Analysis

  • max time kernel
    134s
  • max time network
    159s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    10-10-2023 22:28

General

  • Target

    linkedin.html

  • Size

    18KB

  • MD5

    79122270d687e6b2da111de84a5da589

  • SHA1

    56a187033904ca9cd03883db351528f630f8a294

  • SHA256

    4ce23c8d552debb59e10f9cbba9120346122581555a689201a704d30756f1902

  • SHA512

    66be2860ea7c8b1642351268e4d1c8487c75bd440fcc0852dcfbdb4370951a62110c627b4f36b5c63f59d112b2ddb6ccdc4de82e5751fbbc316bd4611430e911

  • SSDEEP

    192:IWdDW+bGiTxw8dwT0m9tI4IvcIWIlf1OrxZz+ittekgwh4QX2bFoXMI8NfFbCSI:IIrSjhnHR7yStekgOXkFZHnfI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\linkedin.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2880
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2880 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2668

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09265b7d03137dbbb25df2ef017a27c1

    SHA1

    372182a04813497bd71e901772760e5b7fe697b6

    SHA256

    69461b5ade56cd18cf279a4a0e2ef6154d32fef80db1e4c2d49a7783768d57f2

    SHA512

    fef660edc6a0a8720a99c5d7aecbd6a3ff43372c3264a9fa4ae25bbf39b5c22027cdaba32c8970dcc9f96107bef73d5eff9677b4c369ad6b5ccce6a4fad9e5ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd4b648e7586bf5082205fbe0d8dcbc9

    SHA1

    cd9cd973ab24f35660b61bb0794d2f3d79f0c47a

    SHA256

    cc24dbe918f3c79fd8f3f61fc774f44f734bb2871c853803698694e732f3a789

    SHA512

    0e43a108449bd1a27cd63dc0d37f8a486024dd693a2f2f99aac08c9c6cb6b48af58089d6b75cf1e7503d2df4dc4b44c70878202c6b3af7d0cb9d57e1abb30165

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f71744e36467674067781e14154c79c9

    SHA1

    ff713c06e6290ee7523673a94c55bf5defbedd2d

    SHA256

    f83ec41cdc3372adcfa98cde645baa196c589658114c9a2a5d00d14f2660cdfc

    SHA512

    ed6d3390d071c282e5a012af22e8ae7a0f9501ec7a78017e9e5c14159ed0735f9dbc9d9b2c78ca998ecf8544ec882052db0571034d815740bc8679452a138d70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfd927bb796008382c7b06b20c7afd29

    SHA1

    d281f1404813d8daf696ab58ba61269872b9e022

    SHA256

    d2d61cd25edfb3cac88a0a0bc9be10e14e0baaac7ce450f38d9ab68f057daa53

    SHA512

    64c2877088faa175a0baf5d992e780157918bc3da29ad3e4badf0f4ea54a7044cd18a866a0fc4c7c45a0cb748deea6349682b2b7e23cf50539380e0c6eeee7f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2686716b0f937d1c93e1ffcbd1ba5105

    SHA1

    6263b90df43261a52388b66f48b364826c74c424

    SHA256

    0263517c28da8b4e6afb1b9ade80007e0065b16a145156ee4d7bfe91b0961624

    SHA512

    de9215a9660249667323af11fa1312d8aa8c39951302212a8bfdf69ab169e1f85550b87741452385a15243ef24290406f6b5fd33d39d413cd250f6ca385156e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3741f42b4ac3b2f6e8ee94e2209d046d

    SHA1

    f6e207858c9f39ac8ed34286f48d8957960edc53

    SHA256

    0773161e1fe21bc22e53eaf45b2b7a6695024c59f6a7da6ae5a31892fd6f24df

    SHA512

    eb82673aea46b04c19162ab0845b1deddd465435ccd4d17842a2da0a1ba39f0fdbf7826e2820274385d74bf7bf6a5c3ed933981e87e24149cf4ef56831564b03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d81c9534dfbb3d3e0c32fec05252553

    SHA1

    84bebcfb90407265d744a0db04f31b179cab3302

    SHA256

    053ea741187df4685cabfdfa669381fc7be30968ad32a5534623805e41fd3dea

    SHA512

    1b6720d81c408717b326f8c1f034326b8d364dfe5cf16bbbea74c1a973377f0bb4dd356d6ece36af6f4080868cab36ef92337bc7de2cded946075096838858f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c568c0515df8836f1093e25eff54c69a

    SHA1

    1499542d26975065b37dc3e72acf3a510ec47722

    SHA256

    1fea3810812757742ab068cd64b7ff4b1b3b7951d024414430d2d54e94f9c2e2

    SHA512

    6c09a698bd491b895f32317dee9ec8e600d87c4c2a292be6f08f6b6ebdf294088d6ef33ab6cbc31696ee8a282b1942c38b726621b9814d6661a9f4a9170df9a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    412e4b71864dda29cf14177b701d6b33

