Analysis

  • max time kernel
    271s
  • max time network
    324s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    08/10/2023, 00:07

General

  • Target

    car_main.html

  • Size

    5KB

  • MD5

    68874adaaf88ff4f2160200b880a95ee

  • SHA1

    49476dff74204499ca476df82b268ac3fb3ef81b

  • SHA256

    5f8a1ac41f40a31d284f568f19f986dd05fdb13a26db9d91da566e2e4f2123fa

  • SHA512

    1ee9998b908e51af17aeb483e7a62c702137a9c0182f5566033c9617334848662dc9dc83a55005dc6745efd710612137ceee985c7fb848c1752dede1bbcf71a9

  • SSDEEP

    96:5H3DrvlM7UFWTsyN4+1j1jfKhDbr2R0GVC0WlWt:5H3Drl3FSsyNJ1j1jqr2m50WlWt

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\car_main.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2800
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2800 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3004

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7d9f524c6a5ce9af8c687ff3b3c2942c

          SHA1

          def7ff3a0622853790ea3903e94ba6776692c976

          SHA256

          747a7e18f847a2ac8fbfa109752adc5a71587a23cc6f5fe7ef9abc84def1d424

          SHA512

          4e448554c5a629a41fd121cffcca8147411e79b8e3368ba479af734568a887d3b86ee4b966870019ecb509fff4eef3cea4a4ae1f7084f963f3d2a9e590100df8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4fe7ab7a5edc3663b4bdf7acba8f2ae5

          SHA1

          aef4b7a778330bc11da52364b0423e3fd0b2a903

          SHA256

          368b6f652682b7a11bc84827e61f0f6b5d3b7585e4980b687336e0e718eb8f30

          SHA512

          6d66e263e36c377629b6321c48bf7a91646a1eb1538d5b9ae430c735a44a8b22b4308785c52f4b644624d0792aed8824691d6581fe41c630abca030b9b80100d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          19a7df0c7052e94a49a3c12ab7b57e74

          SHA1

          579b6cf4e22f96ac0c7856dd1e078751d6ba83bb

          SHA256

          95e93f27aba2fcc1265dae73e19c73b7da394a215b182ad427515d6bd8650309

          SHA512

          0a2e0a5dcaf67a2a768167ef1af226f9684e122a3c96716dc085ab255a6e79060ba1bd8822c0d76180217b035c607a9cef4b2c09bcf0a2c1d845465cbbcd1dcf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4e4fb61129eb14a3398f2da8e60a49fa

          SHA1

          a726ea74a1453ea486102bce936a83987a7779ab

          SHA256

          92f38137e3ad6ff28cc22b7957ef1f8cd8578f39e463130d81f9ed5e7890509a

          SHA512

          c7ed043af41278a25a5f1d22e83613208c2e414f6142ecff2c2b97a083febdd01e5fe2697e95993dd2d29e23c89f1b70db92df418da5190e8523d64070bb5dcc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0137987b6641f57a46bb8ecbc6a72b46

          SHA1

          4a27548317bd1bdf01997e59741647959432631b

          SHA256

          6794ea17c65d43e86a70f3252acf53b22e3cc08fb9773c5d6e79f7386be5c213

          SHA512

          07101a006a15b7936618b9cb9bc4464425d5ef68c599abdbbcd8d5a2edec5ab4dd2c8b5603a515d0135f6b1469a811d539fb042c94dcc1eeb823c5c55c3b1c80

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4f75b6bae5cb8d390a64ec627b6b1ee1

          SHA1

          74d0e36df751d0297c4f3ff158807eec0f13e3a6

          SHA256

          600fe3ae57fd0c52275ccef73d09954fdb61ac6a4c6dfcaf6e6e88cc4c30d890

          SHA512

          d8afdbcb6e8ce2eb5ddb77f7e92f591753fc007b9fd65953b8e0adf840263b3068ac1b935068369324e2cb31a41d81a256093dacd80d589ac3bb0ae6af13880d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dd6fb632c2e6bcfcab129025fac7c495

          SHA1

          364a53fd8a0a884df65507d6522c8ef40d9dd578

          SHA256

          7f890ee72df281cb987ac75c4c6dfafaca3f231367e41cb86487d64f1d5808c9

          SHA512

          b52d4db0ed6680e85315464ade6bfffc3152119f14644c220e1cb5eb5d406076d7dc2c0fc7b9c8a791d3df099c97747c614bd1a9a765511dadae86435c482b91

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1d5b82884a1205cf4459b0a5e865d503

          SHA1

          4bb0767b3c03704ef6e4553f762f284d16279481

          SHA256

          ee1f75bd8bbe139658fac42a4270b162755632e57f6516f2b57b733c6064fbd9

          SHA512

          a329dec0c913eaee35fa77cbcb5115f9e28d539da29e7c5974ed33f7ea5e6a4319321403d7fd2f89a3063e8127a9ddac4b083437c6da85d1a9c96a2e80e03abb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          65345ce013adc9c3232a3bf5979a8dad

          SHA1

          3bd806fdd7e71259aecc4f23f12725f6682a4beb

          SHA256

          fb807eb3a22501df5641d14a717adce44c81396caf7d01d8a7d4963e06ada141

          SHA512

          8e697b4b214d18c0a80552faeff6951b77c2743904856a107bb9cd60a871042619d3cfc7691e949588d27f700bb1e0a66b9da4f8d53ce221f8e1d549adda5885

