Analysis

  • max time kernel
    134s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    07-11-2023 13:57

General

  • Target

    Bv9ARM.ch10.html

  • Size

    7KB

  • MD5

    439306d0ba31297a85c07fcb3ef9eb8d

  • SHA1

    187fc86cc6fb151bea6c377d887ce44683683fc2

  • SHA256

    1639f4d2f80f2b1e579dc762e3c1a351901cd0cdbb0f6e65de9ce1990f1d6e6c

  • SHA512

    1805541f8e202f5a5287a53e9515aad4e46ccf5be5819e3ac13556b04a1b46b431dcb85798807272eabd8e8c62e259360bcd1a4a2a27d94b45e86c1bd185c80a

  • SSDEEP

    192:nyvOHxDcNSDZDEBIoZhsXJ6Cb0eFu3D/add3J:nyvORIY+B4U3GNJ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\Bv9ARM.ch10.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2456
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2456 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2216

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95becf8eb17416e4207c55fc189c7156

    SHA1

    a9bde4732dcfa50914d11ad8fa3af076cc3e0495

    SHA256

    458e148743b3e55aea9a26ceb6e9f3690368960d1ce558bc263759c8cf744cca

    SHA512

    50c63354b1ab3f1ce6de41e4a739dab636ff0d7a09fa733db6e96fabb7b1f840080fe871b0a90fed2ca275165931a7e1ba403da4437374d8f6a46fc79dc0369c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a430865da9a6006f27bec11fbc0454a

    SHA1

    64ed6390622be308f458a63a4692292c12f7d67c

    SHA256

    9de8fc688a9687ed69ffdf48ff5a8bbc6bb5e3fadcf7b9fcd81939569d9b51d5

    SHA512

    e3ef4ac4250275e1dd3609859651d81418ff929ef660329f91aac5912409b72159cbc9d0111aa85c5047200c4a62d325dd971ce84358218ac803941ac6d2c253

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b47d7cafd0b1a6ef8d6f711e4548a21c

    SHA1

    42b4c6708499d521fde384c56a878f4735631184

    SHA256

    e93fa694ca888c542e9e230c134ee13111fdf8b62c26e9ba20af8b129083872b

    SHA512

    e63ed634e9e2bb2b43bc34050e07e75a98ab7d97be0cbccfd7d591300639addff3e1e436fd70092ae500d5bd5b5cdf831c128e3ed44c2906d015a39ed76890f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cf8eba86b8fe8e0657f00d6ef32bd4d

    SHA1

    f645831608a6fdd56073f47f40cfe693d6290d38

    SHA256

    5209e62a51c3ea0c178e1ab34d23e91d70e9a0286f5ee8f140c5cbc57a87a943

    SHA512

    c91864a691d48fc4ac0fce20b603725845fc445c6ca226db20f6a09215b19f538c80ba86a24f1405108dbf7f95afe56d6eac507134442d6243ada12eb6d5a09b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3cc1fad34fff2e6cd6be43d1011dc8dd

    SHA1

    7c3fefa09e38c500cc036d8e9f1a533c664cfea5

    SHA256

    648a03a64d2b1e6f03ef07b006e385fba70543277e48c02d50932c02e0e26d52

    SHA512

    8c7d374c83f3d8647e5438d17eb29abcb5c1d7e55fe23dd98b8264f1f8bbdc66105c7c1e5c4d4f513fc7f0808928e1a7ea5d28277f56098b59055e4491784c19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    368e071a6849610aa7e299fa640e5f01

    SHA1

    feeb0b7e157c394718efe37ba5a90e54edd25e8d

    SHA256

    8ccd54cfdf3da6d056df7f3083956946552cca8aec43156761cc84b2e8343ab8

    SHA512

    406ac8795c394210273122551effa5ea9e2198a7c0e2e93b45c435eaf590b85088a43273b225abfa7a878a8a29b7ea45cbc4e2734fe192cb755edb8e72376cf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00d42c6448cba69a4e301a575b4689a1

    SHA1

    86b15853cf6dd45c0fecad4fc95eaf1eb67e8666

    SHA256

    a08ab62e451e9866afc6166c30ff2ff9adb1aa6e1a0b8f16a72f0366bcb4003d

    SHA512

    094318306fd556e0b2b8fc04a59e3cd14c4887048145fe7efc6513c1d4a5d106c12d5408351fda4f6d54f3051bc60af1fc493671093ce6bb00b1136569a81f6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb6293cc268129f4e67e45099c4f47ba

    SHA1

    6f2045c59c0017eed6a2035091b6533f40be8363

    SHA256

    d349834371afb44e50df80ca99a52fb494c3d3cb363e409afb8436629ec4c767

    SHA512

    87d03b57b560c0394042d8ed9a396c642dd7fbfc24e201da2ef6ac596f92a1deebfe209a1552eae83d8a69cecf3f848de041dc43bb884cadc538b375013756d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bad48dbee61d33470212c327d69d22a6

    SHA1

    21d37d2b720c4eae34f43d34c1d13ff8d5fa640c

    SHA256

    e0a70d1bfc3d5fe62035f2ab78c796785b0e9ba0d82b70e908eeb069ac4f3bb3

    SHA512

    7f6e92a95ea26d90a26592a5ed43e524aae671b0bf15c6a5e30262cc0952336898e433ffcfd5d8d747499b660ad2003abf340233ea1a742258b8a4ac9e189bf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d1b3acedd41981e400809385950f00c

    SHA1

    91563cc76b181215a4279764435bcf4a7d706d14

    SHA256

    99ad3ccacb2d9681f5a489f549426d139403bcfcfeb30f6d1339406ec230f151

    SHA512

    7065ac8f0f44e2fbce734c690a97ed176aa696f3c0eed2dba459377796cdd9a70db100945077fc94e2c5e21994c8ca9748d4054349da21e6b0d0cc76dcbaff51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bac80f511e867aef8bcfea9945eec2b

    SHA1

    639e92fbe7f35bc19348b27f3de92f7a36342b30

    SHA256

    a76b493a2c7a783740c793b7bd5db5bd3d8a67d78c88b517d6616a2b82157a8b

    SHA512

    eae17f578c78820403dd7dc985c9a5f0c52c9b335fe98a91441d3a6f9b99e59601340e15801f9dde9bba2b67291ce0429a9d01340229a5839878b90913673430

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e652fe999cb6f999cc7e4e22862f124c

    SHA1

    539a0695fe9b350703a08a36bb69b806aee4a1d4

    SHA256

    128b8e1eab31ed32ea09fd5c835015be032c9b1fe642447bb8050497ea75bf40

    SHA512

    693717776ffe4f192da1823ef79ad3685d9441945a536fdba364a410ec6d71a71f04a933385a0ec80efb54744d2c37e076b148b7865dedda9a03658919de7cc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    666cc34760332d78686f687713605bdd

    SHA1

    c879f44e5218e465be03b2c5d235eedb4ba76cb6

    SHA256

    2b59bd39bd4bb1965b42a16a747005dd5ab8ffa13e8e2e95d37e61b86d6b0b7c

    SHA512

    d531809f22064a9a0e1f821bc9a777f23ee44065694354f8db2be3a1acd9888f79fa216c97c602da0c0272f2f18ac1767467850e46b1f49222498512baef0b90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6572bec8e2fa0ea3e7bdc894f5743b71

    SHA1

    f04894dbfb91c0f17850bf98ded8759e970beb46

    SHA256

    bbb17d73f8dde6a3835e0446edfb95901027306dc0ddca1284249f633780c223

    SHA512

    6d7c2d2b0774af90ed72d192f947d13e32d58842893af0727978a3171d0d71a0221b61be63d6a7668e3fc61c8836e7cc54fa2ee8c04ad5851b4b40f6ed645ca0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc60cfc94aaa90eae255719714219520

    SHA1

    927a9da67fc9a7a525acad69fcccd0f0b8cee50d

    SHA256

    a68c03ebef50e79d012bba470418dd42ad833a28438ad657933da56fafaa9d29

    SHA512

    e3d0b9c1cfc894a140ce3afcb0792db1f4efadc486067972234a51055d4e28e78f31698c003ba51c2d445fcc87a6754643379e787cd6ea2ce89c2a47675106f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    281ad001ee61a947a1175998939a4937

    SHA1

    fc34dcfd4497164494c27de968dc5c0404570ebe

    SHA256

    7d0d671304e99238fbb9f768c168e6e2daead89dec16af2b987d049dcb42224e

    SHA512

    e4d47fa400d61996113fa1226dcaf03ffea65831404363f53629ce6cf1e8e5d0e1a176c6a6c8af03b921551dc81969adf82847f402473149616df6884ef9bed6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ac072f65763652ec785bc7ebff29a2f

    SHA1

    4d597ebe46ba913d52851e5175881b77b5670979

    SHA256

    9ad5d4b06f113d646d18ab18ca32b4c4ee4354915036d5513909cb06c75bdd2c

    SHA512

    acafdd967d6b1c3de26b15afc808a5a38b7fdab60c59dcb262cb68a46175dc96b8f8073ffed5575255e85dadb00260f809d0911af937d5a55c35ba6c2b181f86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d23147b2157a119135ebcac861d92e83

    SHA1

    213a286a640eddd277b0349613b2a64f14cbaf96

    SHA256

    3faa6efc40b45dc0a9224262bc68898bfb70261c7aa02d9f563f3b23e5b9745b

    SHA512

    3938f65eff6c4460a6c36c4913c3334f809ea82787a189ef34fc00724d0f7f3033eb6187872f9379e3173f5940ed3dd06f4e6264c286962ba1ab6888f8e15020

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0de21e5098f4c5afaf45abe2dc235d6

    SHA1

    99556c4b653b3efbcdb88c701713afa0df35bfb5

    SHA256

    f7185a4fde6cffa95152704e2f6b09a6965cdc0ffbe273330be4d2a5927333f7

    SHA512

    bce99b6162964fcc997da7063da0233944d3348a4d9f025867b72d01e70d52246bc18aa3c132eebde1fb34243d9915fd849f656d4451d0629815f49f05221301

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80150ed6c48afb24f14242ff594fd7eb

    SHA1

    61170605d2a1b72cc4fbb06e6ce00c5822570ffa

    SHA256

    76c7e2affb27aef627669c79f2bd85f6e5be6d9861524b95330c4d4e9c8b9487

    SHA512

    e958fa06ebeb6b8f78e65fc128acdcd4cffe214e1bfa842971f96841c39a3409f560aae0aa05cd7a0a27fd1fae181e2a6bdb9860fa96c8326e281c73dfd1152c

  • C:\Users\Admin\AppData\Local\Temp\Cab733E.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar743C.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf