Analysis

  • max time kernel
    134s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    29-10-2023 22:00

General

  • Target

    fyb_static_endcard_tmpl.html

  • Size

    3KB

  • MD5

    d18fb1787ce0e84567496b8564e452aa

  • SHA1

    007033d0824685600611af6992060577e127dd23

  • SHA256

    2ae5e0576febb1a1cd63b10bf71644f99fcfd0fe7fb1f2d19525594165294e51

  • SHA512

    ba5225a80941e3ee4ff18401b910968a6cab47634914ecb68213599b96fd4b39c8722e82bf2883faf355d9416a6f2acaa36151a5d8969079cfcd4c6795f6003b

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fyb_static_endcard_tmpl.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2232 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1744

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59a7ed77ebbb0b49c952a96d1039b85c

    SHA1

    7d4959e5848ea72529040775e3783e29cdaf1729

    SHA256

    5a079c2766a0d89136a78bc7dd11729a1658607916646f7bf874aabd458276a6

    SHA512

    9c268e23b0dd8580e0bf085e5bf6641062400e528a29c4ce2a4d3a619110c8e5d93fa3de097562d7dcfe367b26d46383c843ae30a74dbd08f494f574983b41b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    634f2ca6564560ea85c63fe4e00f0ecc

    SHA1

    297841da2108b1b70407ea4ead7eff4e4c5c5fdf

    SHA256

    a45087252e060e499b4a91352e7f6322c34e31f30309fa184b7b9ab5834223d7

    SHA512

    37b0870b85a6e597244a4eda2da0d3a97a79637e0e4a5e77ad5c21606b03dd192a6ee58ae17d3f47a7abd73dabc22dff6bf6f71d45830254ee0201194900d097

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9729a01c6c42d44118dba1ede5eafb62

    SHA1

    7341405688aaea35f5847e4e9ecfb6cee3d44fec

    SHA256

    80bbcff379783092b65bbddfc51dbc31524a625c9273fe68622cdb9089e29f1e

    SHA512

    cce517ee92b59dd332c643d4ed5ddfef005ba93e2c0ea1b96a6223cc82daffbd0d825b2800fb9c3dc5b1e0ead0c1f12d67bdb64f044b27347441378bbc191628

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c6be821769a5168a32d84c30f8dab37

    SHA1

    e654e9ca7543d753e42361b7d0e76e1ccb838995

    SHA256

    0f8a74f9fd263f90d23ea886473b98639253f31bc78050c568459c39bd9a40a4

    SHA512

    c54de3dc0fcc250630fabebeebaddb6c6212b267c589f6c87ddf35155736dd1c4a5597d891b88eefcd2b84e22e90c3189f795583733b4a59080d82c86e3be0cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20099549f6ba0023c8510e56c660a545

    SHA1

    2912518d59c2b2eec17621cf1948cbebca45e47b

    SHA256

    55808da0c70e0d6335bdd847af0a7f46b958005ddd615472707179df1421a9b0

    SHA512

    17dfb63959ee31e809bd140dffd039502bfc381cdd9aa392f9110054753ccad0acf5fe9e7ca3932d4b176d435401c8a47ba8ed85ae19b94954a739a1f395d1db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ec15785c033fb0ffc87f1194a7dc007

    SHA1

    3d6f448f524688c5ca36520b9935b76517f56e31

    SHA256

    dcbabe40c0999ba48b45797bf1b94c37fc933661b90992c610da8ae508b2b25b

    SHA512

    9b826a436a8103c98988574cc5deb5949cd5410df15c8e5da5b7874efb17e73f511cfc47fa32cf1dd7fc7bacab2abb86f0509259774457c72f73ee89e397470b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    284b1b05ea9412052c6ac1cf5f0198b8

    SHA1

    b90a0707f20ea0ed19bc1fb64430eb24b13859c2

    SHA256

    9319a285416327038be4cd681fccc413bc875fc3e367b5bebfe0b034d74d9514

    SHA512

    fb8fb1241ef0e0da91cce2e4781df4d3e55ba41dce7bcfa585e64af66a4f2683ffe2c25d7133bcff24a31b6fc0428eb883ef5d27fad01fc608afb96e9dc49263

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9d85e33b9856c0964a15d49793a2fb8

    SHA1

    cda2adbbd455e67d305ee911b66058463c138940

    SHA256

    2391fe5caeab018612d79fc2606c19f79a3ac95de27f62fdd1d477174ef2e137

    SHA512

    f886fb163dca4ce199fca63f5c42d71b6ea7a1b6937fbb22ef75c2d7441b27c4a3e797948e03d37ad9d516d5e7340f1801b302cbbf618346306da976d8b550df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    110c1be4d20bef1c5211e1d5fa525a73

    SHA1

    f663665b05e416827a45f6641f1c628174441b06

    SHA256

    7627feed1c005ddceca50b413de75e350ab46da65d366ab0ec1875ba5c8a9410

    SHA512

    a87df45109967b608e09def73d7202303a607f3531bc1d3b053c208e1893cfaa46b920005d8292bf4d8af838ca979b4a9fe12b6e9f80a7811c7e6e77b50b4426

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c41ca420c8e926874d81024e1a68bddf

    SHA1

    748ae590dc38b1bb205e0e8aa22e0227e104e06e

    SHA256

    78d04736ca9807cdb3390be54f47a4556ae1196aaf3a164ffd11ac998427afe9

    SHA512

    15845f80977abc8c99199993724a3e496fc88d8ef9dc72ba9700501d34fd28c00c354462a3e24e5bf43a098da9f02be9e75603200aeac0002c1013dcffcc620d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a15cc700ea6789df859238cbf1db4968

    SHA1

    87754538e1d43bdbe4f2cfa293a4411867821afa

    SHA256

    a68c1fe15bf8f722391402f8bdea5818e4ea2411db33cc3a5f9db7ea57e9d9bc

    SHA512

    b132ca0570fd95b8254122f10818e897b97db933ac92b5b71464a373cdb63fcc6677875b43e7b8a190590536c759558cf81d16b976652df008936eacd9b6aa7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5bf5748485e98557446d83ba787a296

    SHA1

    0085e7dd324c442fbbf1390b2234222af6fc885a

    SHA256

    705fb9a9998751d178f1f1f6d431d6530942a99f83cce80c4c2943d633d7e90f

    SHA512

    2c652aba92d4950375b7ba2c6418ad6452ed395e410dd276ace2d5ee2a7f8a5df46d6517cae729f234b2396f6c36777333a74ed065016e81ab7ad5f1852fcc63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82ea2ec88ea8abc1f2bf5aaa54215710

    SHA1

    5ec64dbb3610d34eed964567762cd25b41e45e24

    SHA256

    fc23b8f206ed9cf2e3f8aad7de107794063beb9ddeb42d81690f95352334b6b3

    SHA512

    6700f33286fc008029137989e6b73d7186d0fa5484862e414f364a33ee797fd420973178af2757f7d2fd2fa1548acaa625186376f576003d47826fbec48b7b1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e788527d210e4755e74d40faf25bde7

    SHA1

    5b02ea4704c9b181ad9ad8b2e7236d2d9cc7ea2f

    SHA256

    07ae004f0dcdb6e8657da8a5c3af6aae9ae01b1364e8be7052219d1d65f5a101

    SHA512

    caedb1c4574a2fc236154a6ef75d41d2eb8791d095fcc06f531f9215359f108479194651d4c8f67be059222db934956684826a1f667e331dd7d87a30aed58ae2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee6d9947f34aa370222904dcc0595a49

    SHA1

    804e27c2ac5212f590d6bfde653773692017343c

    SHA256

    426d99d2421d8a4ead348cf8ac707ad341ad2d944ce6fac42e1007b2082a1000

    SHA512

    103f7c9e24f85aa128e5d579dc9ae512617e4a4146aa39b2ca7818074bed53757313ed0cd995e0aa0552df472fe3ba221fd232606b8725b5dd153971bff6ae8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33c41f2170e022efec390d53c0f4203a

    SHA1

    4dd4d02619df2a1a5721c269c3207baa158c634a

    SHA256

    8856b4737732cdf952a4b2d36303ef1096a7242b067be35f868a84fd030ca940

    SHA512

    e20a624f0a8d14549b205ebf3725232951b1eae25e4d8fb301a9942a0b4323352288bf44163a3391db504c914302c34d9c2b43d9de79b865b7eaed7998c4e28e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ddbc35f3bb865add55ca548342fac54

    SHA1

    7d79f0d39a4e182eb5159dd10d6282d349a7c7fa

    SHA256

    e844cde30b9186507ddb6bad3aa91105c6db21a5360c8fa79eacec4823131745

    SHA512

    58878ffefc9dfe461a5f340eeb95b144588440bc128490380e4bbc0cfe6ebb0b1c0253447c7a5490b9261581318b25217cd664796f3746b39f4082bbae4b1827

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    525bb78e0f7812c52f916b3571c4d134

    SHA1

    f82d984e7d6689c3144248c02fcbe9c02f8f11a6

    SHA256

    e3383c66fdcdebd45347630c6980f9e04e4ff03b7ffc48398d3d055fcda4067e

    SHA512

    8fca9dd4579064173f91e0ee4db69b69ab2267ec43a66d1966ac44b95854b2fab95e2db32f191c42bf0366d41e03fb3a7170346c6628c08278a1061f333bf28b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ee2cfc2d918150186248c7536c07721

    SHA1

    b11bcdfb9a40daead813e5619f97e27b7d8c775e

    SHA256

    a86b245cd30e499805537ff4840f4259f220098b6f236b90079c2bd623796aed

    SHA512

    b1cdc3cdd2e75c6cc3bd76b753c6039b41571fcc787b2ec0b7787cff1bd0e6d977d69a1b1b9586d5d03a69f1dc84e1707c33591c6cd4f639f3233ba98364f3f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6055aec6f8cc15f98fc1499be5bb7e5

    SHA1

    a9d64732a0c4102cbbaf5a85b4daa489ba6d2c09

    SHA256

    a04535485b4fe3ec40cd2fd187ba66a59c45dce87aa678e7df3f94780e8f9b29

    SHA512

    bf2703569799faa4f80c5e6ca04530059d3cacf8df912cdc92d4eb71af3232dcbf861678387ca984ca1a07eb01fe6a85c9efd096a495ca4e2c4a4935e8715d96

  • C:\Users\Admin\AppData\Local\Temp\Cab587E.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar597C.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf