Resubmissions

16/11/2023, 19:16

231116-xyz7yagb5v 1

16/11/2023, 19:13

231116-xw5pmseg98 1

16/11/2023, 19:10

231116-xvh49agb4s 7

16/11/2023, 19:07

231116-xs3e4sgb3z 5

16/11/2023, 19:05

231116-xrvc4seg87 1

16/11/2023, 19:03

231116-xqvx9aeg85 1

16/11/2023, 19:01

231116-xn8fkagb3s 1

16/11/2023, 18:58

231116-xmqt5aeg72 8

16/11/2023, 18:55

231116-xk3qxaga9x 1

16/11/2023, 18:55

231116-xkskyaeg63 1

Analysis

  • max time kernel
    135s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    16/11/2023, 19:01

General

  • Target

    http://a.com

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" http://a.com
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2112
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2112 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2768

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b975248f08b284ba83436a1049326ec3

    SHA1

    d7dd48c556a2576d5e6f0b503c070e9c36444f95

    SHA256

    e5239484d5c31590ede490a2ea63b8983815ba42b7469d9847d84302ce5a1f7d

    SHA512

    1f707cacf06f976f819ab9d4a4914733ec400a8d6659e2cea32b741a5ad4897abf5043a5ce3d466b227ae165ec29e1eb7c6d7477a911679972b5def392d3905a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33424cf240f5466f592aa310918e588a

    SHA1

    817afdd5a816efab269e9d1fc90da71f57043b43

    SHA256

    843777718f5cfc4e46ccc41702da1224e339ede79412f9c7ae19ed54d9577589

    SHA512

    dfa7af6e99351bcbdb25884184f98173cef537fbfee89faea5ba458cf4574451cd863e4186fdd1ecff4188982109dcb28df5276bf8073530d9a2110c4b471ee8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0df766a9e58897621ed72a54be3895f1

    SHA1

    80d6a960fd577abfaca8be33a16b6a7c96eebdde

    SHA256

    fbe240bc795786d5d956d471f43f6cc38f9192bb2b1bf307622d17f266963dd4

    SHA512

    db0597dad6fc1d10dacfc56f6ce57d39ae6d9be8a87a84c293f6f218fec53eb8b5a2481adde53e88d64332ad62a4bde4524a5afd7e37398c8198055f7c676dfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f052dea2bb5858635d878e0a91b43c50

    SHA1

    e794203847d2067f35324acf95476d7299088ee4

    SHA256

    6e671d918ef17866f50a7239f7130d828816ceb8039f8873e2aeef30b6bf4cb2

    SHA512

    445382de2e127af76341acc1a21d29cff8b0c249c62f3a6d91305d239a173d52ad3e8211256c9f1d417125f7f265171015c1a77f5dd79038468963b914e4d876

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47ccf89f1112ec3911166a9cfe0f285c

    SHA1

    d9d2147acb4c6cee5663d3dbb21a4fa3fe6f0092

    SHA256

    f294c2d8e469220b6b9532f5a6c195a786e4646cd16d6a8a00af2f6d764d72ac

    SHA512

    4fe8183dd9474b4559ee44482cc99ae5baacdd54069506cfcbb610e2ecfaaf9eabc568f7fe2ecb329cf24f4079e4cfc6fa2c8a971cfe4dc420a5d181431f02ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c98500063b058439d071e5099053be0e

    SHA1

    57151ed9c8ccfa7565f494e1809f0e0315178cdf

    SHA256

    a72b48131b2a1716ed2be94d2a4202cef00ce103275a54f0aa4e2940383f14b8

    SHA512

    696e8d714cdf3a525d713a5423d92cc370de51355656c801330b0161a852ddbf5adacfcdc0b1276ec54dc99797a568a9fb0586bf42726a85e8442aed2a509f04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36b7169649771e583426f79a63d91e4d

