Analysis

  • max time kernel
    134s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/02/2024, 04:29

General

  • Target

    LICENSES.chromium.html

  • Size

    5.0MB

  • MD5

    5201488d4139cb6976431b6bc6026e49

  • SHA1

    566969157f998749e3c6b4ab6ac35097ea3a9df8

  • SHA256

    5933e91a3978bac616a0cc85e67833a17cd44b7e4702c074fe2a641e0baa638c

  • SHA512

    5e70a1056fbe49eb3766baefe0329f86f2c0870216d9e51dcb7849e3a0a8fa1e3e13bd66a4ea776e652e0e80bd540d700c9e219cb29b10c38146c67c31b7abb0

  • SSDEEP

    12288:FetnJnVncnJnkncnpWQtnwn7n9nJnCnZnGn3eQSnqnBnununFn/nwnJnqnvnOnqi:nPDt5WXWSNkbfwVR8mfJvwH92EdpV

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2520

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf0464cbb52bce2aa02d40062f891480

    SHA1

    96d088dca65629320465884be7c891be0decaa29

    SHA256

    7742a9b22843178ad2e1eb0809193795065e1ea7589af03b40e05a3dfc598c48

    SHA512

    6474568a46078f42b3077a86b741d0fe1aad8118cdf7e8d5a182a955631de379205189b59d5c2459a39179636181fa1ac1cd4f98e3cf57c4dd83b1b637eb8577

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe84703e82073f0c9c00af6cc287b8d5

    SHA1

    aa1b5c471295d4bb67b02bf58fa3e6a8546b23a7

    SHA256

    dd9357c683441fff1006be13a5cd4b9b18292cdcbee56ba4790a143aa57519bf

    SHA512

    8d2c94f45c9695ae8ebd4f1f8f014dc28c58abee13d63730abf86d4481ec79f673d6b4b372842798a8554b73cf2a11187b9c4903f3bcaf270f55f57b2dd6dbe0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31e638349bc48ce092f2caf553cb980b

    SHA1

    ccb141e464af6e266d44852d0ecce8d1d7e13175

    SHA256

    12df0ec18d17ac309948a1fcaec83e123328c30a80d5bb3daa57412a4d4f779d

    SHA512

    22c9f3f29dd0febd1b63edac728098fcac712ee5d8e0542c96004fd36d3cc9b2aab79cd605644bf3e88fe37ee4c304ebf511295e01109b06bf9411d843ee6f29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    611478080ad6d1a113029ec06c5fc2da

    SHA1

    99da22a183d815d40090cd89de0f08acf3d3dfb2

    SHA256

    abb0b9ac0a6bdd2a9ebbcc425d7837742bb8337f213218cf047dd961c3ba4769

    SHA512

    1df3241b16edc070ce9cd8f57d4e7ad9cdaa2dc8b8804aa03430e60f7c8517df6132be9b986e54d246e1178920284f5b2731d154ee79981ae080be332acf4f32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50bbec1839f65e5deab3f1bce2a8054a

    SHA1

    a8353d4bd56dbdfae009681c26a203dd7db745ad

    SHA256

    d77c95df50f6057156acbbc1b0fad55d1e1b5dff2528841d49302ed2c30c05ad

    SHA512

    a71998f2f9258673d44d50116833b8e10983398d5a5681ab8ddd629de2110df03c72c4e63396d76e3df457e4c4047836f0fb7514e6b1dd9186ed896f83fac8b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16d5976ea84d8d3d6b56656b24c685a5

    SHA1

    02e3414310d2597a9fa4c6510ba1cce254b88efb

    SHA256

    31d0a1eb65e7f5d898f098a02dd48a1021ec6358192deafd09b08d0d446350b8

    SHA512

    9ee157bad61b17b2b9dd94bdb14ed0f15bcaae8f62d1db0872b6c2ffd29eeb67135ea083bd68a18d95e20c874af6b00a16793f52c24b47d3e17ac1898bbcc655

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59dc78f9b1ab85f27b79f01a37ca8761

    SHA1

    ead3ce1d65781799daf40ee9d27436198d5ab1ba

    SHA256

    ec16e1f5e03572307e9bcbde8d23123af8ca9df27fda19b3f03c9fac1d0aec44

    SHA512

    b601e13958ec609da4613ca3d3594e8141c69c5804b2cd77714a860e2b15cdec50bfe7877ff9d8eb841468f9a16310d556876199ec4da4ff46a0c0004c054554

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33374ba6a67cceb4a7ed43a494c9c109

    SHA1

    bce339548677819214e3b9fcbd83534d8d28fd15

    SHA256

    dadf34d5e1fda42e9da2936862f9bc042e58c587571441cfffc23f810915d15e

    SHA512

    bb8fc0a2eaf7be8043370d8ac6878c128c18aaf80355f41c7d81d3b7a36a3d27fab7c70617683bf02d2c9d1c573186440dd84b890d06359f99de68f7e089438a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e790c094074716ce1b5a8426c200c1d1

