Analysis

  • max time kernel
    134s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    13-11-2023 22:00

General

  • Target

    app_get_version.html

  • Size

    617B

  • MD5

    9d84ff259a41328bb856984da9def25a

  • SHA1

    25e16b76351ae5a5aa772541a9ced9f9d8b6e115

  • SHA256

    c0b35e30d789b77cf0adac51dffe155b5d5c2541bacf6fd50a4ab8cf169d76d6

  • SHA512

    41d746f102913a2663f344c2127df5010b42611d8ec853261aeded28d98c9b08a133bbfa7e5289e028c670b7964d0227840731ee3b623788dcda2d245227c8a3

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\app_get_version.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2760
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2760 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1aa92fec2ffbfaa04e18b55c4cdc8b8c

    SHA1

    3f4b3c4f46f7a208d6c003a6697674b8568d43d6

    SHA256

    426f916f523ec4e9602f80f4faaec4ce4dc33b51a7646dc7a90f06e6a6320a3f

    SHA512

    c7411e13108618402a1497404d7014c6bc0830c7f5040ba4cf0182fedc3fb41be182046c995609e1f8e51d62144c74afdda4e32f6fa9517929aedc6014265375

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fba03350bdb07f1e6f0c913c3e393fbf

    SHA1

    252c2dac22fd35c432412aa645e2cb3a59f0f713

    SHA256

    53311c8b526cb50e0ecc20b2d65b92a427d49d2b696b0b196c587623f084deba

    SHA512

    a43c69636139ae7bc480c71fdf227a8e38b23c1a2d5cfe4724b4786190e760bb264044dd5dc4d777ca249a33f3954b78994bfd74ab5f83ee2ce1a34b5d11a90e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a1a523b58066dd52712428776f14029

    SHA1

    bf00a1ce1cb5cbaf203ae8aedf373aeda9467562

    SHA256

    19241c9c3e6ab238becc8c2c00f16a25277284c620f342bfcdea0c36ee76dc62

    SHA512

    9cae4ea40921d48162febd7b73a0378b253c9db50fd84b0a110a5e47358ec3de5fb0dc741d8a69bfc23b076fe7e296759e9122237a9a183b293e257b0e497a0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc11d640696805ff7f6fd448ae5d55af

    SHA1

    cbce3d6431b3873c1ffd66bf315a2afe3ec77b25

    SHA256

    79c492eb66fef4fde23001c2e41cecb577b57a17db073a7ab5c0305abf3c52e6

    SHA512

    ede868ef2285b71fec89e891e4cd9b28ed62ed407df91696895d49a16eff738e277e606d94f463f816aeea1c571862f32a92dde7d7f15bd682237d08364535d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    202d35e3960daaa21813888004654d9a

    SHA1

    2c0a3a866cf6c322b081a83079a98220feef851f

    SHA256

    e475cc6b48f5ae593fb0e69530168db5fdd11184e29eebabcbeab8f69f0b85d6

    SHA512

    db1b28eec063a12f620efc3f73b0d2eb9d47b20c8bb94b8260f6d77caa9401783578c82b12d96c725d04cb2c8a9484b5bbc08626524ec0d98ba2e9bf54fc59a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    058e6e827eb12bce1d2059f1e67150c4

    SHA1

    4706348b1b81465b6f43a649ae784c2459007124

    SHA256

    77abb9ea4e4cee2b4dcc06ca9f9d3857fdb1b34e8e298df29d26662ce7a68803

    SHA512

    1e41a36716c41d6c2f7b50de6dd1e3323dc1f4fd327ef66f218df40e44c49c7e805e77952307c3e07742d18f8a017b1976af0f423d7d5450a2ee7156a1806d1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7675906d10fcc83aebf3c6387af32a89

    SHA1

    fb17a633b78367066da2ac1ee726b587c9f11a2b

    SHA256

    6923965e2ff3c88235bdb98fec22688d97a2940888d3319ba22928a08b1c1132

    SHA512

    e484f9d8e30bf66f1aa6c9c5651dedefa92fb5e71efd2f9ef8551da5a6331cabc741ef33cf112013be31c264bf8fd1d1e5f3e1538ba942406b15f6463dbb60e2

  • C:\Users\Admin\AppData\Local\Temp\Cab625E.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar62EE.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf