Analysis

  • max time kernel
    122s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04-02-2024 04:54

General

  • Target

    35256345/chap2/EnumProtocal/EnumProtocal.html

  • Size

    1KB

  • MD5

    1d3046c47cf607a79dbeb9331fd844dc

  • SHA1

    0802fad5ad9a99538681ec323d51fff43ded351a

  • SHA256

    7e85eb120951d6a4a99c1eae18322194ab08ccff5a3a4bb68799d241946ad88f

  • SHA512

    ada888bbbbd4f4c077d520464374f4852d05ffda3301ce046e78b3b03c7f3ed830d5924a1f13cc35e08fe0722d33925a78da69061db43e7e4ec6d9077d64c5f3

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\35256345\chap2\EnumProtocal\EnumProtocal.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2384

Network

    No results found
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    799 B
    7.7kB
    10
    13
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    747 B
    7.6kB
    9
    12
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    831 B
    7.7kB
    10
    13
No results found

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a592d88a25f0a924c3222df1a2c9451d

    SHA1

    42bce1baf9c178ab0f01b225ebdd7dc06e61605c

    SHA256

    38d69d2a9b4e74146d004b9b4c07eda1004d5d7a3f045f01eda91803dc76cdbc

    SHA512

    d5b4c84159929b863534309a2c8c7af4bbb874b434310feb360e78e7fcdc8b5a868c46ea8dfacfb299c71cd7b95d9d61fb23dd32ee0d4276b476988d0472d941

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11007591b950780d9f24e2379aa7b776

    SHA1

    2d35c5596c557b21f729c153e62640c9ce548716

    SHA256

    c277f7123e3b571ddf6e7dd0977fb53dbf8b8c741fcff75e4753dbc0fe6863bd

    SHA512

    ad128cbb77236e99ec7c9b7a2bf02e93ef53094d1628b1cf7c98ecc86debc5e156eabff9a3372924faefe1b566938e665074c9f6b1b90f4cd1eee864d8c479c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    564acb8e94736d7f00c0aaec0ef2def3

    SHA1

    5a1aeb2267140a6cb14cc9ba8db13d3f76be19cb

    SHA256

    f5c09f10fe58979e0a5dcbca3c79dcddbc2155a2f3363439d2bdca81b5e123d9

    SHA512

    1feaec427eed31a964370efdfa06a2e68a6d5e3b18ed7a4897789fbf5858549cb1d18eeb6dd713afbb103975499449977ce5aa64f3fc775fd971025c21d911b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9dcd6ca38fcf17981f3354fe5f276678

    SHA1

    3123ed98b37124ee87f758e8d6a66ce64352bf27

    SHA256

    d8a1bf79ebe85a95415d5afced9ea20b9282ac5018f620c2958ffc6edb942a59

    SHA512

    c5ba72d7948de4ed4ce70d2340948cc9b1a80f3d68691b855b7bc92915ada0064ec55bff03a640c6a08cff6115c6cd15c5c567515b13b1ce69ec63ef3308606b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0afef1ca32c0ba18479a8d0478331709

    SHA1

    6c43a4955e7520ca22c3f19ec9718706a5618108

    SHA256

    329b9449472d1bf69c5e7b32d3f89c61663c7122124ca5510539285d5a7a699f

    SHA512

    459ea3d8eca7f87fa6839baac8461e816a81cf8c6d0ba6fbd640b5652123a36637145615a74586718079bc74e0cf521956c4207e803616d15d847b09eeaebc64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf60fceaccc74c08c30c5bb481968ff8

    SHA1

    e50b8002aa55095dfe5a6c9810a66a1828614fba

    SHA256

    31461df2a61ac32618e9ad082770313245665ffeebeb78a2bfbe9d3429ad3ee1

    SHA512

    e7ff64df09e1573e25ce0efe7f7be4f1e3f3cefe156a47d5fd79bcfe84f76a57d71ea8abd401df5a710a8d36781d86c29610ea28eef08307de00f6b4981be209

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07a7977470942f63e321f92e9eecbd6f

    SHA1

    86eeaa0b4a6c6e92b9b5ddbf22a42a38a88c20fd

    SHA256

    8855242d2d15ec8e82467fdb47e6e617be9d0b50c32a3b1c39d98baab57a5efd

    SHA512

    3bd66d8fcf1b8abf540f5d8b1a2e80807a81dfcd5a71f524f588b91178510de4d39b665711d0579b294c2f0dee12902fc1f9c92989411a7c9fa4ea0098fda88e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    225ca06ce406935ae063b6be5811ad41

    SHA1

    2a4e825631c2ab1e215954466698dd5d5f638f33

    SHA256

    25963361ca71ca7bf8ee3739cb31add8c31346aeb205950c0f86fbdd2b1460d9

    SHA512

    e93db496ecfdff96c6e2dc6b3cd95eaefbbe29c25e4fe8c675140fa98b2e2fca93c08dca5e133b18d9e2564fa0a5b77ca4cd552224f544c54cb3c455d89658f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e83d83d4dc8c02445dc50c64635d038

    SHA1

    334b1d4a51fe2d4e95260a784428e41882711d81

    SHA256

    6c586f6e7e28cf52e2fa9d4e803bd59bd8c020416777474879a5deabfe87bcb1

    SHA512

    e7aaa5ea0097315334b25540781a1f6df2809a92d7fd606e725733318e7fb378a82559a0450c3d801c08b6f1b3500634bf0b6e1ad050cdf964ee41b483ad314b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3970dda1ca9a5188969feb008a5653cb

    SHA1

    febb00a5604aa55b347ab7ff206550f98bceed55

    SHA256

    02212485946b1b02fdc638adc1c1f5e4edd97d7f884b0d6d4315e3b9dba567d9

    SHA512

    18a0521b2ae76e57dbc89d7f6427990c3d7fc800a5e027f52aab81f4f1bc0746d272d6bbce63b3a1feee63f224e4942ad74ccf551b1a34d72b14e5e22d6f42af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12080aa79af117600f9e1e9cfa8e859c

    SHA1

    2c3e146b9f0fde737dcb7605119efe202cf72b63

    SHA256

    0fea1010a0d03be1b86f262fb2227ea78a5ffa2e5ae6f28ac101a55e7482f915

    SHA512

    5626320a7db4a484c51cde86701755692c1c5b2f598d2d4148afd7dbc331f3a6772c27ca4d48fcb1b8efbe6355fc1b130098ef8644dcfe583af05e9af32da878

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e08a166036aeb76a2ff1be14bc0e40a0

    SHA1

    2a366a4c5623ac06d2e3b0e5bf13c5ab43fba6c2

    SHA256

    2c37bd2ec060e1dcf39a946d2a15d1df9658732d96557a3aa01a97d06de78b25

    SHA512

    e4a054278543b9b08406cf3a4585af28813518465e399dac45d666cf02c8c7101eddd575480b6e9cd6de15a23c757ee9371e6d61b329f30d04ef061316bd34c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f8e57b7db3515ee25f26debb2978af9

    SHA1

    65020e9e9b71f91eecf40aaa42b9e353bc6b6f19

    SHA256

    359f69b4beae2be9112578a7c5d8675be6b359715a7439b226340f0cc1a4dfd9

    SHA512

    c595bbf2722fd287bb5e7a952787d45a6ef8454a1c6ed48b7c84035b1eea1948a7e78b542c26f7f688dbfa08b6f07c434e7162e4a8cbb7fb95f84e3023c1c09d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    562a8fa35c8c1d6f4a31775de66312cd

    SHA1

    179710af913445377158b8bc24dfa16f45422e0c

    SHA256

    3fe1fcee6da11c0ee92ef98ed9b902c12e9d9236067b822fc32b057a06d657bf

    SHA512

    fe6ceea1475b6702f388c4419118c367f7371f83625f3583f304af1e97f2c1eb96978caa215a07eec9bce392134f977f37183150a13361dd463c0e0db7e2edff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7e226efcd368050488221ff9df9eee7

    SHA1

    eca71a7e26e17c287a5f4704bc5908c197010bc4

    SHA256

    ad437d7952eb22940dafd7419d993782f0f7e60d0771c788d35971fd5b492e25

    SHA512

    259c7fea4784eeed0cda3307a97d793c9211ae45f0b9bdd273224f83f569d8fc397dbe6d60a2fc477fe33e4524222f4e079ca6b0e9f9e1dd72c16b89299b9a48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2496ea818cc51f78be9ffd3030afe41a

    SHA1

    5f8a02c44ec794890a33649e770cf210ae9498d7

    SHA256

    ecf6760442b9ea67d64445a514f4772cd1eb34d8c81943f56c7996afa63bd745

    SHA512

    570a9d73ee0c270132a5f4265f82c4380c26c5feff93bf50b648128a70981c2950ed39f1ac9b748d376a85b3f26dcfdae6d96c1ba33d870ca48e59fd60f10da3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28dbb1b936735596d4222c011358ac4f

    SHA1

    09445a9427dff1d2651484b02be134669f5ec87e

    SHA256

    5d490985aacf017f1d9c803eb45c383bfe5ca4e5856f8cd003ea28fe9e0a49cc

    SHA512

    a4105a838531608bc808f98a0102b07d58f6fcb4540ab1a99664e48b5e79ddf0aa3222a5e887137f6e0b3f4a314cb054f415a60f2e3b309183c3acb319483cde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73ced8ebaddb9337ebd282e55662a853

    SHA1

    4796b8a7e380266c35b312425b3afdbf20f25cc9

    SHA256

    6f72e1419475f106252d26a62aa4801722108850f359ff482d5750da3f1de9a2

    SHA512

    1abd4eb3275a5f2e66b0708fdca24a39bbfa8114d6c58a45283b425d8a5d8224e4b31da90ef64682b18e18af7793d2d5e93f7fc8adbfa6360b83f0c2c383bbbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88b361263bea1a97b59a057ef010f019

    SHA1

    d48e2bd04f221243aa2954fdaf51b5d1e408ad30

    SHA256

    737cb00c086178a9c4e814ac2deabb8647c5b01bf3a2a46eb22b4c1922856b16

    SHA512

    368f671193028bcbfa25dcd56d7a0fd45d877777ebb2f1cd3885c0b587ddec08dbcc835aea11118dc9d9a9814302353c88e07eeca3e41da3d869a188e619fe36

  • C:\Users\Admin\AppData\Local\Temp\Cab5A90.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5B5F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.