Analysis

  • max time kernel
    122s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-01-2024 14:30

General

  • Target

    商道货源导航系统特别版V110905SC_0910/HuoJiShouBiao.htm

  • Size

    15KB

  • MD5

    00f4975205b3336e079c288088b8df48

  • SHA1

    39a7aa5252e10ed5ea08e370134977e38fd2157f

  • SHA256

    89e06e644883245c26132c0507acbdf784203f7abb2e8d5a94e557130765455d

  • SHA512

    ab24a4c136b92c03d000cef257311fbe700c051aea35324fbf60259bb0198dbdf8397f2c7f42a8678dda199cb7df12d8a7c3a662cc90a7c9d0ab1164cf36349c

  • SSDEEP

    192:SflYH26/pHCP78ijfe+gH/b//pyb8uuCLLfi8jRvgLkcua:S826RHG78kfe+gHVda7i8l2kcua

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\商道货源导航系统特别版V110905SC_0910\HuoJiShouBiao.htm
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2124
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2124 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2732

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8a1fb70c4f3ab7371177f67785585ed

    SHA1

    bd65d0778dae7b98de6a162685958cf0c72685a4

    SHA256

    8ca063ef9673b82dc1de5355dcd6e4c1949b976618f45dd0d87c88033118381b

    SHA512

    9e1f8805e22a127ca5845e1e8e83a04194e9e76f138e975343d9cdde9e0ad7a073efa03df669be2c7fe03075f3bc3ef5a54babf04db034b7f13ac2bf7d5da72f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    731d6f4b1f6eac30d95107d74dc543d2

    SHA1

    91e14cfb45e90c2589c9442ccf6438ea71c3da9c

    SHA256

    a55b591e796cf4d6264a33af06c6f19928bb70a913a55a55eac143267f9c2e43

    SHA512

    161e71a4a7b1426546ca018c807ac3a19aa43c3c9944c82bc9234c4ea4fb7008743a599af9bd24fb2b6275f6b9250aad58ab782cd2fd2be83d725fead8f5ce31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    426125d699fbec05ec702cb4568dd774

    SHA1

    2bbe3c171ce48b32682e5b9c1ed994478d6f4f37

    SHA256

    d63c2df663c0510e328307334950d49ec6ea70828ee1a0e4aa700978ecdfe8f3

    SHA512

    1ddf7c33a1ec48b48d52b1ab9b0b018867f95799f1ea18912ed1866c68d8d4e503682a2451b15d8483515aa88a0d6b9ef8d11d873afb1bd08b7a97c1642fd832

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6dbef269ce8c062956352dc82bc554d3

    SHA1

    19b9ec5c3026b313eb0efc85dfb825d55a644f9f

    SHA256

    0496eb282de9114857dab17c4d86ddd954299ee48e6cd2466977d4db8ebb7758

    SHA512

    74b615e0875d233d9148d2890b17e391ea14d00f13685ee0c25b708e357efa22182a0fed2241a85667e8e135462ef7e860f4434bf3024a4ef06715cb2aa96416

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6beb7e191bc5465b61604723873097f

    SHA1

    0c2f32a9790f4791e11d42c2fd4b89961c5e6d16

    SHA256

    834b89a3acfc76698b517421fbd7a4d8019f1dbee9a275f663dc1d7b1485389e

    SHA512

    c036852e4bc6340406c38744acf7d05d5023c7ca5de28a6cd1728703ee379ae8caf0e8363bbeb23ab04d7ae40e93f546c31a0b7e1e91a25a1fa764c8e101a692

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee1cbb023ec624936085f0b160fd8e9a

    SHA1

    37bd3f5f36d780436d02507e8811910d409eba28

    SHA256

    f7a0c1562febb25cf2ed05ff60310d19b7609c47e8a0a87c689b11b30689aef8

    SHA512

    c4f8b709e85fc64d8d4fe1be0b18576d3a2f109e466db42967f70ec3a23e4676a76e45607f3b9bbd576d076547490015c833560eccdbbc7c033ee65fa96aadeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb0c1be2f731ca9300a31a5337b138c9

    SHA1

    2a337131a14b43a28a8ffe07e6f3a7b94803d49c

    SHA256

    7c89b4badab3e308cf7b3c0f8135a51199c1d844d22705e1fd8d1f09363855e7

    SHA512

    4d5eef248c9e5e0ce427db66327592d88b37a80878b5be52c48530abc73081259cfd7573e7605b30d83d9aea5da8f2c3f18d0ee0da01a1fca8ddc858e47d1633

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5f5c7b87aab8bc61b39aaa4b1fde520

    SHA1

    a256840bf48a27b7505e79bb2f38b765f497413c

    SHA256

    6c73f05effc153f70470543bf7b03dc6dfe8dc15896c95fd3f9a6c1caf4b772e

    SHA512

    6b2327c45371c5308b213e4a9d5d24088f4fc828be59c848fae218fd301d391e7e1f212d4000a3966e05ae35ffad111cbf0257069c6ca9b162e97075c61b7f74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dedfe07388c10a03921d93648ff78843

    SHA1

    462fcbc8b1b30c19fb204d16422ad0a206b57e4d

    SHA256

    3a5ec7058e965d9146cd9210e8aa6cf40cc2a2059efb234c3a2acd13e1ce2ff5

    SHA512

    78e791b647fc78539db3ce88535ea21353e81530e4bebca314c6c21f2e8e3005fad5047382757bc6637a253d8d01bc5744b542ae0207a1b7a2440123c28eee21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ee490ac6d9a7ac477dbb5b927c09002

    SHA1

    1baef4fe7765e76e5e19e1929d7fa03b0b191491

    SHA256

    f58fe2e298ea054e3046238ea5df59c316ac0de4b699f396fa3605f18fbe9326

    SHA512

    98f88de757a2901811a725c6556680d13a3eb1fb1bccab0b6fbf668ccad2b0371a38158c04000cb9983985c2d02cecac726735d2b55251bf56066a2ce4d2c456

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96e20beda45c5d9e3011c69a179bd98c

    SHA1

    e2f444c2fa5b4d17c9562049e17e97ca8028daa1

    SHA256

    3d82ce83ee32cffef0492c2fadcf97a5bbeee2580c8954072ef22e280e7dea03

    SHA512

    de7b104e7a627b515b89b1bbbf2c95e412c8cf3ab62a8c5de5892dd7dfecda676bfd70e6dc15ebb4eccb043fa95abdd54dfd7c37f7ea268f58ec3bfb3ec90418

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d50a69f4c40ccadaea43947e853b5b8

    SHA1

    5a3d59fdced4b1165e5890c1ff7c8a6b5804e52c

    SHA256

    414a31633a04df2d8970b397f7b3df3cb10317616d40c439ff393807099a959f

    SHA512

    06d57e8adbc8dda70b27080b903afd9dc174facdff13de4f014f6fd2146a431c363a024dd2f677fede0c1157b5d6a157be6b0fc80d51faf8b8deb91d5f702a5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    917db1a302f287f51a1219a27d2bd6a8

    SHA1

    a4e06946fb70f9907ad54e3b32c58d02df54a8ef

    SHA256

    0d5896e43da37a2d7c2cd2a66ee196791f2f9917da31c633fde2415a9a600f23

    SHA512

    1fdebecf03b002226d79cc490ab780a9ce27ce364f3e320c14a8776289fb99868092b28f9d25dde8e87e9a0bba1d156b0fd72d7f9ce0445ac0d10cad5ae165c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    893f5907cf19b16286a8d8ea36dbc675

    SHA1

    48a0f19f873c597e7d4c5b7728d11805ecc3faf5

    SHA256

    a9f0bc631a30568c93007d16c4d3da7f53a155bd75e6fbe1c229622bb178f7ec

    SHA512

    45027e7512277196d6d4c98f59b8ddc01df634a6f1d9b7f5daadcfa4ebc59f045baa6e6823bd097ea721a05ad8ed52318f5ef5691ec918dbd95479153d521de6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    905e6171de3c463229b1ae24164f8cc7

    SHA1

    a8185942e8016d580815715c2db28acc397214f3

    SHA256

    ad09ab17b84053ec3a15df11455074b59260583147b8a2316f778d517767f437

    SHA512

    4835ede7293e5b3c75a14dbcaf93673b31048c10cdba7be410a3a70d7e3dd1e3b7bc0d6ebc3b9072346c2d2a559a38e4cc107f54772902a7826fdc057f161ac7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    424acc92f945bdaf4a5885683527d135

    SHA1

    86bdf45a295b9543e9ed63026a1bbec02ac8c131

    SHA256

    7e0bfce00f93ac749d1e088cd7a611dcc84d1027397f1a8fe12587a50da154e4

    SHA512

    8cc0bdc7d85f8b35f0173025c818a28989275ab5abbc91264f5b0c8d31ac67d11aeca9ca2b3f7be97c2283a30653bbef517a80015e85ff26b767f642a63dd4b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebd92e58415e881727b850bd5b6d2a09

    SHA1

    dddbdd48e02fdded2cd11d89e2dae2ee4c182819

    SHA256

    db5de7ff15ba45a83ccd5f00b70d9316e469f6bd47de3b0144b838f6c0b14bb2

    SHA512

    647972e76e1baf8b93b922def428ca3b17fe39b300b25d5627d14b3a23fcd1805edaa6542ffe68626e12865aea807ffba23adb7c23b4ca4f936f2ac0a432bdce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bcabe95f4b73f46ae900c99ee14a4f11

    SHA1

    5eca7309e2261479bf075c789f666e012e87d26b

    SHA256

    0f26cef9abe3802f87e2a802a4e3cce8ef85356a9e909dde98c043edb12f1270

    SHA512

    e2c8902018a85f80c5f249054782a9f963c38a37a4555c9dd7855747ab71229276dc657f7f5c51657053e7605d806e7cbd1787311969b0fc632a8e50fae33141

  • C:\Users\Admin\AppData\Local\Temp\Cab321B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar32AA.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06