    SHA1

    48ad7c6023bd54339566c8492bb930d3f47f49af

    SHA256

    50e2fb2478b8ff837b98b55ad1b76564abd8e56e3136733260a91b6615a0a056

    SHA512

    11e525896794a287536d2842ee0099b1c8ed53267826c9a2732b8ae3edd672be33d828d03ea8ca12a1c207c884b8311ac1c4695f84246fad5fe56e9eb2f8e39f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94d27512a7b3d035d189214b80de57be

    SHA1

    4be18b111a0358fb59bc3f59fbd04e46b2e07c3f

    SHA256

    db45c21abacb046e6178c6ed45a655ea58142b0a5bc78f658f701e10604ef0d4

    SHA512

    1ae3bdc038d762d22ff2e6d1858ff96326972f7776154da6919a17909823c166bb536e24a044b98b0195cb39ceeb55db7ad184186bd7df1b1e42681470113504

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d07d5dac5e85d8a299a6d66ce8aaa228

    SHA1

    5a2ca92f83e751f2da7d4aa2ca41989381a4821b

    SHA256

    46bc33faefb8e65da3e095c6fdcc504b67d07756e936394cc6650c93eefaa169

    SHA512

    040433c5b20e204373a9d2f67d4e073a2d2ebfcded42d986ec908b624ecf153671a376934366826cae610d7ba09c5060eb0d2de569972394650915703bb116a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86a5f1a7e10927b4b221bddd2111f1db

    SHA1

    c327c23a32c51d2f2da627d947a787d7cf1535b8

    SHA256

    4f5a6002f7549a165e70916daeed93998f6081193634e2a84a4b6d66f1edb81a

    SHA512

    6a6395744b1f59e974c4b917d299b57378fe0c91b4a717acde261a6addd0bd0b554dea169a3fae9e1545fa58104f298f7bc654c2a97df6601dbcbeb78aa713c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8120483d1eca0ae8205ffdc9fbf19c16

    SHA1

    e47f60a000f636b28ac73db15fc3940603e98b0c

    SHA256

    ba53d6d41edab1c37ac8e55ed3482a6e277a6353b502c1644d88040339d8b4ef

    SHA512

    83d182180e553c7e7a95c2e55b049cd4a355e19bc6a04be1f5dbfd9018cfda1d752196a354bc52f55b09a5592a0d2ea52e551dbd40d5ee035eee2e6ddd82f0ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55622417071efb8ec024da610987bc57

    SHA1

    2fe7f34d849396ce8a8b439f0bc20bcdc6ec3b74

    SHA256

    563ddacf91cda9cd00bc2147c5a0bf0d612782d5f59986c2b506402e1ae73070

    SHA512

    ff0cc4d60dae3e308d9ae003020c30ab70b52cfcfe38d3115037380d277d45554ed097c245d5f76edc950ead70c5dbd4fd409749ba2fd1dac10e83c8a55d1a0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2baca2491f5eb3fe82427181ea92b66c

    SHA1

    a2ba514d5d53b1dd33d7831b8ecacc9d24d1483a

    SHA256

    c748740879d91082f9c996941b6d1501257f1f12a7934eb215e6d460309b96e1

    SHA512

    76f531334bc06e305efa884ad75174c2c225bf8330e6d7a3a4a1fa47b0d4c6950a58225f7c622f740525a4b6a627fc9475bafc9b6dff7dcd3f6be5427cea7378

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1daa5169f17360ec222ef0651ef7ca72

    SHA1

    1f817bf0115cbb5dba35876f3017e23a67666c90

    SHA256

    a3c82b0ff08a1f0e4a9524d370d689ca468a146716d09311ba8052cad95ebebd

    SHA512

    1c1997fe717794282280fec2a7953304bcd8bc1b10620e2dd28023dcd697eff1faf9db7fb41b2055a4b77c7b70d12afee090fd9a403f16214b01865df014eff3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1eb06a92bb40497a77c14228a3c0a38

