Analysis

  • max time kernel
    120s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-02-2024 21:30

General

  • Target

    LICENSES.chromium.html

  • Size

    4.9MB

  • MD5

    8ac6bfdf42c0699b2ce9b3aadfc5a233

  • SHA1

    dd09db85821db4827d1a491993cb0311855d5d86

  • SHA256

    a6692be8af33d0673504a5d2bd519f4738aa872595eccc0434f5921185c0d56d

  • SHA512

    3868911062f5e19e570538c0104e54ce2bdce9b06185baa3ca5657724be1def9e56fecfe1e532fd504117cc1c8636b8058c0a5fa5d5c60c3d253e5d57cbfe08f

  • SSDEEP

    24576:bTUTBOmnLiLQrz62BrErzKm8bkUVQYwM/Q1OuS:/GOmLAOfNC+1C1M

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2104
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2104 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2976

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f2d3a5f8f6c1cb5447876d5ea7e9bc6

    SHA1

    8ee39c55c89e3eaddaccb77fc8147304c034731d

    SHA256

    c00c3c3944a844c0835bdc54f7f6c2627373709cb927301ed9ff7c6618106556

    SHA512

    6413a659edd4b1418cd22e799f6c808c2367e3535bc30d8a053da228236f8184d5d0e0ed82b5ab3b5c0c2e4f673f13b0dc661e058eab939f51e4f8bedc4fdb5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    660b4af865cfd325e6f0ebcfd1644820

    SHA1

    fa7afff374dfe85b534f61d73d961a6536491bc8

    SHA256

    a3060e0cd9e10991367418730af39c573c51d911a6ce5f7442fcb431c32fdc60

    SHA512

    f985561c44d9f3a1dc6dfc1499aeb16aff9ee483da8daa33d8de44c878f34c0a2a78876573b4ddae7b7afd6a0fb6a75ebff2500c006bce480e8b2ad079751748

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73ffc8f5cd9bc6676feec26d6d73538b

    SHA1

    4ecab7f444cc07d96a2f23667818129d4e93e271

    SHA256

    40fee4aaae2107dd4cd61183010e4a9ca1b0ec13fb0000a9cec314380f4e5274

    SHA512

    2dd9eb263929e3bccd7a0368367a5893cc534312b1e35541f3a251ca4c34ea5b0156f68957a5ffd7775796c8296301e8aa5f05704c04c8fceb8cd88cdc874780

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79000a038c2d76dfe3cbb4fa7926da1c

    SHA1

    2ec108cf078d83d148bf7b39c1cb775088ccb923

    SHA256

    26081f121332f44b728bb7dcd9eb89425b814b8b7160dbb184ce8b5b6b946905

    SHA512

    3c8f26e2f45fa8df28890d56aae0cc2629f42c485a8d3eb9ac839ce9ba047ec7198f094192bc0cfc40f904eff762aae48d4448a96e4ec4569b7b9d0e271e310f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    617f827da05613a6f4089361b90e3e25

    SHA1

    31e913d7b8e8e68c94e1df91f18f888c9555d499

    SHA256

    35aecfcf2ca2b0bf36fd34c1ce0b01818018635b7d56a3464bc253bc387033ed

    SHA512

    28140bce13cdb676ebc40a8b3f9259f798b4488f23ece3fdc6a927255312a55676cc7e8ad09e717fa387278b70041ce42c873dc4df1fbae356b404ba937415db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cefde60f2c172909cc888af261358562

    SHA1

    f9e2e27d90e6268240d7450e9adb0940caba2912

    SHA256

    cf1feeac61e68dae43c14336a80fb4aa863ff2c257e2e13ad58e0b85bfdfe03e

    SHA512

    12f98428c42216378e7edbbc67c7842e3414481c57420f2cd0c75dcb44bbac6834cf6d870a268f301fd4e03ddd19bd635de9eb65b97fe55724abe7365d069972

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76a944c1e9654bf497cb89e2ba7c05f0

    SHA1

    73efb92fe156895f3fb045b2baed2834c3ff788e

    SHA256

    bd028997851c5ea9f9d73274492db38625f7bd74a8b39684a645b225543008c6

    SHA512

    e8dfe5e4f59f18df8c1dd808eba61f45a68ee987b28a426c6e7b75d9a63b30c76a65acef64156e65d0b8c626f0cc7377ee9324f02d66e4336616383f067c1354

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68348f1899014360130ccc047334c5e8

    SHA1

    da0dbf6b9db66f93708fb3204545d9a374eb9914

    SHA256

    550b3ce81cff88bbb1ca56c97a10864ddaaf8279ea4cbc0db4462cc1730135ae

    SHA512

    c695950c2b080b066b724fde0cd3a9ac6246f9bd5354a3f7bd6b0a7ff64d0555ae7d9f1c7734eedcb9f40d213d62527091afe71bb5c1e1e257a73dd6c493637c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0944e35d21d9c57580ca02a5a84b9aff

    SHA1

    cf4ca44cdf03625658a19553fc76d3f6ba6fa0ab

    SHA256

    646210dbfdd8510e60f4a01b70f90daeb838ee0a47b8962c6a55f5c40f4b1ad8

    SHA512

    95b17fe7d68e0ba36d0d637898d58abc326f5856eb81e2a5c81881602c490f5b0fcf5699f939c3399a77722bcf10bbe981e757e4a8a083b525537118e5dda34c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67eab43a997f7ce682c4bf1b4bee4884

    SHA1

    03984c2f7c75319bebfd2e76a300eb7cb5bc3a64

    SHA256

    6afec746d3ccae86c53f4cbd70710d3aee24c38be22b503494496053bb7aafe0

    SHA512

    98ad6e01350737f4a490a5a6cb0b85b81ea32d4dbb978aa7d0d568cad53c6ea722aeeba4de024cd207010a2941022e00ffd47fdbf91cf77a2e71b839b3d94fa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49ee99d63719e34f6ce57438a7ddc2d3

    SHA1

    c80d827bdb1ea0644a8d808900cc7d5f3fa54590

    SHA256

    59ca4f21da6682c0a5fcc2c77655b414d1476202fae8baa9df7b11de94a104e6

    SHA512

    602c17458d8544341956c6a23ffc4fefa24af0761be52e2d0898c70ed0a3c48ac0b571c02e81c908a9386a5cfc90245ab92459db07b2e90021b11c4aaf956c3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9cfacd6625a126275ebde00a6617ea6

    SHA1

    d9ad105314fba925e155a421dfd0bd10ec2b55af

    SHA256

    14773c34ef13fb1ff67876499c439fe7baefaa4872755fef94e3cad98a8ac62d

    SHA512

    e2a869a8abf691f6c89106b73e31212bf5d213bb45011cccd396893d52bbaf965dfc69a53d8498ff934bdfeabce7a55c9306d31b8ca466af3394ed0a4473f490

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05d5cce9515929da2b45c7dccb5c032c

    SHA1

    98bf38465fa357a1de4531e6a0da698fadb90a56

    SHA256

    0512aeb365abc30e49c14807a46cf47276827d0803546e997c105986b023cd5c

    SHA512

    2f6d5c302c2400ff87f6aafabbc29b05343da92f305bba1c9b0655228f85f1649b80bc3a88aa7f8df47b7c54b12b21200f99b01b9da7d12f171de5ea9a1b9f17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdcb8339be693222a4888d06c32864c7

    SHA1

    d3a761adf6f60fa3c2ffe453d4c6fefc5d203908

    SHA256

    a4d1a2efe5b46b8e0e66706aae3deb3ce364ed5487aefba296b81ae60f6b6f5e

    SHA512

    646a2576d44dab595440bdf7c0690526616962ecb0480cea8c2a67187194931723f7b043fbe1a3c0b32e3992be9347defbf5000a525297e7cffd626c3c9893af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25579ab5fe80507221f8ce44e161abc8

    SHA1

    63a8936470ea535e2601a0398e836942e6fc841f

    SHA256

    1694f62b75a18a0201355f25952cf7380c9cfdbda7e1ca116ec058edcc92d4df

    SHA512

    439d5f3918486996724457a2bd5ddfd01f10ace6fba05645d835acfc5b7508ffe8f98c2696f08a336512a5df27c257458fe353bd0556a05626d4b40113934371

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a80988a5c4b8d6813de3e36f017fe62

    SHA1

    54cd7f51591bc536e277c74dc9cfc7af41eba916

    SHA256

    6d002a222b1544b00792096c830af2653f99214e7aa58e39c6e4ed9d519b9de2

    SHA512

    2d173377eda9d0188273065ac4207de63d0955f91da624951da44c6e60eb66e6aaa0b11c65bf4eb72e0564499bf90362fc29c7a6cfd18a2e9509fb1b8cb839ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2df0d293cb2ff9fb2648b0852b240c8

    SHA1

    a344cf24b6f6ab1806341bf12f21dabcec6cbc5d

    SHA256

    d632fb510a0a57b52af26a0fe765564ab490a28cbf3921a5264559b482bc5c65

    SHA512

    b9ef8ffe1ee7d0944526f7aca16bc7e1f6ec62add36a7beefde402817a22202e59f35a4259fd1ce9c7af2262a746da52a6a480667ee6eb29668b57a3d8a95c98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5940d0e259cce4bec073f6f4e580823

    SHA1

    85684dc8f6c1a1916275e5167ac771945c40166d

    SHA256

    b5497dfc300e73704a53e0d42875abd0319a73e8a275885f139e5901c32c8536

    SHA512

    c6df88ad43e63a191e718826ad02531448f5b8e678e113ef6a67555fe7cb03b088a525ff18f78e34b434e92b6437ed1c8da9c2b8182a2f982b5e24edb1a05597

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f40a09157658429f73850d14ebfa83c7

    SHA1

    31b8c53bf5e42350ae8b98369b6951d35c967fb8

    SHA256

    94327a80b08b57e4d1ffeed48bb49d5d7a003886c49a26d362edaf552e6925ab

    SHA512

    2cfadb7592db04aa797ee75142b3b266741b276c4b45c29c4954949c6c1ed6d33c2a2b1034b8756299bcfa3b85bd707d52f8e0e276aa972f856cd40a34c1dded

  • C:\Users\Admin\AppData\Local\Temp\CabBEA1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarBF4F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06