Analysis

  • max time kernel
    122s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 04:54

General

  • Target

    35256345/chap2/EnumProtocal/EnumProtocal.html

  • Size

    1KB

  • MD5

    1d3046c47cf607a79dbeb9331fd844dc

  • SHA1

    0802fad5ad9a99538681ec323d51fff43ded351a

  • SHA256

    7e85eb120951d6a4a99c1eae18322194ab08ccff5a3a4bb68799d241946ad88f

  • SHA512

    ada888bbbbd4f4c077d520464374f4852d05ffda3301ce046e78b3b03c7f3ed830d5924a1f13cc35e08fe0722d33925a78da69061db43e7e4ec6d9077d64c5f3

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\35256345\chap2\EnumProtocal\EnumProtocal.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2384

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a592d88a25f0a924c3222df1a2c9451d

    SHA1

    42bce1baf9c178ab0f01b225ebdd7dc06e61605c

    SHA256

    38d69d2a9b4e74146d004b9b4c07eda1004d5d7a3f045f01eda91803dc76cdbc

    SHA512

    d5b4c84159929b863534309a2c8c7af4bbb874b434310feb360e78e7fcdc8b5a868c46ea8dfacfb299c71cd7b95d9d61fb23dd32ee0d4276b476988d0472d941

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11007591b950780d9f24e2379aa7b776

    SHA1

    2d35c5596c557b21f729c153e62640c9ce548716

    SHA256

    c277f7123e3b571ddf6e7dd0977fb53dbf8b8c741fcff75e4753dbc0fe6863bd

    SHA512

    ad128cbb77236e99ec7c9b7a2bf02e93ef53094d1628b1cf7c98ecc86debc5e156eabff9a3372924faefe1b566938e665074c9f6b1b90f4cd1eee864d8c479c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    564acb8e94736d7f00c0aaec0ef2def3

    SHA1

    5a1aeb2267140a6cb14cc9ba8db13d3f76be19cb

    SHA256

    f5c09f10fe58979e0a5dcbca3c79dcddbc2155a2f3363439d2bdca81b5e123d9

    SHA512

    1feaec427eed31a964370efdfa06a2e68a6d5e3b18ed7a4897789fbf5858549cb1d18eeb6dd713afbb103975499449977ce5aa64f3fc775fd971025c21d911b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9dcd6ca38fcf17981f3354fe5f276678

    SHA1

    3123ed98b37124ee87f758e8d6a66ce64352bf27

    SHA256

    d8a1bf79ebe85a95415d5afced9ea20b9282ac5018f620c2958ffc6edb942a59

    SHA512

    c5ba72d7948de4ed4ce70d2340948cc9b1a80f3d68691b855b7bc92915ada0064ec55bff03a640c6a08cff6115c6cd15c5c567515b13b1ce69ec63ef3308606b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0afef1ca32c0ba18479a8d0478331709

    SHA1

    6c43a4955e7520ca22c3f19ec9718706a5618108

    SHA256

    329b9449472d1bf69c5e7b32d3f89c61663c7122124ca5510539285d5a7a699f

    SHA512

    459ea3d8eca7f87fa6839baac8461e816a81cf8c6d0ba6fbd640b5652123a36637145615a74586718079bc74e0cf521956c4207e803616d15d847b09eeaebc64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf60fceaccc74c08c30c5bb481968ff8

    SHA1

    e50b8002aa55095dfe5a6c9810a66a1828614fba

    SHA256

    31461df2a61ac32618e9ad082770313245665ffeebeb78a2bfbe9d3429ad3ee1

    SHA512

    e7ff64df09e1573e25ce0efe7f7be4f1e3f3cefe156a47d5fd79bcfe84f76a57d71ea8abd401df5a710a8d36781d86c29610ea28eef08307de00f6b4981be209

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07a7977470942f63e321f92e9eecbd6f

    SHA1

    86eeaa0b4a6c6e92b9b5ddbf22a42a38a88c20fd

    SHA256

    8855242d2d15ec8e82467fdb47e6e617be9d0b50c32a3b1c39d98baab57a5efd

    SHA512

    3bd66d8fcf1b8abf540f5d8b1a2e80807a81dfcd5a71f524f588b91178510de4d39b665711d0579b294c2f0dee12902fc1f9c92989411a7c9fa4ea0098fda88e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    225ca06ce406935ae063b6be5811ad41

    SHA1

    2a4e825631c2ab1e215954466698dd5d5f638f33

    SHA256

    25963361ca71ca7bf8ee3739cb31add8c31346aeb205950c0f86fbdd2b1460d9

    SHA512

    e93db496ecfdff96c6e2dc6b3cd95eaefbbe29c25e4fe8c675140fa98b2e2fca93c08dca5e133b18d9e2564fa0a5b77ca4cd552224f544c54cb3c455d89658f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e83d83d4dc8c02445dc50c64635d038

    SHA1

    334b1d4a51fe2d4e95260a784428e41882711d81

    SHA256

    6c586f6e7e28cf52e2fa9d4e803bd59bd8c020416777474879a5deabfe87bcb1

    SHA512

    e7aaa5ea0097315334b25540781a1f6df2809a92d7fd606e725733318e7fb378a82559a0450c3d801c08b6f1b3500634bf0b6e1ad050cdf964ee41b483ad314b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3970dda1ca9a5188969feb008a5653cb

    SHA1

    febb00a5604aa55b347ab7ff206550f98bceed55

    SHA256

    02212485946b1b02fdc638adc1c1f5e4edd97d7f884b0d6d4315e3b9dba567d9

    SHA512

    18a0521b2ae76e57dbc89d7f6427990c3d7fc800a5e027f52aab81f4f1bc0746d272d6bbce63b3a1feee63f224e4942ad74ccf551b1a34d72b14e5e22d6f42af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12080aa79af117600f9e1e9cfa8e859c

    SHA1

    2c3e146b9f0fde737dcb7605119efe202cf72b63

    SHA256

    0fea1010a0d03be1b86f262fb2227ea78a5ffa2e5ae6f28ac101a55e7482f915

    SHA512

    5626320a7db4a484c51cde86701755692c1c5b2f598d2d4148afd7dbc331f3a6772c27ca4d48fcb1b8efbe6355fc1b130098ef8644dcfe583af05e9af32da878

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e08a166036aeb76a2ff1be14bc0e40a0

    SHA1

    2a366a4c5623ac06d2e3b0e5bf13c5ab43fba6c2

    SHA256

    2c37bd2ec060e1dcf39a946d2a15d1df9658732d96557a3aa01a97d06de78b25

    SHA512

    e4a054278543b9b08406cf3a4585af28813518465e399dac45d666cf02c8c7101eddd575480b6e9cd6de15a23c757ee9371e6d61b329f30d04ef061316bd34c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f8e57b7db3515ee25f26debb2978af9

    SHA1

    65020e9e9b71f91eecf40aaa42b9e353bc6b6f19

    SHA256

    359f69b4beae2be9112578a7c5d8675be6b359715a7439b226340f0cc1a4dfd9

    SHA512

    c595bbf2722fd287bb5e7a952787d45a6ef8454a1c6ed48b7c84035b1eea1948a7e78b542c26f7f688dbfa08b6f07c434e7162e4a8cbb7fb95f84e3023c1c09d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    562a8fa35c8c1d6f4a31775de66312cd

    SHA1

    179710af913445377158b8bc24dfa16f45422e0c

    SHA256

    3fe1fcee6da11c0ee92ef98ed9b902c12e9d9236067b822fc32b057a06d657bf

    SHA512

    fe6ceea1475b6702f388c4419118c367f7371f83625f3583f304af1e97f2c1eb96978caa215a07eec9bce392134f977f37183150a13361dd463c0e0db7e2edff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7e226efcd368050488221ff9df9eee7

    SHA1

    eca71a7e26e17c287a5f4704bc5908c197010bc4

    SHA256

    ad437d7952eb22940dafd7419d993782f0f7e60d0771c788d35971fd5b492e25

    SHA512

    259c7fea4784eeed0cda3307a97d793c9211ae45f0b9bdd273224f83f569d8fc397dbe6d60a2fc477fe33e4524222f4e079ca6b0e9f9e1dd72c16b89299b9a48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2496ea818cc51f78be9ffd3030afe41a

    SHA1

    5f8a02c44ec794890a33649e770cf210ae9498d7

    SHA256

    ecf6760442b9ea67d64445a514f4772cd1eb34d8c81943f56c7996afa63bd745

    SHA512

    570a9d73ee0c270132a5f4265f82c4380c26c5feff93bf50b648128a70981c2950ed39f1ac9b748d376a85b3f26dcfdae6d96c1ba33d870ca48e59fd60f10da3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28dbb1b936735596d4222c011358ac4f

    SHA1

    09445a9427dff1d2651484b02be134669f5ec87e

    SHA256

    5d490985aacf017f1d9c803eb45c383bfe5ca4e5856f8cd003ea28fe9e0a49cc

    SHA512

    a4105a838531608bc808f98a0102b07d58f6fcb4540ab1a99664e48b5e79ddf0aa3222a5e887137f6e0b3f4a314cb054f415a60f2e3b309183c3acb319483cde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73ced8ebaddb9337ebd282e55662a853

    SHA1

    4796b8a7e380266c35b312425b3afdbf20f25cc9

    SHA256

    6f72e1419475f106252d26a62aa4801722108850f359ff482d5750da3f1de9a2

    SHA512

    1abd4eb3275a5f2e66b0708fdca24a39bbfa8114d6c58a45283b425d8a5d8224e4b31da90ef64682b18e18af7793d2d5e93f7fc8adbfa6360b83f0c2c383bbbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88b361263bea1a97b59a057ef010f019

    SHA1

    d48e2bd04f221243aa2954fdaf51b5d1e408ad30

    SHA256

    737cb00c086178a9c4e814ac2deabb8647c5b01bf3a2a46eb22b4c1922856b16

    SHA512

    368f671193028bcbfa25dcd56d7a0fd45d877777ebb2f1cd3885c0b587ddec08dbcc835aea11118dc9d9a9814302353c88e07eeca3e41da3d869a188e619fe36

  • C:\Users\Admin\AppData\Local\Temp\Cab5A90.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5B5F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06