Analysis

  • max time kernel
    120s
  • max time network
    161s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    17/01/2024, 22:54

General

  • Target

    LICENSES.chromium.html

  • Size

    6.3MB

  • MD5

    34999967f735b07e9cbcf6c397cea4db

  • SHA1

    8001fcdd6ce0c6e5a3d91fd45e4c9726fa67f3e4

  • SHA256

    c5a05048505c00af46c75fb5ca22057f09dce001eada3a756c3839d59011758f

  • SHA512

    b6c2f722b6551231801e453bba8f9593d9f1a82edb305869ee07ef77f286968eb6ad5db1abbe750e88c8af973c362ee161aa5c591ea04ff39e4f4b34e6fa4baf

  • SSDEEP

    24576:/PV05W5WS9YzHIlGMmfu626s6W6a6q5AHWeQFpD:F9n

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2308
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2308 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2104

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ec02eee019fe3fa9946c62828555d8e8

          SHA1

          cc287fa3a438a667ccfcc1f44c36b8d93fd63742

          SHA256

          86d5bc57a2bf455e208f5ad436ef4c007e579aeeea17ec7809c4d6f76657efc9

          SHA512

          6d1581f35e36d06797338db243c936d9b959b325035e443511e7c54b3a8fa76f046a790bbf8e1ac39f29643576709e6308a4b1f3532d5060e3ff2806800a40bc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9ccdf1c4061dcdda7376d6852eb73a01

          SHA1

          28e42cc997b68b4a3c51babfe41992572f231f7c

          SHA256

          533508746b9f0bcaf61dce47f39869c1748701f46565f65093734409281cbb5b

          SHA512

          6a79ec9a1886d6e7491e99a7e00cdec60e70fc6f66d5a8009cb5515cdf445fbf36c17ec4dc00576415e88402f34d6d6cca14fc4b55e15e0b1b4db26b068a53d7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1d91cdc9bd8b1a8eae392a4c07784892

          SHA1

          fce298a8275146c3d67c729c6670905d372b4657

          SHA256

          4b151e73272cdcb6d3a81facd8682915563e8e27bcc8b072247c396f8b66afd8

          SHA512

          74aa7069f248ea3e5a91761edcf5ab7cb76878bb5cb134dd23c6b18c2d1dfe50caf8d632c519a7ddbe03ad5fe2936703fbe3ea3faa63f21f50b759aaf31ee70b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d831651aa8f0c6e203bac013c7b1cc10

          SHA1

          88b97d289f006c1c97754b9570d64c6643af3456

          SHA256

          b81ad95b55b766153b6b6986e51851376e7d86ed8873a32937d618f4f324abca

          SHA512

          16a3031dd6b2e8da1f17a05cc0c0398f41a4976ed97a52c950ad1b75e95c24bb3bedf3b171c1f7a5dcf756c814f917063edeae0323519769d78595673da2d2d8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          925d27f4da6484c63fe04ef024fa12a1

          SHA1

          76e5f84a2af624f6ec89fbbf332c3d37b7349df9

          SHA256

          f351a844e6a6b18b7f1a155551291721266c0241a6efa41c8e1e96cfb8acc7ff

          SHA512

          9f2c99f69facb76fb84f5dbd879027f7b912b32835c1527897c6dad91041606789fe52ba5e37cb7888eeecca399458e758495a162416a7b2e6d3e8a37a5fa33a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d3e8440e90e0101f663257fe2166c7c3

          SHA1

          1f105c1e5ba5d1e90546934fe77ff765b5cd3219

          SHA256

          a1aeb1cdd375f3a12405cb5546e45e2e72fa1860b5ff1614968d5377c6a81b74

          SHA512

          fe8bd361edb8364c90d5da3b037130c37d7269ec7b49e99ee2680e5c2fc9412d43f7b944eb188fc75d458ceffaabbe6d280866bdfc9a5692b78e8a5de2c3440d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0701f53d79a8b9588ae01b9be50d73e3

          SHA1

          ab0ee6cee1dfe0b47d67e90abc503d36ef0f6c6b

          SHA256

          8b70beda6f5a97d08d3c35d9d90e79c318f544e2d2b180ad064fe9e43f95e4ff

          SHA512

          bb842b1e0c624a42c6e919a262fd88adc443141c1773db042de9b13f0edcfa9999f32714e115945caef7512a7dde00087bc21322727989a99c1aee5f1012702f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3ded2ba72d4ba12803efb6970e3aa9de

          SHA1

          5fc71cf07c63a7e75ffd352e2801072ddb31abf4

          SHA256

          4b684559d5df784ec204e0a844e913bdbc36ba03bd61544b966e065c0ff9ebf1

          SHA512

          88badeb61601bbf955be5e1cdfedfa155d2621aa30a4828bfaa76f858567c8b46a1d143b57b31c2a097024ffdfd1c251790008915b0ca6894f5ee67325388e78

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0901436f775225a3d5d117449004b577

          SHA1

          93fad220336393d37b55c6677d024208bbf04a5c

          SHA256

          020465c795b1dde029ad16bae0c48cba90df6e34a1cbeaf2946365306ec6304b

          SHA512

          8643de3ec54ae1cf0338080cd7d0386cdb75b1559979bc7b548555668853ebace320c89abfe71a8e758f4993961e47cf031ffae645bf52f6e8c5e48993625068

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b0a2bf1cc3d9baefacdbba21573aaa86

          SHA1

          10c9f22677f5459230354f30027bd8a3b22615e2

          SHA256

          bd02e455a33a7b1544a20a20f3ae8bbc51dd62ccacf75b30dca4909e62d8ad15

          SHA512

          7e375d590b75d9dc18530bf6f3db7f91dc91d69991403c0e07350c35966b6dbcd89db90913acb2ffe1e9d40172872fe353c7370745bb1f47926055fa7bcbfbb7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5ca7cf4a162b537ae3d82278c6f65b23

          SHA1

          a08b1ce0c70ce6209d41d533663ab7907d4ab024

          SHA256

          498e0527d2b2c54e469f10602bc87b4697c8fcc465e684ef78ede7d2c3e49f89

          SHA512

          9877282ad633f12b3679f354fe193a3185b7b98b4a0d3189bf5429724c012be2b2e1bdd436b1f6d5a0d8973c0ff59b91a462e5960076d86e63831f2a4bcc406a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c8783338e65bcb5a67d185d38d1bbd7a

          SHA1

          4d4d5c365d4c65ce060019026ca97bc3c62024c5

          SHA256

          3f2bd2f7893707d6194f7efed4c6014c2b41ad64375af825aa8a48dc8ac063ea

          SHA512

          cbd30d94f5ef404a6b7fda1fd961c6f158c96e4a17e56875c2735a5f01ce045496eea4442982452d01cb5953709a69613fc8a4fc314d3063ed7fa9cb344feb0a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          846fabfcc37bb9b91e5d7dd835944d26

          SHA1

          a41fd2871ac5c3b78040f319f8855aea17841a82

          SHA256

          e5fd0572b2fbf7a2cee9b934847912c03557047aa6af16148af337baa48f160c

          SHA512

          0113c26acfe7db53832e6a1694b95a8f223ed0da6690434bfd870da9435fbdf5b6a1207fac1a45c2e701da41c825c82c12ef7454f80209d7308fac0676591c86

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          adcbe860880bfd64b2d2a99d06f1ac9f

          SHA1

          a1b65680c7a3bff8ddb8eefde8c032150724ece6

          SHA256

          730505b99459914b6d01aeee996dc17b13abc4efe1d4962a3299e5919b15fe84

          SHA512

          af63162ca294b92dc5556cb512f1c8f1b62806e7cb0c5225bfaa61c3a13cd4150894be62618a2c0df4c5750692d15bb33501cd6a0c2ec3fe2338cd330b4cb6e1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          982fb01ba3d0ecea364c3f8bb999caf1

          SHA1

          205e2777752511397cac2a491e8663907b4b80ea

          SHA256

          877b8c286e9db835ff03eb54086eefc5f5d6cab38c4198582502a4376dc2ba6e

          SHA512

          dbab73594de69ef1e6eeef91f9815309209c6bb2ef238ed5452de499ec9ebab1b7b4c356c6c0e09d68c673726b946888530bd55afe86303257a3a82b33a890aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d8ce01f09d2bdf85e9d3ceda87cf0504

          SHA1

          25698a27058ff10add815fdbbd072b31b77b27f5

          SHA256

          35b02ff11e786255695de810f9ac350df975c7cd4b51bf550672f5e93f51f52b

          SHA512

          8c13cdb3ad1b96a77a834aba5f8dd3222d6dd5d976694ba7b77a7f379847d07dd9c88c3f4db44f9f1a4ee4438759e2ac4fa3ab9c54b82322ac65d3443027ac21

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          97f935c60277126f1464e065f8cc11a8

          SHA1

          f24938b76b7be894aa0f72fe3812389d784a1ce9

          SHA256

          6cc203dca19d07b54d3d8af392256c514f33375aad0b54b6343fd5b7bc5fb3ae

          SHA512

          7adf1b686039018e6b8caa4fcc1411bfdbe28ecbc14105427fb96bcfb5dbe14b814f6007f7446d1e6d320343a76dae8576b56489d913e4428990d40d72d50940

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1794f7221886bca76acefe6ad6f9727b

          SHA1

          7f9f2651204d591303375ed3aecfa40aa4215aeb

          SHA256

          a7e2156c02dff7e95d30c92bedca2e0a79810e408fb37064cbe3f3d79b578b47

          SHA512

          124f8b97081080fedc41a30a6590abedaaf551ee203af857276b5bfbdc9182a86c0c8886fced647dc470da40aee91a623d6a67a006905f34748557fe3881e140

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          78feee8f8aa4ee51f1fed071cf9b3831

          SHA1

          2395d89fc31712058f0b81f4c681f8dbeb55bbb0

          SHA256

          0573895d57884c48d76a384f419110784b50cd8d0dab424aaf4cf5f9e03c376c

          SHA512

          94e9bc985e5f75df9a83e6628a13e8ef4644c7c436d1e58753bac465854d5093358cde376008cd94f1a13de538faa2451e00ebea5c03aca147799be912a23b82

        • C:\Users\Admin\AppData\Local\Temp\Cab4A5.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar554.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06