    SHA1

    c6fad89f90be444676e4041a0d472c8fc8b4ddf7

    SHA256

    e75d7d246db33f71570a1307cc8fc9bd5b212b6fd10cd0dcc9eece0817a8ea86

    SHA512

    cc1dcab1653070226b8e837115dafb0252633d3eb3fd29cc5b0bb62c2a88fd0084a6c7c90f947a3543f674dd878a886e45b8381c76abb0b9cf34e1c4a5342d1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dce1debdb3ec92ace01950305c0807fe

    SHA1

    5daca0ed2c516dcdc0b8dece55f2e55e6ceb931c

    SHA256

    0b2679092dfb658eadbb87fe16d7630826522cc6110178ac93180f9c26b31a15

    SHA512

    f98080c3f9abf2ef139388292e9cbca37a0376c66dfdcf2279943b7ab709881c38fc703f2140ef5b01f1ecfc1c5d6c85d97fc0e5d11c35bdbd329501b209d866

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92c68ae52afb1574d010b15c53f0ef62

    SHA1

    5ee56a6e35e8642748050fb1a18dffa9cb61acfc

    SHA256

    f9704d2c51f3a6e922622576719ed3c2ee25d5d6e62121748778862403667daa

    SHA512

    f10d9fcf51f441edd414d7059472886b2c50e62538f4e43997a6d014879ed3d05d355e3de1bef5d29f8c339a6be374ea496eafd3e774a54ea017d29f58be5a13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83a9da4231d4f15c7e6c2271416f3ba9

    SHA1

    d33d478d675bd8fe37af15957757e67fed7f0ff2

    SHA256

    b9f3f23488f99d35f8df6058bcfcbf576c8aeb70a763225fe875eb35f6afb8ff

    SHA512

    e77652f1a74adae574027c276e650741f4a255c4857a9ee77603eaf21ca3b7fc08ac1a87bc7dc7399f6ae289f1cd2ab798c1cab310e4e60d256d7e0baac5746e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5793de359d3da7f815e3c9e5e58a978c

    SHA1

    989d1d49554656843ccbbb146546df813955129f

    SHA256

    f3d104d2c54db44fae7759c394240a211a35ebbb55ee7151447dd6d452dd9a22

    SHA512

    a7c5712b62a9f28c0683586bcd0830f34119bf7c95d9cc06cda1d07aeb452bdf71d584610e3f2d9d9d867289c1eb0ef1fb2d80bfed7f424181864a39222b560c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d9be78a7ec15a0068ad2e41fae193a2

    SHA1

    bc4f30481e68479bab90885a6d088f81e8ec2eb4

    SHA256

    cb0cff1cd83881ec35c8d81d03e2956a92581f291ac8f175bfbc5f24dab6c7cb

    SHA512

    19ab9b7a4bd834eaf56c1e54452c5939304305f53e05a9f5d684cdbdd444e80e380ab3778dc78291a76eb4690b7f0f17c484a69436d84ed79a198563e01ef089

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3842b82de47c9f381686380bf3f9a2cc

    SHA1

    209dd0dda9f553cb0b1f563a5910fdde2299e53f

    SHA256

    0ffec845b0e5998962fdcbf9587a0aeabd7fb5bdcb5d5c815b00ea27411c7bf9

    SHA512

    6892ce633c09f666f1d72c0538376181ac17b9ca24e32290616d3e9a87c9f5b7a09ff87c65fbf0d87dcf229670c832c6ad1dc015d6d92774423796d56a80fc28

  • C:\Users\Admin\AppData\Local\Temp\Cab61F1.tmp

    Filesize

    61KB

    MD5

    f3441b8572aae8801c04f3060b550443

    SHA1

    4ef0a35436125d6821831ef36c28ffaf196cda15

    SHA256

    6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

    SHA512

    5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

  • C:\Users\Admin\AppData\Local\Temp\Tar62A0.tmp

    Filesize

    163KB

    MD5

    9441737383d21192400eca82fda910ec

    SHA1

    725e0d606a4fc9ba44aa8ffde65bed15e65367e4

    SHA256

    bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

    SHA512

    7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf