cf398cd27cf7c04b4b1e77225bbbe088

          SHA512

          8a35c642ca1573d4ce4f675e61657c7067e33a5950c4b89a0b60dfa9c9fe5c0240e6021913120ca34daf4e04e7636f8ff2e2bc562b6920d9ea85134db27a2089

        • C:\Users\Admin\AppData\Local\Temp\CabD971.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarDA10.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b