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8d6c17b073be00f2f708c37007a35dab

          SHA1

          5ad01ffafe06ca97ff75624c1ac3fb1558ab439a

          SHA256

          0a6a30bb03bffcb431294d78540458482ca086ecdd30d2a1d9854400c36a1c4d

          SHA512

          38dbab0df51124a34c6b632c7c6c5d9141c78baff05a737789bdee8aeb98b44941182f270504616d33b40c67aad848d72dd7aa256218177ff6382c6bb5856708

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          893da6076a44be18020810a1c41e41ee

          SHA1

          dc06c5cd68bec932b27d254c064128b91efe71d8

          SHA256

          8a0cceb19e994fd709d645fda9f2bd35ee14f8cb678e94f3d527f5e390158573

          SHA512

          ea19cffb8b3029351e929083fce2ccfdd728a635ba7be2d7e622d9669d6562ce66fa3cb9bc3ce9d3dbbde7b41214d19dcde65a718b01c9e6efef6c3eae8d217a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3da5ad0a0866a185b16e0aeb640e7ffb

          SHA1

          145c6c8b06d62de58b2de556eb49045d203653f1

          SHA256

          9d3da20fe08518e75dd9c0663daf22a1fc088beb65621c12b7626d726bab2e4a

          SHA512

          573fd84e9b269beeb71ba0f4d8a7e99f810de581bcd6f2c3804cc029699250f0041cd43d4a672a6a25b3acf28e8f8b28ebffaf04821a4e299a82bd5d9dcc2c6f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4391371ab2f0a2e814c4dc1758ba6bb5

          SHA1

          511be66012bce344e726e9cd4b6a3749d61a8c3d

          SHA256

          da4541c549d57ddd6d500f5e1eb872230c32827980d3ecd00c4c934700cbdc3d

          SHA512

          8f3bc7ee8358d19616b36609a021e313c086afd15461f07d07d34595df21c935aff6b28f3a10aa490e3da6558e5bc70da69d8593b5a58eb901e5d73add5f1307

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3d139c2c75ca672c2799ae152d35a35d

          SHA1

          b35bd1e50aabb0dc16c41db6ea8e99194aa3db18

          SHA256

          f8225d361d3d395d9c55ddf5e7b1fe7cf01c21cb9e37745af658ad431946350c

          SHA512

          4f9ceaab29f24dcd5d06566186cf92ce1d4368165ae87d55077dc3da012b6e9f07a18d604f48058917223f45f4c5a6c25bf1347e227d5c0c862afcd4f2acdd6e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8b90424c38f164bb7ef2f45e6f2c96d2

          SHA1

          0608451114315b2ce4e3458ae9b6258eb5acafdc

          SHA256

          faa208f924741fb87fb00a6b4d3b0ec08ce2d70fc0dbab4b8fafdbafc0b6f61c

          SHA512

          b88e5085129d5cf89e012b3c9d934fca9684964a44e7ecb406783d199821a8ed6903160c8ebf1ea1f603f81846ff1b9750650e2add20b99b220edfdb6a3cb178

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a24b34cd8bbc5eea7501b3c26a9b3a0a

          SHA1

          279e59503f601970e7fb92c82cc70d113d5152d3

          SHA256

          f365563a65f3a85885fb42fa53abfe84eb99bd68064c35facaf6ca60b0a83a82

          SHA512

          a3ad71032c3717de1e420985a38aa6ad52fcf34d4a02e6018a9b89b307837821356dc6e34524ce8da60d11c68bebdf54c927b3fd6fd940b21c56a52c80b211bc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c4a35e75a4f7b0f163482e0a96a4f140

          SHA1

          081401b15ec6a7ddca53093a1b6475b147c60fa7

          SHA256

          4c3759ee164ff9b8a5d72c66510d1c28c7739c3d6c18a2a3db2c4831d60c83f0

          SHA512

          ee203331f2ce4a348a759084d295de1de173ad1f596f1f4e1d04d075ea9d380a2d49713a7ebb09d86ba69335d04d66ef8719291e8689a98a3eefeae299b3c6b8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bc744af4ae79b4c65efe9e74e62a38a8

          SHA1

          e24a5795a9d29150a5e6af8082f70baee8364a68

          SHA256

          0d3d3e63d719d43b958eff3356f36166ce4c092cdaa3d63923b0732548e7b561

          SHA512

          fd5a04298938bbe92ab764ca59ebee1c16d7564d7701b51eaeb972edc78ff02bdaa2eaeff73cf85885ea422d2cb34960f99d94279674e2dabb6eb0cbd163656c

        • C:\Users\Admin\AppData\Local\Temp\Cab82B9.tmp

          Filesize

          61KB

          MD5

          f3441b8572aae8801c04f3060b550443

          SHA1

          4ef0a35436125d6821831ef36c28ffaf196cda15

          SHA256

          6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

          SHA512

          5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

        • C:\Users\Admin\AppData\Local\Temp\Tar8369.tmp

          Filesize

          163KB

          MD5

          9441737383d21192400eca82fda910ec

          SHA1

          725e0d606a4fc9ba44aa8ffde65bed15e65367e4

          SHA256

          bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

          SHA512

          7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf