Analysis

  • max time kernel
    121s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24-01-2024 13:37

General

  • Target

    extra/eauthy/index.html

  • Size

    3B

  • MD5

    eff5bc1ef8ec9d03e640fc4370f5eacd

  • SHA1

    92a949fd41844e1bb8c6812cdea102708fde23a4

  • SHA256

    dc51b8c96c2d745df3bd5590d990230a482fd247123599548e0632fdbf97fc22

  • SHA512

    672f8ff4ae8530de295f9dd963724947841e6277edec3b21820b5e44d0a64baef90fb04e22048028453d715f79357acc5bd2d566fe6ede65f981ba3dda06bae4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\extra\eauthy\index.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1796
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1796 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2284

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    459028f7d52779fcf20179a146da3e1b

    SHA1

    18f79df200911aef7cd311739509a54eee423bd4

    SHA256

    b849f0362b7fbdbd02c05f91ccfa7a08fb9a6cd035bddede82c832182071f406

    SHA512

    9afbb7258b7c3ce44ca7df6e098e2ee04e98378bd50e828b9aea0b6b171c8805db9ab91119582a18a2132fea05eb0a3c597988cbb8cbbebf14300a233fa2265d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f2e4e7e2a54f2b9b8940997ed5826e6

    SHA1

    4704da517d7651dd1a2ebfccc4dab549836fc739

    SHA256

    e5b904bf62848a4cb7f6bd8bed05073e073e659ee2f2037635f4fad8a3d65857

    SHA512

    15d2d45bf407265f584dde0977697500b22639afcd21539b01e3c76d4bfbb0d5e3b0f247711595726005786b0cb822839c455d7358d51bd5e9170ad45ff2b13f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc0eb5d5578935f3e37708b4eed1d0f5

    SHA1

    f64e9259899f9010a1394e7f7f45d3a029fe25b8

    SHA256

    8af51976d3aac9d0fe11cf6f3f9b7d16f5c50ddf01fabf54e9041ad471ca4f8d

    SHA512

    be5725a4209e1a0223862e189a43d6627c86fa361f3c71e95997630a20b1e444ecf64d308fcfd093e86e883d9188732d255192e271cca6608a9efe66e5bbc9ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5180807109f422cfaabea8fb884f567

    SHA1

    1aaa241c24b714c578ba8447ef988086c4c45f25

    SHA256

    02cf7b8ef8dd2282563e7e80cf1ffd2e7adefdd6b87796b3a6cab9933345a47b

    SHA512

    fef60bddc12f8c0b26f024d9a84d43ee32e172204265bcf402e65ff351025dc282bfc4f373b6e4bad626c27f616f8551697204eac8112a5b7f9490474bfd84b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cccfdfcf4a4d361a9bf2412d04084183

    SHA1

    1dc37e4ee68262e647f040281b44f404fbf19fb8

    SHA256

    30644633ba519ba958f48191936e5635a1f683d53733445ef930061c362e40cf

    SHA512

    e65a53fe1b8272b065d56e1c2bf34ba47911891cf34f8cca074f1dfc3e8ec5939aed1fab72da7401196020cfa91d6649ab8722e95a744bd11f8dc06ec803bbd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d55925bb91cb996eba381b5243f43ef

    SHA1

    c123176c2151c6178f24b52167bf703e96cc9f30

    SHA256

    51f146598f0ec50ae9246a60b78a82ee1e918abf6246673341cc3a24e107e06e

    SHA512

    6ad3e8a8e1787310e4834fa1a6b62ad5d49e5ec02b7a120bb2236db93c3b01dab101fea805f7017ab8a7d1dcab7401018318767f511080558408c6ec787c678d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3675cae3d456dece8315eb008595a2b1

    SHA1

    9cc31106183b6a654f4e81f887f2ab10e94e957a

    SHA256

    936bd72a0f3b9e040ad6379f1c84566de6ce9939b5ca9b9fd3e936d98a9ea9b3

    SHA512

    53a2f6162d57ba1e0aa0d96ecc2c6fa6bb4b7a98b46cc2fa16e2b507f60283c3d031f39adc07bb5f730d487b9774d31b14e884536f95f4c3ad912636a01ac52c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67ad7f04e2a2b5aeb33fffdb7a72cc60

    SHA1

    53b628fb30c54132987304e6e3a21acb83d04c0f

    SHA256

    9f47887414cc8aa87f189402fa247b50d031cf557061d0dfce4cccf729d74cbf

    SHA512

    e20f3efb89adf9032787d268ac3648beff3f4efc6a311f8b46ae86ce2104e081b8446ed2e21833e6bd21024bc4d3e68a4e0ca468345cb847479feeeaaf803026

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e78804fe2c7e4d9d9d5e8efdd564b37e

    SHA1

    1bab3b444a8951d7af15f194693ed6db9ef13357

    SHA256

    66d4e5aec6ab76421143fcfe666730c249a1c994998da1a769370fe9e13b0e47

    SHA512

    592ccf70d4449cdea2451cd3392f24491dec6e95024d1403cf512755316c25b95203b3b5b8bdfd5d781869eff6cc75179b19919c255df0a8a06bcafa99021d44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc42200ddc7432b459bd7ddae1dde2e8

    SHA1

    b380f59792c78089ae78bcae401e05ae07e77408

    SHA256

    43c9424f38e46c26d05fff9c532bec062a285d9c647c86e86209d939d458f9e8

    SHA512

    bb64bbded14ed0f41f6c095472066b0db5e58374bdc8d1038ffa42f8d158ac903dc39593aac6f8729210b4dda08aa2f8896a43477ebf6b39db368cc5761f244e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cefd72b83ef16c7bfbf3bdc5d9799d6

    SHA1

    5d2af4202d7f7e4010eaea40f5927d194e40e058

    SHA256

    c6fca2f069eff585faa7edcbcef45b4da64601c8ae3d96b046d8a022246e217d

    SHA512

    f42e8ddb2de43d90b4148ea357710527f56bce2fac04f767e9d56d1748c496728658af84538e8b283c3809fa8cdc9cc96afafe7f420e5a9d97c32b9b151dfbf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f9ebb2fdf3c1396cb20167fd33fb399

    SHA1

    70ce63a61b1a6c9a73c11d41aaafba25c487d7b4

    SHA256

    9c8e78bf6c49d8db9eceb3ed1b9369168b3c159204c787829d51ad73a96e8b1e

    SHA512

    6f81e2d1927ba16f932afbe7f379bd663a5908d8775975a19645009ba661d93f21f06fac572a89ffb110bb1d5421bb84816ee0eff1f2eb8c4c5f869da0d02126

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e11abb4102119d693f0ce3f2bf1a3ea5

    SHA1

    b71d32c71900e5073956ea23efa0dc210f541a9a

    SHA256

    93214cb9cc36facd6bf31b3d86d6bb852d943eb485e7d149db21a51f8266822a

    SHA512

    dcdbf9e0893d2a8e5333b3c97508d0ce7925f5f9f70ed982dc8bb04985bcc117196f7b6bfa2ff5e98dc0633aa72282449a8ef749c6fb5ff7d443d2782c3f82a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be5a052aaad3b758a64d9b56486a231c

    SHA1

    51c64487cead077f472c9306a2ec50b207c805b6

    SHA256

    3e396fab51e97f90251670f800062f49c5ab0d00790c905e2e3f9a163b7d07d2

    SHA512

    1ba1bfd85b32349edf5553b41c34f9721a1fa530493e45ade246b7ee4b1553ccec446f856c5d52cb90afc878a5fdd6726784fa9abbdab7b4aecdc9473d1c4a11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb7bc7f86b0cb5647cfe0657ea13583a

    SHA1

    029f60c394c93d7313f61c0852092e1e06264993

    SHA256

    acecf01630c68203280a0cda74eea06f47d0899f430d08e2cc88920b73dd187b

    SHA512

    79d832b8b90e1e09478d648eecffb9b2df6380000e29d1a573de1f2eb99ca1b1d9a0e194023c69014630bcf5ab906353e69f413b03f4c9390b64821360bc8b97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f739f3ce33825d7add408bc17a9603e

    SHA1

    1a8be1816d9a536aec02683455d7d7c51c4dfb9e

    SHA256

    fbfb824e1171bfe5468e70353396c8465f77945506cc045d87da779f7447f93e

    SHA512

    cab2c91484adf4fbb7349eb0527ac429cead16276a9e445cc647bcd6d9a976614f75d5693139356e18b24e7c6481399c910a26cb478eb51d23fbe6ed9346ca84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    649597cba137b6c93938527520fc49db

    SHA1

    42f115e7c30e731827a56fb5c866669f77a604aa

    SHA256

    5e437d4d1bef8858c6603c5b0dac4d477e3a1cf3f4a7aa6995f73b04fa10139b

    SHA512

    bf470c870ae386f9e50dc688bb9a37885b284b4ad05eaad7ca9f10108cb125b7649f246e8161daff04bdcb77c7ef67c43b61688d178503a344817bbee06f778e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d05c009aa987fbee8a17268c2b90fa2c