    SHA1

    9dd1ac57a02687da23a1b72f380a5280b2d2c1f3

    SHA256

    e1df90b921c70299909cf4cbf28b863f2c03e95efc1f738fb4a15c8201b2c560

    SHA512

    2542e1af68997401c1cde310b7466c37869420a3bf70221cbd6933dcd2b6ad8c35e91b4ee6fe2f4b50e0706c4c56d7f6cfc7b2c0a5bb66ca3046315bf2c20d4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4036fe80a3141cfcd10999f7a72a7b90

    SHA1

    e1a910e6a129e3c14fe04f5a41bf6e3c12af406b

    SHA256

    dc34653d2655d03f104d86ed342135f9719eb3a31ffbbed66be39a3d12edbfe8

    SHA512

    1188698d5bf4f6bee2eea225c9b8c8f8569e9e970febd630ed9ae7b2fd9d7223987837e55a07ba9fa5205147a08784512089367e4442ffa9b8c9a8e42d0d16c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    330bbb8f3bc2e17f0dc5355989408f9d

    SHA1

    6545c2b6b285a92ba09182403a81ab04083b5d15

    SHA256

    07b2cf8240cb51311bdccd4522e9782ab71621cfe7867daf6f25149ed784c1f9

    SHA512

    26cee8ee3e91ad264ecdeacd7f68e2d9ee5c9b9905bf7314108f033eab4915aa5ed057a73c8c90d3b8c243a32b631e4bf44e92906553730142841ae98a9cb58a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5110315d0e564fb54231a190e620ecd0

    SHA1

    dce803342448946e9b83b064c7a87ac91fc9fe54

    SHA256

    de9482b7baed30352235792321bf7c7edc4d8345c61131dc65e016d0a63090d6

    SHA512

    ba02274d3d64756e7770c20ead7c4b4ada4a42d82e5ff8f28d341fafa1c2288108c1cfb98f26cdf8e0de0b2d948d090856f78177690315ab0afaf078a0dfaedf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4303bbe2f4f15b909c74ee081a97d5c6

    SHA1

    bb6e5a4f377d86e67311371445fe04c8961d08f9

    SHA256

    e5479faf3b53830f2d952120c565b1c878442d6eaea2ea54e63e12d39b6ac7dc

    SHA512

    e527adfbb6aa29fbc3f333bd3c42749aa344d509483e1a7165c1680a6088b37f9e93af6db2a40c8b7037fe01288d66f584e408cf3cb8a609fb6ab4641f5dfa5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    228fa8ba452fab40c75bc8c2964840eb

    SHA1

    d7b5b4be62a66a2a5902d14e1d67a53cef801b1d

    SHA256

    d4d69adf757dee602776c455d04cd960e2de6161e7428a7eeb7a1126cd300c30

    SHA512

    152058ba70bf0dbac5d3a50344a2ca46b56d42b9e6b3900e2cdc627ee9334f9f320a8fa1a883514d6960b634812c743ddc24a1a6d9c675992e4073eab966cb66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb75fee51dc1a667f23984d6eca8aeea

    SHA1

    a3ec2b70a4ee30cefabf44448755ced69f91ddcd

    SHA256

    9c324ddfedea58fda785944487275152d2fd75f1bd3aecb82808bf0473301875

    SHA512

    0c011d0b7098db77ecdc483cb45338b3577c04e69221fa123189f30f1d030c0b0ff29e68917e0651dd195129b07a6e0a113035fab0deec6a4095efb87e921f3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    473651fe7e8ca6f9af10ac599168d23f

    SHA1

    036deaf7363157a2879de813c532b1628a30475a

    SHA256

    829fd5bc3ae2e1fc0c881f5c156886576244f71e75e13f4b1746559645b2a9ce

    SHA512

    5ec56baa1d23eea73470fe6679c49ed5add239816b4ca775e96e79fad73ae055852d6fd102606a6358433f0412279884f040057df63d435da1208e664bf20474

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    839d074c3ea5fcbabc11c0b461a77435

    SHA1

    d3e03d8facab6ea6ca5ccb51d3f8976b702095f7

    SHA256

    d28e797d1802adc25b8ae1265feff909abd3008c64e2239f77b90db7dcf2d22d

    SHA512

    2f7e2c5dbb8879b264df18d78bf9086ca64b055c16343135b7825ac32cf9d182b57568b6b8dc113c5b4acaa3c805388c99559710707f6bb316d41256884fa57f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f704a4152a827561293954f304d733a

    SHA1

    a97306b93fb6d6a768780d6645d51e7291d21a64

    SHA256

    b2cccd7ca3a365078df7523728fc0a75c1922ba2abf753454d874c996bf04e14

    SHA512

    bf2c28d8427c0ea21137e7fe0ab17818cf375fb086aa5b6cec2c9316a9e386d1aa6264b84bbaf6d269ace6d74abfad89a623a6ec501354224d282a146efc3911

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10aa1830593446188f8474cc6c043397

    SHA1

    f24885252b859caa5aed1989fb97a1644adc0859

    SHA256

    6d2623554b865a6fa5012887a4c2045ee0ee3bd4bd4b57fd6be405250491e325

    SHA512

    783dbac29fb603bc8e4e9017527b628cf736a864121c94eaa58305d95561847aa9649f3811e58ba84ad93a96d32503bf57181ad65751d4a98312b47a891f7c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab5BAA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5C3A.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06