Analysis

  • max time kernel
    117s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 15:50

General

  • Target

    LICENSES.chromium.html

  • Size

    5.1MB

  • MD5

    6b84319ee8a0a0af690273d3d2dcbaf4

  • SHA1

    857ca353e0582d100dcbc6cb6761bb4430d0cb90

  • SHA256

    fc2a256467fb4d4ff72be6c423e5961e98b418554deeec296aded0e757b9a585

  • SHA512

    26f9842bfdb429ef132cc1a930da9187071a339927eda402e8d54b5eb9e03067612cdadc3a2dad3d0977f8e6af18c05eab6ac91720221c6a0104f96638f85a8a

  • SSDEEP

    24576:yd97B+mnLiLsrDy2VrErjKCqzkU98wwg3QeXuh:0P+mLAqHBCuRoeS

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2224
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2224 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2424

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7197dd83dc79a7d51855353ad171d5fe

          SHA1

          f5bbcb2616b21ff2b8448e735a046171e6cd0928

          SHA256

          75bc27a357f7ffab2be9ef9cd4483c43781e20d8234f0d32324d717e497f9095

          SHA512

          8d470bce3961809c7e49732acb3bef836cb4f0649319ea00ea198216113dc8a75708204f36c49a13bc807f4e7bcb398efc5ec3a4d9a2590dfa79ea3a75b1d92d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e9292dbc9258e29a3b2d850130b019f9

          SHA1

          6cafe6248f720d82bb9d622b50ca357e1915de96

          SHA256

          05d62a5fb987370495b6bcacd995f8a46419c8450227f37d927c1eb0c5ae640c

          SHA512

          d763c878314915adc0092d7e23613795f57fb95740d8e70bc64843689ab541afc9757e2fbbfbfc7b3465c96414d7c70a52f6ddd9e2402f597d48a067355a9fbd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          03883a016eb4e151c52fafcda02047b7

          SHA1

          769abc5760b8c8d0415cd6a23b262f83a119ff04

          SHA256

          d3468061fd25765bab100a9f0913cc2fd5bf16d8667e2fb3e0db53b16d742628

          SHA512

          61ca45d8e621955084c5de8eec40148c9f4ddaa45a4ff4e434bbb47885a167e2d0c681c56134f142d31fe36c58fb3bb431269d3f03143b7c65574d4372986617

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          95aab755fcad8ab4c2e9223f2a51943c

          SHA1

          f9443712498edf7d2f2673bbd968c2e7c135786c

          SHA256

          30982bac9ba0c7c099e2d6a6e6a00e0df545f5f44f4a42d808cec9ff8bbfad47

          SHA512

          1aa629b5cd2341db5cd8f38b60d1d3285baccdad751822a79ed73cfdce2758ee781ae6aa0d9125a6764cf4568f1383ac95ad32b02c5cb71e3d590d3337d76994

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c0e8c007016136dee7d0e00c06a732d8

          SHA1

          1c0abbc2e8d13df19e94658168a3675e0483b976

          SHA256

          dfaed7ee1506bb600126bda78e71c533e683a0e2e30e79b9ef476a44094e4bd1

          SHA512

          0e892c723c4368fa2ae21d643167c3bac052d192418af1a7335d4fd524b782dff3b495d2f789c07fadc2bb4ef2d7dcae706defc8399eb16e7d197ea4a473cdfe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9bfb61e3bd2beda13c215dc88aed99ef

          SHA1

          6ac2e43aef05c6f224192b42a071c9386f626d1b

          SHA256

          d9c0437043236facddff4dce88f72b48a7f449b8e3e83512131e2768ac44f7a2

          SHA512

          049989ae02dab9169b9503335aa522b3d090520d4a7d0f2e8434b634c3dbdad5083b33470733b2a6be7b2f7002d3d1fe7c0e2dc5814546ce404790824fa845d2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5ad79649f9b91fd2c5ddf0951347ff4a

          SHA1

          dd516f538fc755b56eccaf88402f190da371a4d4

          SHA256

          9dd21006fb6ffa52bacb1540bbf1c4bde3e318c03a6b518f043fabbab26c61b0

          SHA512

          a58f736899da905d2b52f104005a8cee8b62b338eaeb5cbc085fa8795cc47cff6a2b1ff0d72a88fc0159e2a86d814d54fe0f2486d2804539aec98081dfd2fe90

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fe1e53026e9f0c41f9c090119a376720

          SHA1

          fe47692cdc92d7b29d94edf76ce3449dd79d20f1

          SHA256

          d07c7cc05129982348f540d04376fcf079b62d61cccd6ead8663ea8888ea9c55

          SHA512

          2a14d2cfa46cd467576c83cfc4df2c0bb9309cc00ee942114e177ab9da98ffbc976062c9162ca64c52cfa8e72b13cfdefd0160ef2078d3ad03423d6fbffcf612

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6baabf96e915f29cb525cd363826050d