    SHA1

    8d63d41bca23a5f83069201b2a19183fdce58447

    SHA256

    5e7487e456641458a9be056a683756483f3ed67b2af94ce005297f932a289d6f

    SHA512

    2e8251b046496330b4019243d2845608e40498a0645f14d93fb751d78fc7cedeed5efcf76ec9d1b181255215bdec0a675c616e3329bc198a50bf90acd5b17143

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f44a1f657a0482253a284337da606ff

    SHA1

    2c4df20f0e67b7bdacd1c6802dc06f2db5ee3ede

    SHA256

    e4cc4ac6456c0525ceb1028f6b6bc0c26734ed014b3bbcca05e870d13c59d8f0

    SHA512

    21e7217feb799b7fe57e2df51915a82b18f4244a369ede753a4e1fe8ad3546dc813f7948daaf00fb447f54977eadfff29a5742cf9bf575998d85c66c786b126b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3d1f5d9fe149ad1d59e1d34c033f3e5

    SHA1

    da6709dfabf95ff12b02746513cd4682d9e1ec89

    SHA256

    ee605af5b72d99df51697004317d7c9999472b9ba70164cc056098e87ccabb97

    SHA512

    0db912fa11aee806fcbba458e16b28f43f8dbc44b04eab058397cac4156c3d94d4dff70805edc7c317765a93166c2350b588b117c58f2db6eb4ffe62e9e2ab86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    434415f71f4262a8b0e271269d4f18d7

    SHA1

    c1c392d66d54c3485a50f5711387dcbc4973a367

    SHA256

    c4a070c7dd548cce91090a68cf294504157b402c5e91d7309cb894fe8a3fd184

    SHA512

    3fe14c2f178a54917b11193ca8ace1abe301311bbba91fbe6b54c95fd71c56a10568cd0ab709c55ea84b8aa0a2268a55a57a2757b7a21f9e8722543560e63d55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fbf524604c612160bacc10f9479f52c

    SHA1

    53fc427ca51d2e40200663aef591cd1caa0b6b7c

    SHA256

    4735ed3eab7d9cf12c8a03f53bb43af447503086edb8450ef6c2613a9ecc2fa2

    SHA512

    d9baf46f5a8a4dabb4452abe888600d903bf529457ecc03a357b4080227b9da9fa4cb4c30e10355814e92a6b4084b15bf26b62e9c4a3ea204d666a7531d881c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95b6f96531a4fbb25e214439cf1dedda

    SHA1

    0a4b8e282b0dedf3cc10e3fe8f662abf81bcb9e7

    SHA256

    8506b1f65087a922d7fd50861383740cf04ab874bf4656802dd37db0b32db90f

    SHA512

    759cc78d10fbc2aa6e8ac7efa19490026b76ab2b54b43c62f9882e49d89963b7c77efb30843e20cb4e569c08768d53db08845f2a1abfdc846678182b59f01b00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3889ffa523726f0ea0298882e3c8ea2c

    SHA1

    200ec6ff0e8b52eb407281d1a86b4d30e94d1104

    SHA256

    a61132666126c1d9846e12c5700bb64b37884179ff6f9866c7513d9b5db031cb

    SHA512

    0a65499afbe98b1997c3a5f6c1c1b1d8c00f41a2775912808e9b67d797683fd24ac77a8941827e5b6b41eb3ca7aae414edb55dc2741ee1f31c234ff398f8aba7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1534d543911386a6c4c0939e2c2e09f

    SHA1

    3a947e3be62fb7d723a07d652d0a2b4301430459

    SHA256

    19c45903602cde7dfcc2d5445bf0e4998789be511e6666302649b4a6fa25bf76

    SHA512

    7b6290ce7a38316b778425b2e41af5f667256aa1b7f62b411d470a98015cd79d1503e68675018fe0386ca2f0e1f2b8d63b1e4fea82209a58110557a2d1306452

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61ceb7c6264ae2dc84f506d159048173

    SHA1

    80616f09409a8a6f0069b6d63d1c4ba77370c259

    SHA256

    71a928e316daf8f7e7e6efe8391ec012a4ca2608751107604d697d07783676da

    SHA512

    18c22adcaa926def0de305a7229bd4c3066a69142685cbafcd0ddf9b72772d998e87fbd9e467e66960b9476cf37f9b14fe6adcd4d24c42be5423cc687e799984

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e51de357e653cb3be0f668ed74f541a4

    SHA1

    298faf531ccbc8c47345e68cf828114ea1738b8f

    SHA256

    5dfcf6a5eb8b5ca2f51463b650a591b7aa57627a717a49b67eb73aa040482ec1

    SHA512

    cc4f508081f02a080a2b254fd5db4add8ec07974829bbe4e7d7e79336eef584eb08ed0efbee8158977861f8509985d1861d7b567de9c30c4d7ad36ccd10a502e

  • C:\Users\Admin\AppData\Local\Temp\CabACB5.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\TarAD65.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf