Analysis

  • max time kernel
    117s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    11/11/2023, 22:00

General

  • Target

    dpr_report.html

  • Size

    1KB

  • MD5

    054e373de9f9a37790eaa1769b2ab108

  • SHA1

    6305078cad8cfb75a4c79066c03a742601be7f45

  • SHA256

    f9689be3f17411447ea7ac066654cc65271d5552edc55b186b33797af5e6813a

  • SHA512

    3f7c13292d3ccb5cdfec2892c6e3c2f1746614ffeb71a1b1b07564082bc6377dd655ed315fcd4ab5c67161e242c5ae2a4bff669b7e029a66eae99039c156353e

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dpr_report.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2064
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2064 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2792

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb96b6fddd7341c4165f6f1974fed99e

    SHA1

    96c843196c7d5bdd9aa1e292e9ec2a37864c86db

    SHA256

    4385d9196a55f1341cdc016d68b0b63346780398a4098e438b18d1e77da2807b

    SHA512

    721a8a11663d8dd577412e885ec1dda3c93924775df2dc3c2e282453f417affd51593984db3f0669f7a553ad0c6000fcc1ef265a60e0a4ebac694a9fb6689822

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b125caf39eebc32b4db20337cadcd13

    SHA1

    6811a663a7512154f948f75cefcdca9f64baa00e

    SHA256

    76eb24ee951d931152615c7e7bcf70aa2e857a930036e5ba7c7be048f88a10bb

    SHA512

    a9c2c50b4d735f3c4f7e07e57c9d7d03d14010f2ee36633ba5dbc4e3a4acbdca2a3cb5d07deb2ae4741ae6e0c169bdb1a206201a6a595fe6b22a95a926f76220

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3eb36ab2a6ea547d0eeb8f8c8d0c634

    SHA1

    8b8af5dd1434e56e5366d001120c291f4d999526

    SHA256

    4e5b4b36f72fd9298b1475a0f74ccb8d6caa59c485bc996e669aedab553a4337

    SHA512

    8e0727a5f3dbd6ada468b5990e652b686151d784b11af527a95d4343d6e5712ed9e679bc2f1bc25b597eb882425f405a663dc768523adeea7802154aae20620c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa9841a77febf7b7bd2b9998c730cb12

    SHA1

    c9682d210e1a4f26e082aef83bbb8624cc80251d

    SHA256

    b8910140f531f3dd0bc458cf3bd0b79b36d76799c0fd3b2e48b2472be4e1cc49

    SHA512

    cd233dc9bfae662b607567465e862ff8a3e3524b6015f1944d890e1b17d0805c7728dcb01d6c67e2f66a82e909c99705ad4da5e1ed3d4108aad3413ba0c0a723

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    699cf52c4f2ec7dd2b6261ffb6462846

    SHA1

    fdc9d44b9661eaa2300e515ed1ab7d12512b25c9

    SHA256

    bcc29e9dd88f9de856e108fdc9ea6e63cf1ac73358add89de6f79b8c9345e107

    SHA512

    a451b56d25628a9e9e06d5c60c51531f60ac6ab9c2c62b21253306e61ba82d0ec36af9c11db59f4417e0366005a7c829f504820fd05c85275f61f98eb9cbbf24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    149cb178dc4f97c94fa807cb91e7c56c

    SHA1

    5414c3ce6aeed047bca5e22f55c93fa9bf76c0d8

    SHA256

    fee28380f9e19eda230d67423b090273985e4a4b9ebbcec9376cd1335edd0f2b

    SHA512

    d942d1e10b2da3ba581df833b6a0a84396d801108dbee003b41bef8d6f951010c7c69a7d3499c6626624207cc722f35d8825ea662b215bfaca6bb1b879de8500

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94c9af667257877f793a5cc15728c5bd

    SHA1

    4b50a7712eda0fd35cea1ca7f83dab55576b8ff8

    SHA256

    5e63da0a9ade0a2c376eed515ef60d1f22c2638b6aead9645279e3f8402a56d5

    SHA512

    2cdf98054eaaf1389425c81f34a898bf8a26f2aa9a55afedc1cb9cee99308be7fd57bb3854eacfecc56d94897d4f0dfe42c1bce002e23ee95bbd96659e8293c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ea2f9fb3bc0fa530aa988b35e28771d

    SHA1

    a1316f366e1bf8ab6f5809aa50e41ed82dda13a5

    SHA256

    09495203422c65633c5aed5b4eb6babba366858dd6326afe7d0734de2d086c4c

    SHA512

    da1ad4b77e681180295168bf6dd722cd3d5cd72f00613843b171bc8fdb87c81458f3bd82443140fafdba7946d590145e4704f715622f9a88dbbf6fe9b6c63595

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c1fb172d71de6ba314dedef81ea61a4

    SHA1

    1ec7adfa594baac427429465ad40de38780c9333

    SHA256

    f57569e7d57f632767b606a470905950a3a4f59a688d40327721fa4b83c7e17c

    SHA512

    7c86a31be4115288a5c67e9ff75186617c79e85b3c4bb8be910ce0d63a3880e705e1aba794d9f66477aee6c89d5a5778ad1d9a1cf3a972e05dc5b30996fdff81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c21e19a0d4fad80e19520c6e03ff7c8e

    SHA1

    4c8680c76f137d59da7890f20c75a7e0a9472679

    SHA256

    21fefd13610c262f738b4586c5bce9f95bd7f25494b50abdd117b185650cf693

    SHA512

    8d2bd1a10bdd8f3e240722abe92ed8e539eb15da6443877916b42804929d1baf9927f53d639dca693d6c755bef8b1de56ab3152755b9a507d2f37c559d65bf5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1567295e059a53ec32b964424a21f30

    SHA1

    9865434a4242c2094611510c4e0e942a087a560d

    SHA256

    73d7a12efa39ed1363ba1184f271f307c04fe8059334a4ee1bdb17fe415f4847

    SHA512

    6314c057571f0d0eb22044725470eedf4c057016d06ec3bb89bbdbf8ddd2cc4c200c813ee587a4a8a43d5b235470b811da8e10b7bcee53ba3ee49b01096d699c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4670b70c24da9c0940dc4e4b29bf2d2

    SHA1

    e32d3598698c052ac8478d11fbdb5e98f6044a67

    SHA256

    39e4c0d5ea770dc03163ec5c34287b5dda3b7c0b4ad5997a17d43d0e55324564

    SHA512

    4eae264e94f54eea057809f08db5ed0f95f559b901c6fef3efa586eacc78ebb8eb6486fad335f8caa50a8089313817894de70bdec776045cbff923901d389a14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbf9837cd662e38c7b3bd88b994e087c

    SHA1

    c530f97b7d86efcb4a6015c9860a246a12240341

    SHA256

    cf15990a70ad02a359776e0980e28e6215612228222e090a414f72ebbc0fbe96

    SHA512

    f3f3033c7958e3c911f0af66bcc303bf68f3175fbedd1bcbe0d647c5adbe9a7313e58a15dbd381a3e8f0355730ff0b9db67c6fab60dc31a0db9afd2cbd1f306d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e9010cea92d3e0d0e6ab97f7c337f14

    SHA1

    ce80963643e9e99ed190f85db14405bcc8e308a3

    SHA256

    dc3e450e5fb795708dc27d5410abedb7fcc22c4edd88b611cf497c15c5a75a5c

    SHA512

    ab3abad31675dcffc2ad9f4273fde7bad63ee423b815b35a3fa1ae2c6779e2aa43691864012707988074c0dd5328d8fe071d5b556260ac520c5f1906401f7141

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fb7c90308eeb3fe6a102ec42b69baae

    SHA1

    ea787ac61b25ffc9516ac2313675afeca59325d7

    SHA256

    41657ae1808ba0c3fc1a6bdc2e45dbb5cd382a2e638be93d77531a43f4e0b7d3

    SHA512

    8376b255132cc3b979b47d34735e7ede5e70a70d754a345a1a7e20cea8175de6752b4503f1b7bfb80bc50b90b1fb091a2d84088f9de03d1119efdeb01a257aeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92705ce64a596f738c8346422e7325b1

    SHA1

    96d83cfdd42e22f48065c6f68d72b56cb882fc80

    SHA256

    9d080dcaabe9e504e142309c8ee812c747a216a0190463577febefc80feacf69

    SHA512

    1a2f80334f62db0bf3fc7124f22809bece5af0fc81616b01ce0e7d71860a334efb01473047f599b7a7ab99e065fe1cd2fbdb51361fd4e7663dc55b102a9d135f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b30e5586066724cf1f550afc339c3b4

    SHA1

    b1b6073342b6f46fc8bfd682796ca47dd0291420

    SHA256

    298d94b532b0559b9cd17686e647abbdf9a19782e1dce8b1d87d5d120031d45c

    SHA512

    d04408f847a65b25479cbb532e06a30b0928319007bb7a4350cf3e971dcfcba1577d4fa1e68cc5c572ac912efd00799c777636cf415e91f9539647305ed9d3c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36ef9917654f505c6559ea6120b2e522

    SHA1

    6cb7587ef59b4cef1ff79e88ffd677d39f87783f

    SHA256

    a3d3abde002397805d84f68822536e94458546c65d476381a055a6afcbc889e2

    SHA512

    8ad12b315d2fd95284081f22f5dc1b72dc84d38904244b932d09df68b19eefa485f2712b88b2a777d645d9187db646249504247a6395f55d5a1ca40527ff85b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49671abe901ab63847403c991bf5bc5d

    SHA1

    f4e9854906f3abd64ecc1a152e7729d52942ee2b

    SHA256

    575bc11778633f3241019b9b0f3f577821f3aa8f87e7c57b43d8a5bcd28ab1b5

    SHA512

    051f18aaf6337eaa67d4c841b8952e33b313039f2b1b661204d8f74093f6dc3f022226a59d806668e30cffce952b094a388b74885634ff2a595c87d8f408ba6a

  • C:\Users\Admin\AppData\Local\Temp\CabB0BB.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\TarB17A.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf