Analysis

  • max time kernel
    118s
  • max time network
    163s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    30-09-2023 02:20

General

  • Target

    github.html

  • Size

    5KB

  • MD5

    f9cd3ffd48779a7b315cf0c9fe53adf1

  • SHA1

    ce57b539ec46f8718763de8b5722dabe5f05898d

  • SHA256

    2265b27f4e54da46b429edfb5fe5d2f5a1af9482077a7ae48edca42545cca369

  • SHA512

    ff1493069d64742d66d7568d564df20502ee0b6d75ba9ea3ebf1734d81ce8ff6fe6764be304e791cbd4757cd86aa9cccc444e83d8b4f873ba2525f208cbf8e81

  • SSDEEP

    96:M0hLNKwvR2Rk+K9ZX7NIzIrZ18cmYwo9wwiww/whhwHro+kAPvlj6vFzL4:M0JNZzXh1rn3jZip/ehIrFP9eFzk

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\github.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2764
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2764 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    953a861df214269763c0b17fec54562c

    SHA1

    efd39cb84f3f043e54ae1f2e965c65dff46704c2

    SHA256

    03d325609699e69dfce1b455918d2397c9612001d5c2c3889a786d6b203c5a97

    SHA512

    887b5c364137a0cf9e2efaf5182b438080640efbe4f469f0a9abca7812768003d366bbe59ca7cd9f828ac2d74ff5dc0e04eee6c6d4aca138438da22843b818b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb9ea77a7ddecceae38873fce489e8c1

    SHA1

    42d56dbe29ee1e5fd485283df9cef1df5887850b

    SHA256

    6841b61195954b59591c0f12208331e3be2d13d07a34ce5b2f378d35672c7d56

    SHA512

    a33b0bad904ebd5de0594e6c00d5376a227ba820f9bbadb88026fcb63817e52a1b57d838d4cb3aa55a50969d84f0449e327213398d32c8dcf5bbf8d6bb76bb3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba93ecbbbae01fe54610f05e3545190b

    SHA1

    e88461f1d0e857efb0a12e14be20847edf90f243

    SHA256

    d0ff094eb37e0d9203a817985f5aa9d40ed5cf1e3d2f89f178701c0458adc8ad

    SHA512

    25744de110e84c8bff1ffa5058afe1e947eed3aaf3653d62b998d6a5b87bd8abd4050e83c7377daebd85800381e2acceec222acb98b71adb52e8a4b448d146f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    538b1af61362bbf033bd8da011560b2b

    SHA1

    2c726d742ba0bb77ad32576935f93abc28baeb47

    SHA256

    8ed2e5583a5b99ef76a7e35efba38e6065ab5b6f7780d5b3a6a7fb5184ebec50

    SHA512

    4b90c3e889b543519e23ba42bb5793b9d91f6c6d291073db92249888e5a75b75bda2593f5d63c3a836eabbe20dc7d113de092c6368b00c79a06493e46953dc59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01659276e159e73412cb691b29be9bfd

    SHA1

    87af06b7525fe33a391249ec0a5c95965ec44886

    SHA256

    148f1f1a8a647edb87b814459b337dbabe14c99aba61569aabed0f08781304e9

    SHA512

    8ee5c0bbeab6518e9547be92fa4df032b4c11c6c88cd49ec44b0e6d60d18daeefcb10452d29eda9ccf9e87b20c99d2ea1eb632871f963eb73256443b6201da68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fcf650c1206559fd90446180ac63f463

    SHA1

    1d2719630831654ce8f8b9b6246d8e05b39e27ef

    SHA256

    331253ed8ace4330a6e8a62fde158d5c78911779ad045e8c2dbef7937dafcc1d

    SHA512

    9950c67960408df9f9630ba975bcc8973e434ce11a6828c50a6dbe092cbc69ee080d5315b3a42f2481c4b411952e499ed0a6ae3146ebb8e0d4b5a5a1c48ecdf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb0b6d497e4d81f16bf39598a5de9436

    SHA1

    a148e10c3f0fbbd58b1b5208c4f7e24780e040e8

    SHA256

    35175fc453f19e8640deebc2211017d00f0e8300aabd7a12b040c6497c5f86b2

    SHA512

    dee8936884a768370447fb9b68a4e46e876e7b0c448b82e5df1ae5cd9628cdf47805131dada900e7079789a9a1d0d600a5ed5f0cd829434b57a14162f5d6a705

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98ff1a6e42b8339fda5a4c6041981142

    SHA1

    f3b9b715e595d216bdb85d82368576b2ba4234b1

    SHA256

    cbfe21c6402dc5f45c91dad22411e4cb6d097a517245ce390d4ff6e9bcce7cd1

    SHA512

    53701b58e79952c280c0118b313ce3f9f5ba2acdabd5b2f401c085dccc780e40b6e695c8ef38766a1b75333457181c22d4ed7a49202b9596c2c51d10d4a54b83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    269ce65871a515c56df378cd08425dc1

    SHA1

    6540bc13543d46387bf2f3ead6fc77aeffa8795d

    SHA256

    cbae5ae1ada8b16a2741e137f7ffe54e9d2f906b395687628f1e8abb2e7b053e

    SHA512

    cc5b73a00c5e3333285bd3ca8b2a6fdb4270a6e1f3b5b979d1b37e115e38a5a0d6bace84939c4dd9607ada8a2ef286c665e22d7f46b1fc19e13d16f868334044

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db5ba9bf61c56237d194b82fa932f517

    SHA1

    cb84ad76a0b491d62355ada22fd07d31d81b7c21

    SHA256

    24c5ab833ce73b4cbf144ee662e83bbe0e0d7383a4006a58a7b54d021285717a

    SHA512

    b299a8333ab98601b442fa7ec8ddd6b34a117d8c5a5632eaa38cdadb396d705d2639035959a153663774f41df23321d165fe48123319df7c86a54fc478e38cae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20683c584003568b6448e0a29abe72e8

    SHA1

    67dd6ca2f6c4fd81c3a4231bb3d6858dbe11aa8c

    SHA256

    e6c99a33ea78eaa927dc2411e3861f5981240a69451f30bdc8f547cc8b4870cf

    SHA512

    7893e8d51ae4bb26ca3cf69352392aa9784d23f78ccf92f0f547bf5e4d1b905acc35ac55039523c6c35695c68e54e0bd66fca892ae9e11f5d69cab352b4aca87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7655523652da43306a050686eba6b36

    SHA1

    90b233d917d0074dc0cfd105bb68f6697d4da7d9

    SHA256

    a0b8b3ca8b654b63231bdf9e370881e1a2c4a9dc56f70b5a829fab3d4e1e8e2d

    SHA512

    89dd306ba33f6e10ddc0d07ae87e29e19ed9c468dbc496c8a4817c04d8936e6c3706182ef201032f9508cf55b669c471743a1e1ac178993e4295c921de6a5778

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d755e5b0d39661c526699c756b097cf3

    SHA1

    a3d2d724ced38a4fee1e30341481b24b8f23a499

    SHA256

    9013c1529a38b7d7a88533cf89654c828c8d7762a5bf8fc60fcac2c8d01fcc38

    SHA512

    f810dae2c05daa7e79431c80be47f04d9dc02fb756307b2748abfdaec14d964d62f0a9c60ab3b9131b6ec549eb7744be7fcbe4a8a64307907d6ab38d8467148c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15e5b5ca2a1c34e092b3aa50e5825222

    SHA1

    d289040b05dc08ebd7289788059ff168f1345a72

    SHA256

    1fce175f801d3ccc2ce44a687358aed7d75f189a441c7887a4033e50de415782

    SHA512

    8c87d611b2f46c616f3c972bbf7e0fd0cb04e56bb34cb42457b61f838d0e5c591c62054b217bd6e98ec5352cf97bbfb3ff3551010e2cf4507536e2aba33bc630

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d43558bdc0fac43c8776d2b433e1e7a2

    SHA1

    5844e24179b1042e979c9e3a46f189a9775b2941

    SHA256

    0d5600488a19700977a7d0671bcb219fd472f05e6a45185e8cb20792d3f62e33

    SHA512

    940d24e5c9826ef2e3230a1b31ac7d5450d2cb6ef91c813201ba160f0cc0ad13f8b18aec0356104d1816055374ae1fb85c6a0d3d7d7643ef8543e28b6a2c4359

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5778d0b3b62bd181ac6c9fb150dd1057

    SHA1

    9226ae3e1af0425e5bc1ee0b10d0ee590f37d6a7

    SHA256

    318d46731f5fc49bfc2b6498baa46a820d3e7c27a8a7aeff0a4c1ea8f73a7e73

    SHA512

    6f5279695666faa21ad7eca340c85c0c2b8c81de35f051977b4f6bd048293dc1ab9b3cd75123fb664078391d535404566ad7812d65da47a1e8582746bf8a28e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ccd334ff604e4960f30e219d4a59de7d

    SHA1

    a917136862e96bbb1e1f9ea0c984b318e469250c

    SHA256

    b1c76fbd1ef594473797d174d2a12ddf0aef901ac88748b0903bc6e3bf519857

    SHA512

    e32ca00db35ace1e6b3e16e678dda34acce606c2d06c8a012070c952b3bec35feeb1cc8e45ffd9f72ec2e9284229025d28c82426fc05bf9e3108379cec2182d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aeb5180389d04ee61808957b3908fbb0

    SHA1

    fa73931bb46a326416ef83f274f42ac70a9b4f9a

    SHA256

    ba237bdab5ee603f8f54e4358b50e0492a7251b59ae689df5a9c1f44170a6637

    SHA512

    9c5312d0b298fa554fb8c2e0b6742c380a848499f4c0fae656c1d1f7b55a398a9bde1135e2a39289583bfeae34e75af5f01ec331349e49cd309a3e1c64893cc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13346250c4ade2470d9e45332279540f

    SHA1

    4ad607b9d48881d9101ed078bb41bef38e972cf9

    SHA256

    751e5aa28c21cbfd295933b806a35f2b422497c5872523e39c5b18e4639c5f2c

    SHA512

    a00611d78019089b8ea574340e451f5cd4f5b81662441995d5da18c69de1a2bb120800bb50a2e0433fdd9b3e748cac38df88b9fc8a8eec42722f929202cdf7ce

  • C:\Users\Admin\AppData\Local\Temp\CabD3F5.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\TarD475.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf