Analysis

  • max time kernel
    139s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    08/07/2024, 14:32

General

  • Target

    sample.html

  • Size

    34KB

  • MD5

    0edf0c035dfc2247f676595b9fe7cde3

  • SHA1

    ea598f865798c4360f351c6e5d13691f94dd75ce

  • SHA256

    68b6ba802bd249150307bff7ec1576abec09e056a973a4b8b0eea00055d08edb

  • SHA512

    ef57ccd275678997adb1ded956f494806ff8808d4bfbfe3c87d72a5ad75b3c5ba1573d588648e8bd4fad9302877f4fb2825bb38b50538f868c89f4a201f59c16

  • SSDEEP

    768:VhDcaNu+EYsaSVhYVBE5qIMVbZ9Wk3ZuvjBqNa1AHvAAsW0DUJKAb3q1HJt1x1Mt:TDvN5UVOc5qIMVbZ9Wk3ZuvjBqNa1AHP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1932
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1932 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2732

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ace3ae25a712aad7061bb9b65cc37e2

    SHA1

    61498d2550721705ed9c8be1ccec03378f2955f2

    SHA256

    4275368bb2e8bcd0554c915d2237cd3c6bba99eddfe15033bacb61138a39b7ee

    SHA512

    5cd07210e6e4c59cffcc60ee6e3ced43ce01bf0f92e1e763da7e5246d5f6d192e8f87de9aacae709d53b6d23fb24bcda800703d6bb1da0963361140776dd498d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e958602044680144f4b96ac5b90e1f4

    SHA1

    642c4d2eecf6f997473d06909e67a425f3fa517a

    SHA256

    e515e07fe4972eea6a5b41a283509e24f093c98ae7506bc825ac4ea52f719a9f

    SHA512

    b70a6044b7bf1d45497bbc9db5fff320029a0b4e5983684530645b7d9c361fb6f9ace7e98abb68698c0aef69e174329895333613aefdc3b556421d4ba2aca69b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d528f2d328d8b4e561bbf9a22d45db91

    SHA1

    7089012c1ba70cf23245a93eb84771b7b3244cc0

    SHA256

    e9232c6d99eaa7d241c3fb4dee72a8ed3cc48f5c92b76258e695a8c48c482ee0

    SHA512

    9ac51cc1e4e78d8decba26dac1425570b19ce62282fb43410dd1e2a38ae447c7ec0591a227bb4a6f5edf80dcb0ca1d50f315fed87a2201b5fe626c8dc79b4472

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    840236df0d4352001ce1e8a94e6e4b49

    SHA1

    f15e13c289253f782f010f8c1681d25c719a6a31

    SHA256

    e96aaa42221b534000cb7c0db3315a66ec31f07ddb1d3027eead53b64d221099

    SHA512

    5569df10a444bb998d25509b10e216894fcfbf929989d74fa6b99287a2afbaafb65f5ee0c256f42b5c29e72ee1641f1d5d45a079b024d36dccbbf1850dd707b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9196da02297dd24a38ff335223adaca9

    SHA1

    f7552a4e465d63db106bfe86d61b9e8639f9adc1

    SHA256

    d1b898fc65cf12440000428489f6b644f1835713b02ccda1dfad620ede184a64

    SHA512

    4a88e849acae477f707df7a31b6416016508565354a5905cafcb5db0b4d96a61696881a2f0343f7571fb4ebd54ae3e1738de98833e0c0172d346c431e2e12878

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c27409218786480b31d365fc722ba692

    SHA1

    14819272ae94d75bd27b65a0e5b0e0f01c4e6057

    SHA256

    c693c95e63c4919fc5e02dfafabd1414b95138bbe0f011aba2eb8c3413626ddd

    SHA512

    d53d9e52f1b73c8c38c28b90cf1795c9e578b2444d815219c256e1c13fdeedc8d150757e9bf6d5e64772e2b7b2914706e525de5844488a7decfba57c15046058

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f13bb0f4091330abd93f6f71bd9cce91

    SHA1

    6b478fc723dfeb9fc305b9f2e95bda35a148c1c6

    SHA256

    222d1c6507bb8d9e29e0bdc39c658c41fa55f2b973c413061c960f48a8b71d5e

    SHA512

    35c5617939c9718d8b0602deb66811d3d530d9eeb1d154a6e93c7982ce36de0326bd89247962df89e5f51627b6c4384f3e5f95c2211414ddd0c22114ea26c397

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4fa63d67b23a273a69b3815fbab09b5

    SHA1

    e78224d2c9d0513e0fcdeecd341c55937486bbe4

    SHA256

    775c055915734fabc16770483b44d5214ff5e6e2f6743cd5e6c305fd71126b0b

    SHA512

    4745f246817dde0ff380bf64cdbb6ef89f85d851906c1f9a0e55848355ec466056a9eb5047bc51a59205ebfd9941bb3aa382bad024b7e22243165d5eca44b21e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a4716d8b784aafd74ab2f0eb30c1523

    SHA1

    c46c48e620d26200adead81c827785ecb3db416e

    SHA256

    9cb5a1e928afcef62e697549ed0b96aaddc09097da47c95bc982487048e0bb2d

    SHA512

    32eeade8bd9873b13c16aec6ae69672c10086ffbfb17a0a46fbe0a470e3be2944b17d7c7d2d3824b6828b34f262641e5d5f541355f0a7567fef7fa5228c80468

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89c51d9dafd043033b486b82bdc140f0

    SHA1

    078f7e97d5ff5a71ff44362eb07269e72fa011ef

    SHA256

    5735a843d21cd59eea984b78d26f50c6302dad34afc13b8db1b699a87f5f9b92

    SHA512

    ec8de5ee473a2f3f116c5d087eec2e30b2c24f57a6825f3149f62dc40c1ebc66b5a9402499935cc14fb27ac1c9bf2fa6f082636083e4e63a7327db08a51e041c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10721673784ebef831160978eaf614aa

    SHA1

    9710ab1b8b9b57b9c0479b742ebad597ee00f0b5

    SHA256

    2280e6e5c375a0e8da8709d088ce7fa1bb9d617b963233af92a479141e35c0c6

    SHA512

    b6d77af21e586f8d123ee61e6fa25e862b046d5de13d7d354a16f1cbfc65210662cfca561a8dbce8c6e5be352b9486f12ae8372df7e4723561061ca96246ca2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f46ea81ee07761377e9558707ca4567a

    SHA1

    220d5d60750f40d06bfa991553599e44b01b1933

    SHA256

    88fea66c9bba24133f068db6056c3b9ef99756adcc67ac0d2671fe4e301ded84

    SHA512

    7eb38b43030dd633dcf14368b4f94573332b1ff28b5fdb08438aeb8f59e088fd7d5ce7e57f7f294c77060a4897b3bb6aa349a74a91648fc6cf5564f82fac8b19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f24f778f022659bc2026f9f207ae6383

    SHA1

    9af9c3e2be7290c8cdf634854f1cec53a9824fc6

    SHA256

    d12d910f8aeb3dbf21b00459c3352ccfae287a6280685cc006f304b6d0f92577

    SHA512

    7a381ffd741ccbb605e98efbf91e763bd7c8c04fd546775c2ed4a39ab2842834902ba776f7bea7d6efc83ecb5e31e2652c900239b3a46cc1534a02013f0628ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22f9f4538a0c567eb8854dd8f4ec51d6

    SHA1

    80bbbbfad73fc3027e536fe47f620aca85160714

    SHA256

    0b1dba8be79664e0485a6dc4816a5d06156fc8c6d5d746d75c93ceec2a65350f

    SHA512

    50a41300bdd5edecf3b7b7c5a28fd69d6ce2d34419b600d3f65031290908aba8976b32777fa89963529c5dea7c9b0c32d4d6e9fce59febccafee9cbb3948115e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe88169827c2c534aabd57c7d39b215e

    SHA1

    9141704d11d522baa8cd5c77c4eb064593f79de3

    SHA256

    a04e8feefe92022f8b9916882142a9d65bb00aa78a2f4ac75128cf2ffe3092cb

    SHA512

    7eb9517715137780b90c0d8f6862397ca89d55f6966dea93f36c0f697002d1a223bb39a1f81939ee9a20cc9f21ccf89175919978ff15894e7ad5d5f858311260

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc94f4b1824074d3c805aecb9fa4d981

    SHA1

    15c3170ff592f4ec2b0979c4491909bbed4ec887

    SHA256

    4fb3d4ebac00394032839f30e119611d2c1ce20df077d42f798f195963771759

    SHA512

    0e5124832ca8bae8ad6abd629d433d50c93144be736d459e9298f6e15006430c90354465253cdbd0a2ecc1a80540f4109343313ed7151f1153f8f2b8daf62b3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5bbfdf266a1368729334de8e419c2c78

    SHA1

    0d4dcf55586405d20c8e69346cf8d250c69602c2

    SHA256

    a1da5bc284067a4d9f4811a550774418b1271c2f9abcb1b50a7bc6a4c0257215

    SHA512

    b4734c451e0cef37d3b2281667460cf5d41f6e46c42ec468375105d24d7c9ff03da0e7721072a42031e9f828c4767ddf069713dd1024625521ceb9b090115e07

  • C:\Users\Admin\AppData\Local\Temp\Cab6403.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar64D3.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    676a207c15726afeec47ba5edd3cb8f5

    SHA1

    7a488b82a23f60170586338d09a2524059acad24

    SHA256

    95e0bf8e716eb5b108eb5aea8c2e6bfcbbc4bce6d89c981090b1ffb7d32a07db

    SHA512

    04514d84644996847882217e126be0ca3530c9980ec2e869b3f2efadf93c1623cc5fe588290ed079a70e92cd826bd697f7bc368df8cf446c1e4eabfbca776ef1