Analysis

  • max time kernel
    137s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 05:01

General

  • Target

    LICENSES.chromium.html

  • Size

    5.3MB

  • MD5

    dfa12f4edccb902d7d3b07fae219f176

  • SHA1

    c2073440a5add265b4143de05e6864fed2c3b840

  • SHA256

    501f0b7ebf0be7ed8702d317332a0f8820af837c0a2a1d7645ba04352270e2b8

  • SHA512

    eee3a8e0eeae139ddd9369d0869c29c91007bf6c5b0d7982918d5a013214a9e80b9233e7c1ccb43124152f684f0b782831b0a6b3d126558261dd161230004e50

  • SSDEEP

    12288:FetnJnVncnJnknE9RBvjYJEi400/Q599b769B9UOE6MwMGucMEbHDuX04nNWQFna:WbXZ5IoWSL9bcwVR8mf+/cHBBaRp1

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2460
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2460 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2304

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e40767f396e5212bde87e7a6cf6f0f9e

    SHA1

    55e4c97414e16d133949ac3f00fa415090ce7f2c

    SHA256

    caa027210c6dfe890e019a82926a026d7ef182b86aeb4ee90077534fea32cddd

    SHA512

    4df668bbdd1f06fad52988046aab196379d83ff0513d4002fb4e837e466992c283866a48a68e6bf2d76ac72ea43a9f445263a1a6497f9546fb4b1edf5522aeae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bcd6c795327ff55ec7f5dc297433fb3

    SHA1

    8af3548910330a135d50725c97df94bc2bf0bcd8

    SHA256

    662af90c7442180f0cadb4c73e64b715a95411ecf05296bbbd0c66acca9acace

    SHA512

    dd0197b3b03b8f62b739f1c245280fb0b0bcb2d58adfa78e211d9cb7b119c7cc31d78d8e512353eaba7c189375e9ec1f0788301e2c77de8f6860402a000fa054

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8384c3dd11cebc8f427be43ea3ec66bd

    SHA1

    9ac972f2e145fb0db51bf601f92b16227568b804

    SHA256

    78777ecc39ee229b9c5f7d133f99a0b2a2d4b9a8ec8f102ea9e6d5fd296a47ed

    SHA512

    84a1eddf038b3ef4a858756719a718219ee08591c264cd2abfe01c62a794d61376d506846b52caf06b6a248f8b9d182b910fb59f7395fa6c9bf95dd378d86c55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cdfdcf6fcd66d153dcde3015b4021d6

    SHA1

    3a04634d7fd3db21817e47a6595dca53c022b562

    SHA256

    d8f7e7ac1670e2986cecee6739533394503d43af44cf1e9561687a9eb40e8b74

    SHA512

    571434439628ced5e8ccd7db7b26a170babef2c71520aee85c2330a0b1efdc175a04db6803e9312c40a5777c3bac32c1d3f9d4e9bfee7b06f30b92644434e791

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c05609ed491f2c1b5b631b4f107ab4e

    SHA1

    16378f0ecd1c6c1a8a37441f2808bd37520265de

    SHA256

    c0e576e029f8e4de1a2637b8eba8acaa83f9c5bd80e87a659c38c89840a98128

    SHA512

    4fa38eedd42c857bb41b54d5837bae2fecef9ee59aa6f4cc655ff3cdbd2849e6ff6b0341c73e652a03813de81b567ba3908f4a1d5336bb17250b221a7a6c2b21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad4bc8d0b298d9028dd148044a59e0be

    SHA1

    1c06eacb28a22701f3eb0765d1360c009c5fd60b

    SHA256

    3a5affbc94a23a762ed197744f4338b964ef6fc77587dcbd2479c59ffe371ce8

    SHA512

    bd58fc4b58becd81416261e6c9ea7d27e39a3bca7744b0e19543541fc38a80769eca45765d1a135bcfea0d4ec06bf10e1d5688d7aed76ca7e9d832ecad48fc25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cceb07d11a865e73f0e9476623c1f4a0

    SHA1

    99f371bbe820555590f3366a16d13562b7343c0a

    SHA256

    87fbf3c0579834980aa35d062a3fd965db4ce8bd2737eb60f46ac4255ceb7de3

    SHA512

    163488bb5b7be51d0bbd1dd21bd567aadead90e9ec4dce11d837a30c620a1af35ba8b61d9ab24607dd1543a40bd006747b9744dad4adf49fa4b84bc36a23b194

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a12faf5a599dab88cb521c512d2e698

    SHA1

    a0d1474fa7877050dcde04ca3b6c2cb036f753cd

    SHA256

    8507518d36dc835c94b37dfd8f053249e7c70219dd40f9cbce96a75de833c327

    SHA512

    6a4b78ccb3669242ff86c4a2bb07981e933f6af589fc00c84b1c1ed7d066644c887b5f837df75c8415b4b00d539623df72b670fd23dbc8221d987b5f8a9e14cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99755217c54f5f81245d7a1c8ac1ad06

    SHA1

    00e13b0396ac12b860867fc04d8031748cfbbf00

    SHA256

    b12f66628625ab572a7edc48d2b8a5b646b0214d655df5eeec418168a55eeb69

    SHA512

    d7335bbafa82eace986544e3ced80a52e43b25ca949364553f44dd80ee9956a04536acfb144026b4cb21021fd33698fe27f748a1c0d8c03b2a1c4b591f3ca9b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ceca5b98d830e29b50d31f0389e3130e

    SHA1

    23d3bc3347324bec784b3de0e78358124163f79c

    SHA256

    01d1b84e43cdef8afa9858fe6b3ca67976ac165023f52b8c5366268b418dc36c

    SHA512

    be9d3b1824c88693c3be7116c63e4ae85480f4aac5e4cc8ac739016371f0f37c95ae70af3c40e26ddac7b47d98fcfffb52e9432d377616e57c879226aba51364

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e58eb45e0a203eb5a4641f69b7f2e97

    SHA1

    f70c8599709a586527b1baeefb397cf2f74861cf

    SHA256

    e31dd65c42011476e8efe51b5a0b34222960acbf03ec8250dfa422715e92c0dc

    SHA512

    cd67b24a0d37e01f1fd227ec5b9608a532e9dc08129513ad2559b98948b2018a32b577be333ab0391d8ec1ce87a30ea5cad4c5a656fee8b420ba8ccb54f20102

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ca2b6a6344c8884fbe5c89db763529f

    SHA1

    3607294186cee6b4bd0855e0e16162943fbd884f

    SHA256

    dea29de5134170199c7e777aa6782780dc252422c177922696e36a945c1477d5

    SHA512

    2b0c49ebcf5f34c6c5c57044c69cb5cc1b52704cc5fdb25395ca54127da37897956be27f8f58117e0a2ce6f62a695359c7409584b5d577148c4a40f5b8953116

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fbd3c5ef9f3cb85a1aed8c499ce6726

    SHA1

    e16d03d2845ba99da19bc6f8aa9251b6e8932646

    SHA256

    305fe04ba5baa34e682f17649b444c1efc815f0bd546a082987046e2343f5db8

    SHA512

    91b85f3d5227e6abfbf29c4e2c1e58709e6dd13c3bf030aaea05acff85623a983da3e72ddc3c64ce65c59718d34f97687c9cea3ea47b7f15000b774ee357d070

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c2998a9f531500b0078a979a0844682

    SHA1

    f0528d15588d7217a1f1802b22c123909fa0edb5

    SHA256

    7ec2c68217835adf9a559a6b006ee04066839938f6e4004f66f5bb9d113ae6dd

    SHA512

    1223c04e42d129f3656265f1cdaed18c07aa438d413b85ae1191bf94fa4647b6217cd43a89d03fa6ef45fa83a529362614c25b5aabcb55e83b1def946f621d3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e32ba750e7fdf1b0a1ee6c203e689188

    SHA1

    5d43204f998b08c6e14928d6c37b9f0cf5bffd97

    SHA256

    a096c87db10426e26f0b36a010bba533a141506eaf1954393e987d104f6c415d

    SHA512

    3ef7b09222984f5c445af7e6637cc1d485ed7da390d10943cb82332f1a67030acfc80abe7d1f2a6ab5f5a7d85c390f256d129d88d8a8bf5a1ead81d5de7de475

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0930965a4faecc337dd5f3698f8a47db

    SHA1

    95f5f3c33c54e495b074a6f2fdb63b31c314e667

    SHA256

    3bc03cd7e01af8a6cee4727efb1d7498d269251345886eb470582ca4e1f92b2b

    SHA512

    b43aa309ca41d12cb1d0b26cefa30af1f63b277bd7d7ffb4ea6815cb80b1c61df8d5e64bc446b39ec88dd650db509c81ec7bcfe1b58ca09bbcc4803194fb3e39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a0782e3908fe09afd23cfaebfbe0c99

    SHA1

    b5d2b6bfe9652463459b62486fdc63b93c8307fc

    SHA256

    5cb4f8ca929ab0ae40f24c7196a6ff5cc536477c7b0fd5083a05d1ec0fd8e16f

    SHA512

    4ecb127c44d53ce1f4b166e23e6cbe372e84e87df3f1371fe1ab12e932a6cb8135ed57e8cedad28398e8babc998421a968f08c4580ded78420b24f502daef3f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79308443826600df2c75dee7e202d8f8

    SHA1

    4e64b9cfc7e1a6d6447f5158962407ff05f1f3d4

    SHA256

    e8123a0e5a422d9d16bdea959609ef8d5c39ee71bee09d58f8ad6b12b054df07

    SHA512

    994811d33214938362fd02570bae75b261624f39c88be4daf20920c981d738c814aac63ad63dc44289ce6c1f2641719499c12e6f2f9c04c316002cfd8bcd34ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0ac6c204a11b0abcea750283dffaa75

    SHA1

    e0e6810c41850c442d647fcfd1c1dcc4aae7c1e9

    SHA256

    794bb88488d56713de64e13fb31488007dc3cb299cab8d13b7f1b14032fe6543

    SHA512

    0befd2346189fe26ddefd6b3a9b57054c8ee60eb1362d70ffa88051c54cdca69677cbb6e834f5cf1470f4fa729ea9458a60f728837247c7495d5019b1431451f

  • C:\Users\Admin\AppData\Local\Temp\Cab9474.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar94F5.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06