    SHA1

    fbb11b8b9ed857f19e56a71832ec303738654f9b

    SHA256

    b5f74d28d4c38fc66dd31301e74eb5ec414e02dfd5d6997a714ef5419c7d6879

    SHA512

    4ceb7cf8406ca7fc3099d9e81928f2fb05610f76c82113ec4b11b535e8f7173622488ee31563f6a89035f9f1bd1f243e8127769c31422c930ae260deb8b91b4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49301d07e74c87b3006f18120886375f

    SHA1

    1311670afa48f8a9051e1f7670427d3612f3358f

    SHA256

    70e897515d8b380f65a0f3f94f98774399df19d9b12aaa5b8e7315d7351e9ede

    SHA512

    4eeb5404864434f9e057b2316101f6548e591772b3e9b1f305be86d642782acb0b908ed5d59a00bbb2c347df82482c900703f470fa97233857851a5bf50632b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c85a54463b4516c80fb156861bd90788

    SHA1

    9cc5e2ab1e364d44f75274de61b07248d956bf2c

    SHA256

    8447e4755c40390a56768bcdde473dec559f09492b5ece81181599d9cfc529f0

    SHA512

    6f007d748ec8b1409921f633548cee0317597fc0c51ed3a15b8840f0223028cc2820208c104788f909e21397d967d6201f55bc7d8fe952db7d3d9ed38eef75cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01716cefcdbc9359ceecd70a4086a11f

    SHA1

    153f2ec3d3931b7a5fdc396675269d2baf749985

    SHA256

    aa9785d671a86921f30724a4d79dd18b7b7ffb9e5bdebea2ef4b2327ab7ac8a8

    SHA512

    c60205ef09265ae80387de807b206a247196688bee10b183d98b55780b5a475c9b6324deb74f6dd38d8afe1363d25c0faaaf7b034be1e251203076ffb050fc95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82e8153b6babe2621f1e8af29724a618

    SHA1

    eadfb6fc73c48b6392c8147f1c0ea67d3b07df31

    SHA256

    9d858164292427f9638ffb38bcaa8f259f1c1e37a168a4d89c55fdc0a86a0fa7

    SHA512

    0c5d88cb8ba20ab0c01598f1b438a4d1a0804f2ce30d4ce177af8c0eac2afa4321283b991434fa294a0800386cf076fbec8429733228d978e2f22f02729064ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aca552a1b78e64550f18cea4d49b29dd

    SHA1

    b5a9247a7cee6dbb62c5ce5cccb2fd2f4a21f297

    SHA256

    720067e0d29cf761d1c1cbef7735691905b7ab4616f81093ad9bb10f0703f5f9

    SHA512

    028e8137c070767525d55a3016862f020a9baba3df8f8e838aa8548eadb7245ed24f7015ad1aa219d40d83af86dcc2fa38583a1b17255188568a6fc9c4a2d3da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    901a71271c1c97233959e789aaed73fe

    SHA1

    fec691652236da7b756b71f948947b6d788033ec

    SHA256

    6c6fa067c1761e10772fff7e6f144548519f2889854425fc15ab9985d8ce1ddf

    SHA512

    44224318b789ddff975f602c20c85a2862ecc3c61c3d71988e5de6066e6524e7e99c639bf5e3f8e1f67c48b9bad0a072b00fc5b7333885cef380bf92e870ed65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81942350152e962f454418761388dbc3

    SHA1

    47801de3e57d62882a2af5d6ae8cdcd0d9b9e705

    SHA256

    09359f9f80546f87ed7ebec46e6eb81c3a076269272bd64c0a04641f538bd072

    SHA512

    2bf5e1da66ef47531da33d0a4116aed05eb7421c2e8d013804a13058c49e3295bf97dd112122feb9a92daf17a36012fb7df055327c835513c9d32fe3d1083fc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b0860d1de28a8573b205b8b90f1c243

    SHA1

    0a916def37a6f400927996d7e29734134ac036c5

    SHA256

    3395220e14a58fa58217ce54fa0f11dd2304ee7b4e4fd22188303663bfc3199e

    SHA512

    fcc0f3573fcf7d79169dde293e9ab04c3d040f5efb70294a0e22d4893e3f9f00affc7381f956106c28ad1bb9ef6949c2ea0df5a24ca13d3a8d91baff541fdf00

  • C:\Users\Admin\AppData\Local\Temp\Cab67F8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6879.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06