          SHA1

          89f77960e579d683beb56b9de4571d23dd3122c1

          SHA256

          0e84fc507b156371abca43fa6395e60f4986be6e68827211d4745f4daad1ac2c

          SHA512

          5d4b4208c95fcec9822b824dfa43d6c1b9600b46ff24ee87b45d82306d047338bc1584cad99dc927a3768799f9ccf448081fc0ccee31717683d155473b21ef74

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          727fd6d51d8c56611cee825a2aba3ba5

          SHA1

          51d5daf8c8c2dc7818001fdce00143862e80abb1

          SHA256

          1a20073a661e20c2b17ccfefb815fac2f8fc3c8ea59f0bc3f1ed5feebbe5a308

          SHA512

          5f9d4b380862a0c5ebc04fa9e6e030a5b62973bca6ebaecf6f80e4a6e2dff9fd4877e1573298921387f81965427dcdc7e3b77c87b01bb37cd1c4d5d7403bd032

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          827b322d47eb223ccbd22f3419cd2531

          SHA1

          f681d08c8aad32900f4809f7847f179119f3dd38

          SHA256

          99a6832415595c660f53a9c94f7fd29e569a0f652032b1d37d5e3388cc237eb4

          SHA512

          6c26315c04408357da056c1cbd89a925be91b867557100f654c0038ce53ec6654990e023f813a68e07fd45a3810c7fc3a890c8f135c4660c74b3e341e1b9b762

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          65a9ae15d4acda582342a37faa88deda

          SHA1

          585353e8860ebc768851483a121ba6ad47640154

          SHA256

          c3fe75c330e41510add0b62efee947b7630edb76c41f5b7eaff24a9f28b83f61

          SHA512

          6eeb9ef38c4f46a47e4a57cb3bdabbb97eb9233505d2dc6e665d350da0dfe8bdc520965ed756599b15374c9f07b805a63b4f0740276f110841c4c07bd4aa21ad

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          71daca803b9e21ebf5de7807f9d01af6

          SHA1

          e40f8c5a940b043e25a3191503bf20e4ccfcc5c8

          SHA256

          eb06610a0d1e2b766db80afad31ccac41ea576d5dfc45ec9a0e45ec028016884

          SHA512

          027fe60662cc93d6fa428ed94db0bd2da17b6a502a312c7c8716d1c2cd11b71730d221f60641f5ee0f4050c6cb0c47add8738bcc08432616f3eada3a9c37096f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          233db35377a2f63ff483c712f7c1659d

          SHA1

          eadace82f7ac5a636aaaa50b24e2d47c9b244bb3

          SHA256

          87390d31e9634309ba733b6ce210ffbc3fa042ce5413c791c1b82e6eaf6bb4d6

          SHA512

          2396226f8abe7c12690f0d123d08771a5d396b4f86d4f048a7e9cd88f57f8cbdefef2a6861692cfb919bff856a577bbcce3731d3fac6f569504375e885e63e48

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b44a3cdc8fb564d4b31168c618afadd2

          SHA1

          2a08947e7d0c328109a1ad52aef18f050ca949d3

          SHA256

          4d6fc58c3a1325453f7c7fd2dea7277607fdcd6433d7850fab255ef70e011a2e

          SHA512

          6fc33c7d126091427532cec906014fe178375d5d5853cf3dd0652a92f75b0d6f5098adde1ffd3124f6ff9ea2d43aaa5d58c5fa7229361cf48860df4bd1239ac2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bab8c6a0bf415a3dafecf9ae26a9a139

          SHA1

          ed4856a2f6297de2c1f9c84f32d43b553dcfeb70

          SHA256

          a63199513bbfa9b5018c29b9ef8645d2ef22d5873767ebd231b3bae5fda5a981

          SHA512

          13e70acf7c05ee65c8e867f37b31db8babb5b7a067ab97dd3c248f59ed00981878be1605201dfa4df30034a36969fee31e039d6b6db821edee4017936745f1c9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0eb5108abb2d20bc04e1d8573a7b1918

          SHA1

          59adddc2f9688f6a580408d8e1dd1e3d68c9f3e2

          SHA256

          6c249ca9db2235460a0fc3944bfd7dd7385970289db9bf3dbae621324e7777cf

          SHA512

          0b8dc0584df9554d496a1ae388ffeb8892e438b225998e4a337d3502c8854c5c52b0bf7d6aec615f686abb9f03eb991616fea638b8f84e3e2a87b3014d936021

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d7a1f1e228cabb9d8885fd3ce59afc50

          SHA1

          434f03201f6a32c3fd3ae1c79a4124a6c5a09468

          SHA256

          a311cd85e34555d3f5ca62f0cab02644dbd83495af8c2d0c8f71983ec213724f

          SHA512

          253cd14318398ef66d15b2f0f37e98e7b83584985f258c4709bd15ad467035434bedf68cef2383dad828f11b1edcbcf13e28667572981b1242c5d73e70dd1d21

        • C:\Users\Admin\AppData\Local\Temp\CabD220.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarD31D.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06